$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa File: dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa (raw, json) Hash identifier: jaAeVREZZHcIAp0+fWJoJL3fWK4xy8VK9AAbFEA/Mw8= Subject key identifier: 63:C1:EE:7A:34:9B:27:C0:9A:4E:7D:69:FE:FB:83:B9:D2:90:9C:65 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56CA05AEA1FF0F427AB300 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:ca:05:ae:a1:ff:0f:42:7a:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=3b2f91b7-ead3-4647-a721-a4cb80e6ec7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:a0:ca:a4:b5:20:2e:84:81:76:b4:0b:c2: 4a:4c:36:a3:66:ab:70:1d:38:b6:0b:6b:7d:76:e1: 39:97:e8:db:01:c8:82:cb:bf:28:a9:e4:19:26:51: 51:cd:dc:25:ff:20:a7:fb:10:fb:77:31:23:41:3e: 27:2b:eb:4f:30:06:fd:3d:c7:28:1b:4c:69:bf:2f: 74:7b:0f:53:12:3e:37:a2:d1:45:46:9c:4c:22:7e: e1:c7:f8:61:db:0f:d2:bc:3d:62:78:e1:22:55:8f: d3:e0:55:f2:f1:34:10:29:66:26:6b:94:31:f5:76: 0f:5f:59:cb:8e:2d:04:74:d0:11:c8:5a:cb:b9:7d: 81:36:17:56:b8:cf:c4:60:85:ae:31:f9:f2:9e:c6: cd:20:f7:ae:ef:c7:83:66:e8:82:50:57:e4:42:29: 36:b8:8e:89:2b:51:04:81:70:a9:a0:79:22:85:53: ea:16:1c:5c:24:2b:f2:22:b4:ca:76:35:f9:79:cd: 4b:75:8d:f2:67:bb:7e:b4:24:cb:98:8b:28:2e:70: 27:ca:2c:4e:de:56:a9:0c:1b:eb:58:bb:e3:88:36: 33:dd:a7:b1:e7:39:13:78:d4:da:22:5e:5a:39:4f: 7c:71:74:70:f6:e2:a4:9b:f3:06:25:43:6c:43:d2: 95:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C1:EE:7A:34:9B:27:C0:9A:4E:7D:69:FE:FB:83:B9:D2:90:9C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a9:e7:41:a0:28:a1:1a:c1:20:06:00:78:70:18:1f:2b:2e: 1a:1e:ce:15:d0:ce:09:93:ef:28:5f:c0:03:19:28:89:1b:e3: 66:53:6c:6d:65:84:e7:e8:c5:c7:b7:e9:57:44:5d:fb:6a:4e: 74:ac:d6:3a:df:1c:79:c2:9d:ae:22:52:7d:35:a8:24:11:96: 62:0a:ad:bc:c3:2b:d4:7c:27:87:2c:ec:7b:e4:2c:ad:01:ae: f7:0c:7a:55:4b:d7:6c:89:c1:01:48:5c:d4:37:a2:5d:19:c0: 3a:da:e5:3f:bd:74:3d:59:20:57:6a:30:5f:f2:da:08:48:6e: ff:98:77:af:12:3b:e7:a3:74:8d:ec:c9:e1:67:46:72:d6:a6: b4:b8:1b:6b:f8:7e:0d:13:af:84:25:ad:69:0f:29:30:ef:b9: 67:9a:9e:82:bb:97:72:5f:34:27:16:5f:d2:fb:9e:bb:7d:b2: e9:9c:21:0f:09:e9:85:25:aa:82:8c:cc:7b:da:df:72:a0:ab: b9:cc:af:eb:3c:fd:77:ba:23:54:4e:77:39:f8:13:84:46:8a: cd:0a:a4:63:d1:7d:1d:fd:12:f6:6b:1b:4a:57:9c:00:cf:a2: f6:56:64:8e:04:89:bf:52:56:d3:f9:10:aa:b7:01:a2:bf:bc: 2a:5b:d6:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsoFrqH/D0J6swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2IyZjkxYjctZWFkMy00NjQ3LWE3MjEtYTRjYjgwZTZlYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJGgyqS1IC6EgXa0C8JKTDajZqtwHTi2C2t9 duE5l+jbAciCy78oqeQZJlFRzdwl/yCn+xD7dzEjQT4nK+tPMAb9PccoG0xpvy90 ew9TEj43otFFRpxMIn7hx/hh2w/SvD1ieOEiVY/T4FXy8TQQKWYma5Qx9XYPX1nL ji0EdNARyFrLuX2BNhdWuM/EYIWuMfnynsbNIPeu78eDZuiCUFfkQik2uI6JK1EE gXCpoHkihVPqFhxcJCvyIrTKdjX5ec1LdY3yZ7t+tCTLmIsoLnAnyixO3lapDBvr WLvjiDYz3aex5zkTeNTaIl5aOU98cXRw9uKkm/MGJUNsQ9KVcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPB7no0myfAmk59af77g7nSkJxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZGQwZTVmYTQtNjU3Mi0z NDNlLTg4YjMtMmMzMDlhYTlhMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHep50GgKKEawSAGAHhwGB8rLhoezhXQzgmT7yhfwAMZKIkb42ZTbG1l hOfoxce36VdEXftqTnSs1jrfHHnCna4iUn01qCQRlmIKrbzDK9R8J4cs7HvkLK0B rvcMelVL12yJwQFIXNQ3ol0ZwDra5T+9dD1ZIFdqMF/y2ghIbv+Yd68SO+ejdI3s yeFnRnLWprS4G2v4fg0Tr4QlrWkPKTDvuWeanoK7l3JfNCcWX9L7nrt9sumcIQ8J 6YUlqoKMzHva33Kgq7nMr+s8/Xe6I1ROdzn4E4RGis0KpGPRfR39EvZrG0pXnADP ovZWZI4Eib9SVtP5EKq3AaK/vCpb1j8= -----END CERTIFICATE-----Generated at Fri Mar 14 09:45:31 2025 by rpki-client