$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa File: dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa (raw, json) Hash identifier: k33YreVv+POZ8uA9dgNln7ibt6wMjA6tK3wD7fr8RSg= Subject key identifier: 7D:EE:93:B6:6C:0E:A3:9F:00:B3:BB:6D:21:8A:ED:71:E8:CE:47:AC Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F432858481C9A6FC72D1774002F166180 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 53508 IP address blocks: 206.255.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:6f:c7:2d:17:74:00:2f:16:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=663ae851-eebc-48f9-9615-c6d5583f7a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:19:f5:9b:8b:54:7d:9f:fc:3c:fa:90:fb:c0: e0:b0:a1:2a:5f:50:1e:7c:f7:24:f4:7c:93:07:a2: 8e:da:04:91:95:72:9e:22:00:b8:97:f8:86:52:f3: a7:47:f8:72:b4:e4:03:29:9a:00:9e:cd:ed:8c:76: 0a:a3:2a:5c:1d:6d:e4:4a:34:6f:71:79:a8:cd:20: 2d:74:ff:72:6c:d9:9b:ad:55:7d:1d:ad:7c:64:31: 71:97:0f:23:03:91:b5:95:d5:a8:28:fd:02:b1:d1: e1:c0:ba:ff:aa:c5:49:8f:e9:b9:5e:8d:de:88:93: 21:01:a5:35:d9:33:84:9f:b6:cd:c8:98:00:23:c9: 6a:cf:69:eb:67:90:81:3d:ad:3b:45:14:b3:9f:f9: 6f:4f:a6:f7:45:03:ef:3d:ba:67:e8:ef:db:75:2f: fd:a1:b8:38:9f:91:89:c5:41:0a:76:e7:13:ca:38: e5:67:48:7e:fb:ca:c2:c0:fd:1f:ec:95:ab:c5:c9: 60:42:b2:18:ad:f6:86:4e:58:40:b5:fb:f6:f8:6e: 7f:7a:bb:7b:8c:2e:c1:66:18:ea:b3:a1:9f:22:fb: 65:0e:5b:81:95:cf:3a:e0:b7:42:94:0c:11:15:d8: 81:dc:83:43:fd:b9:37:4c:7c:1e:a8:1f:ab:00:01: b5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EE:93:B6:6C:0E:A3:9F:00:B3:BB:6D:21:8A:ED:71:E8:CE:47:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:23:dc:67:1a:6f:28:d1:7e:05:4b:92:28:41:3b:db:aa:e5: 4b:b2:e4:ef:ce:c7:b5:b7:99:ea:0b:6c:e9:de:d1:f5:88:cc: 11:55:34:18:17:7b:d5:85:28:1a:19:06:ec:e1:15:4b:5f:7f: c2:e0:06:6b:31:df:5a:b8:f5:b1:20:b1:c0:5f:2d:25:05:e1: 23:1a:37:0a:c7:47:a6:5c:87:08:dd:70:c3:f7:ad:19:48:cc: ad:3e:52:3d:94:02:53:9b:22:1a:33:68:ea:35:3f:7a:d8:c5: 50:66:ba:8c:8a:de:ca:2a:8a:4a:59:d5:49:c0:54:c7:29:6f: 5e:b4:1c:bf:46:26:26:aa:cc:a6:6b:c5:90:06:3c:80:98:2a: 0e:16:41:9b:f8:f5:6d:80:e8:17:18:57:ce:84:7d:7a:9a:3d: e1:37:e0:e6:04:86:38:c6:f3:df:65:88:d7:e3:0a:33:58:65: c8:7e:21:f7:65:b6:f7:6e:9b:8e:5e:c8:03:0d:38:62:8c:2c: 0d:51:27:06:9f:b8:83:65:6c:95:84:34:cf:f1:30:f5:81:3b: 4e:02:c6:57:4f:c4:19:73:46:96:27:49:2f:6f:8a:66:f2:ff: 98:4f:70:f5:ac:be:74:28:6e:08:4f:da:aa:c3:e9:18:f2:8e: 0d:24:83:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmm/HLRd0AC8WYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk NjYzYWU4NTEtZWViYy00OGY5LTk2MTUtYzZkNTU4M2Y3YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBn1m4tUfZ/8PPqQ+8DgsKEqX1AefPck9HyT B6KO2gSRlXKeIgC4l/iGUvOnR/hytOQDKZoAns3tjHYKoypcHW3kSjRvcXmozSAt dP9ybNmbrVV9Ha18ZDFxlw8jA5G1ldWoKP0CsdHhwLr/qsVJj+m5Xo3eiJMhAaU1 2TOEn7bNyJgAI8lqz2nrZ5CBPa07RRSzn/lvT6b3RQPvPbpn6O/bdS/9obg4n5GJ xUEKducTyjjlZ0h++8rCwP0f7JWrxclgQrIYrfaGTlhAtfv2+G5/ert7jC7BZhjq s6GfIvtlDluBlc864LdClAwRFdiB3IND/bk3THweqB+rAAG1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3uk7ZsDqOfALO7bSGK7XHozkesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZGQwZTVmYTQtNjU3Mi0z NDNlLTg4YjMtMmMzMDlhYTlhMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgj3GcabyjRfgVLkihBO9uq5Uuy5O/Ox7W3meoLbOne0fWIzBFVNBgX e9WFKBoZBuzhFUtff8LgBmsx31q49bEgscBfLSUF4SMaNwrHR6ZchwjdcMP3rRlI zK0+Uj2UAlObIhozaOo1P3rYxVBmuoyK3soqikpZ1UnAVMcpb160HL9GJiaqzKZr xZAGPICYKg4WQZv49W2A6BcYV86EfXqaPeE34OYEhjjG899liNfjCjNYZch+Ifdl tvdum45eyAMNOGKMLA1RJwafuINlbJWENM/xMPWBO04CxldPxBlzRpYnSS9vimby /5hPcPWsvnQobghP2qrD6Rjyjg0kg8w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:12 2025 by rpki-client