$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa File: e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa (raw, json) Hash identifier: N1gyBT2cTc+fA1ARFh60UcfE87ONPRwpdH76iMi00/s= Subject key identifier: 5D:EF:87:E0:05:A0:B7:FF:F2:E5:EF:8C:5A:9A:01:B5:C8:AC:17:0E Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C1A51EF64018E3475280 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c1:a5:1e:f6:40:18:e3:47:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=95dafa08-21d1-41b5-b859-70b35ef94f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:70:e3:79:b2:24:0b:34:c9:0d:4f:53:02: d0:05:65:50:3e:dc:3e:11:19:fd:a7:6c:66:34:0b: c5:94:24:32:38:a6:8b:8a:af:4e:db:5d:30:6e:a8: 2f:51:fc:d9:30:10:de:cd:d8:89:b7:77:88:e7:41: 24:99:25:6a:4e:98:b7:74:9f:f7:81:ef:09:5a:02: b4:7d:22:c7:7a:f8:3d:55:ef:25:ce:c0:82:07:10: f9:36:0f:03:f3:65:51:b4:19:b0:46:47:ee:33:b9: 8e:14:c4:e6:40:b9:72:ff:c2:05:8b:e0:19:15:73: 40:12:72:43:e2:ce:2e:ef:0f:85:b8:37:9c:f3:03: e3:ab:95:b6:77:b8:f5:a8:0c:d7:93:12:72:b6:d5: 9a:d7:b2:e9:3e:f5:04:f3:c6:00:b6:bc:74:3d:8d: 43:c4:99:71:11:9e:63:c7:45:cc:80:f8:84:4e:58: 5e:92:3f:73:dc:32:ee:2f:f4:a8:ed:55:62:9f:36: 73:bf:31:1c:7c:1d:55:93:4a:22:48:82:00:d4:9d: d9:db:2f:db:42:10:27:30:63:64:44:2b:79:55:15: c4:68:7d:3f:25:d2:11:9a:32:c5:67:35:ef:26:27: f4:fd:85:2b:61:f8:b5:46:57:fe:a2:d1:c8:69:17: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EF:87:E0:05:A0:B7:FF:F2:E5:EF:8C:5A:9A:01:B5:C8:AC:17:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:24:e4:cd:df:03:cc:4c:b5:85:a9:ad:bf:c7:9a:4e:45:54: e0:7c:7b:a3:dc:41:58:31:1d:8b:08:3b:df:da:25:3d:b7:e8: 6d:b9:3a:1c:8a:e3:85:01:cd:47:c3:fa:82:34:35:7d:12:9b: dd:10:27:a1:21:a4:ee:e8:f1:43:a3:1b:64:d4:43:ed:62:56: 60:45:84:34:51:de:25:9b:f8:38:b9:df:63:77:40:cf:e2:0d: dd:8f:3d:8b:7a:7c:d5:d9:2e:92:f6:ad:0c:56:a1:f9:5a:4f: 03:64:19:4e:19:6f:b7:8c:77:bb:b8:d4:e4:c2:04:2b:60:c9: fd:60:f6:43:b2:7a:39:c7:ce:4f:3e:e0:8c:3e:07:15:58:af: 78:80:8b:8b:31:49:9f:12:60:40:e8:29:a0:41:24:1b:05:cd: 39:e4:b8:fd:4e:1f:a1:6c:72:d7:20:99:b0:9d:6f:93:d5:7c: ff:67:21:9c:78:f8:80:1b:1a:5a:ad:ff:8f:51:2a:ec:0e:63: ac:78:6f:36:fc:89:99:ad:7c:aa:63:a6:81:8c:02:da:a2:37: d3:42:b4:8a:2c:69:78:03:2f:a3:6d:34:30:ac:11:45:25:04: d5:30:ae:ea:4e:61:0e:17:4d:e0:b7:28:fc:30:aa:b0:12:17: a0:82:a5:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsGlHvZAGONHUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk OTVkYWZhMDgtMjFkMS00MWI1LWI4NTktNzBiMzVlZjk0ZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Rw43myJAs0yQ1PUwLQBWVQPtw+ERn9p2xm NAvFlCQyOKaLiq9O210wbqgvUfzZMBDezdiJt3eI50EkmSVqTpi3dJ/3ge8JWgK0 fSLHevg9Ve8lzsCCBxD5Ng8D82VRtBmwRkfuM7mOFMTmQLly/8IFi+AZFXNAEnJD 4s4u7w+FuDec8wPjq5W2d7j1qAzXkxJyttWa17LpPvUE88YAtrx0PY1DxJlxEZ5j x0XMgPiETlhekj9z3DLuL/So7VVinzZzvzEcfB1Vk0oiSIIA1J3Z2y/bQhAnMGNk RCt5VRXEaH0/JdIRmjLFZzXvJif0/YUrYfi1Rlf+otHIaReTQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3vh+AFoLf/8uXvjFqaAbXIrBcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZTRkODliODAtNDQ0OS0z MzMzLWJkYTktODJlZWRhMGM5ZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzv/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMk5M3fA8xMtYWprb/Hmk5FVOB8e6PcQVgxHYsIO9/aJT236G25OhyK 44UBzUfD+oI0NX0Sm90QJ6EhpO7o8UOjG2TUQ+1iVmBFhDRR3iWb+Di532N3QM/i Dd2PPYt6fNXZLpL2rQxWoflaTwNkGU4Zb7eMd7u41OTCBCtgyf1g9kOyejnHzk8+ 4Iw+BxVYr3iAi4sxSZ8SYEDoKaBBJBsFzTnkuP1OH6FsctcgmbCdb5PVfP9nIZx4 +IAbGlqt/49RKuwOY6x4bzb8iZmtfKpjpoGMAtqiN9NCtIosaXgDL6NtNDCsEUUl BNUwrupOYQ4XTeC3KPwwqrASF6CCpVc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:16:36 2025 by rpki-client