$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa File: e3017d68-56f8-3650-bbac-2453ed2c4df7.roa (raw, json) Hash identifier: 1ZO1Y8i5rv/FS9eySTOJx4vvRLowTUNJgUBgLKCLTpM= Subject key identifier: 22:E3:8D:1E:5E:70:14:62:72:51:A2:44:D9:4D:5F:28:72:0F:9E:CB Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F432858481C9A753EE486AE2D6F84EA80 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 53508 IP address blocks: 206.255.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:75:3e:e4:86:ae:2d:6f:84:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=4f7ea383-0d16-43f6-afe3-e959b8bdf687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:0e:64:2c:1f:33:4e:53:c7:fe:de:96:71: 05:84:f0:5e:e5:32:0d:b5:ea:b8:92:a9:28:8b:4e: 58:8d:98:ee:3d:d1:78:4b:c0:af:c3:fc:d6:66:31: 6c:11:a9:55:ee:fd:da:16:c2:fa:18:4a:3a:2c:72: 9a:cc:8c:11:bb:cd:02:7d:ac:e8:82:22:20:01:2a: c4:cb:f9:05:c6:85:da:45:b9:6c:ab:d1:00:bc:3c: e8:23:88:f4:91:91:90:55:0e:f9:67:f9:7c:a7:b8: 9c:23:35:d0:98:29:d7:55:a4:3a:de:05:c4:ae:d0: 6f:ca:d2:09:2a:1b:07:39:d9:dd:ea:d4:4a:a1:ce: ab:17:d6:2c:0f:7b:8b:ec:d0:27:b7:71:2a:37:a7: 01:56:96:d6:00:50:b5:98:0b:b3:ac:a9:55:03:b9: cf:7a:17:05:ce:55:46:f8:92:ba:ef:4a:45:a6:ad: 70:88:1c:c8:7d:6d:2b:e4:54:ab:07:a2:aa:0f:8e: 33:5d:04:60:25:1b:6f:fc:43:88:7d:8a:07:c2:8e: 11:f0:6e:e9:9a:03:83:e2:ba:ba:2d:fe:c5:da:9a: 7c:45:45:e1:12:2e:91:6f:67:48:6e:43:0f:b0:40: 00:0c:9a:4c:07:38:15:bd:fc:97:be:a5:57:e4:85: 5b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E3:8D:1E:5E:70:14:62:72:51:A2:44:D9:4D:5F:28:72:0F:9E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b4:e6:c8:70:10:be:ed:2b:5a:f2:4e:7e:eb:8f:ac:e8:24: d0:e7:20:dd:e6:02:3e:d8:ca:c6:2a:24:b0:80:f2:1c:07:58: 45:82:d8:b7:1c:fa:5a:84:dc:7c:9e:b5:92:cc:1b:95:5e:d1: 70:91:6b:4e:66:e4:7f:b2:f2:a8:4c:2d:8d:f3:dd:5f:35:8d: 52:67:9e:a4:d0:30:c7:87:94:88:b2:08:e9:c0:53:3a:1d:e4: 48:03:ef:3e:ba:82:a7:40:ed:ee:f4:1c:0b:79:33:8f:14:b5: 48:7e:66:be:f3:e2:35:39:93:93:ab:fe:0f:58:db:9b:84:01: 25:a7:5a:f2:ff:25:ff:07:1f:04:88:53:8c:5f:dc:0c:92:1b: 98:bc:33:3e:7b:3e:0b:73:85:90:49:d2:85:61:65:ca:16:c1: 28:55:bc:61:34:a9:8a:4c:0d:2c:df:8e:1b:f8:50:7c:66:86: 7d:26:0e:5a:c3:b0:5d:cb:1a:f7:ae:87:3e:db:6b:74:84:ad: e7:bf:e6:5e:e0:80:44:2e:38:a1:b5:50:07:cf:44:19:b2:04: 3a:69:ef:ca:23:85:57:47:b5:11:fa:cb:1c:63:ac:a6:4b:b8: ad:3c:3e:1f:c2:32:a2:0a:d9:23:54:2c:5a:20:2d:c1:a8:b5: 5f:8e:5b:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmnU+5IauLW+E6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk NGY3ZWEzODMtMGQxNi00M2Y2LWFmZTMtZTk1OWI4YmRmNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fYOZCwfM05Tx/7elnEFhPBe5TINteq4kqko i05YjZjuPdF4S8Cvw/zWZjFsEalV7v3aFsL6GEo6LHKazIwRu80CfazogiIgASrE y/kFxoXaRblsq9EAvDzoI4j0kZGQVQ75Z/l8p7icIzXQmCnXVaQ63gXErtBvytIJ KhsHOdnd6tRKoc6rF9YsD3uL7NAnt3EqN6cBVpbWAFC1mAuzrKlVA7nPehcFzlVG +JK670pFpq1wiBzIfW0r5FSrB6KqD44zXQRgJRtv/EOIfYoHwo4R8G7pmgOD4rq6 Lf7F2pp8RUXhEi6Rb2dIbkMPsEAADJpMBzgVvfyXvqVX5IVbPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLjjR5ecBRiclGiRNlNXyhyD57LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZTMwMTdkNjgtNTZmOC0z NjUwLWJiYWMtMjQ1M2VkMmM0ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv//MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa05shwEL7tK1ryTn7rj6zoJNDnIN3mAj7YysYqJLCA8hwHWEWC2Lcc +lqE3HyetZLMG5Ve0XCRa05m5H+y8qhMLY3z3V81jVJnnqTQMMeHlIiyCOnAUzod 5EgD7z66gqdA7e70HAt5M48UtUh+Zr7z4jU5k5Or/g9Y25uEASWnWvL/Jf8HHwSI U4xf3AySG5i8Mz57PgtzhZBJ0oVhZcoWwShVvGE0qYpMDSzfjhv4UHxmhn0mDlrD sF3LGveuhz7ba3SEree/5l7ggEQuOKG1UAfPRBmyBDpp78ojhVdHtRH6yxxjrKZL uK08Ph/CMqIK2SNULFogLcGotV+OW3I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:48 2025 by rpki-client