$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa File: efb511d0-3c37-335c-ba0b-442e98173e1e.roa (raw, json) Hash identifier: UHNL+t86+Vbwj8oWtHtrbtY6LR9qqHvEYohv8T5LzFc= Subject key identifier: E5:AD:AB:14:9C:C5:06:71:28:0C:D2:3E:91:0E:E5:77:EF:FD:93:C3 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C27885CA224B978A1DF8 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.152.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c2:78:85:ca:22:4b:97:8a:1d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=8de6c81e-118a-44ae-8a51-86ff69fcf602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:a5:9c:fb:cd:ab:ce:1e:50:72:fa:03:82: b9:cb:77:0f:49:bb:3a:b9:3b:7c:97:d3:36:4d:de: 21:41:f4:ae:0e:72:ba:74:29:c5:86:95:d9:da:73: 01:84:41:b1:5f:4f:cb:22:4c:e3:6e:8e:de:50:e0: 10:64:7b:38:b8:7b:30:fd:c6:c5:a6:85:a7:dd:c5: 0f:44:53:15:34:75:43:66:38:19:f7:8b:cc:31:2a: d9:7e:5d:21:c5:c9:a2:e3:45:a0:a2:34:3f:2e:c5: a4:8b:94:1a:22:db:0c:3f:0e:41:02:1b:79:bd:ef: 15:56:31:99:a9:08:38:11:4d:28:91:95:fc:9d:56: df:38:59:78:95:ac:f0:f3:ba:73:4d:42:86:9c:ba: de:2d:ed:66:77:a6:7f:73:df:46:b2:50:f5:48:c4: bf:6e:2a:c1:e1:8e:10:24:44:d4:a1:eb:36:e6:4a: 42:75:c2:e1:4a:88:b0:62:f6:b4:f5:54:10:4b:aa: 4f:f5:b2:26:cc:df:65:d5:26:e3:4c:d2:fa:2d:3b: 01:45:3d:fa:a7:c9:fc:66:f7:81:ee:0e:75:4c:43: 07:ed:5a:98:c2:23:2d:29:af:8b:72:f6:d6:cc:dd: 06:6e:da:77:b5:77:77:b4:1e:f6:ec:b7:93:a3:0a: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AD:AB:14:9C:C5:06:71:28:0C:D2:3E:91:0E:E5:77:EF:FD:93:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:de:f7:4d:d1:80:5c:6e:50:3a:e2:f4:75:c6:bf:ae:d6:3c: e9:e9:64:d6:b7:5e:fa:95:d6:99:c5:0a:7d:4b:74:d8:c6:7c: 58:47:3e:1d:22:11:30:61:f4:a9:d2:6e:3e:cb:e0:f6:74:8d: 73:09:99:64:ec:b8:24:83:38:52:be:f4:f8:c4:7a:5e:57:c7: 43:08:46:5c:94:bd:e6:81:fc:e2:84:a5:93:b7:45:fc:d8:88: 75:e0:5b:42:97:dc:ab:1c:70:6b:6e:c9:48:1a:9f:21:1e:ee: 9d:15:2b:cd:30:8b:98:c1:d7:e2:03:94:a1:84:a7:7a:0a:42: 87:b8:80:08:e6:0f:90:99:13:a7:27:e0:f7:50:28:e5:91:cb: 9b:6d:df:20:ad:f9:a3:69:0a:0a:a4:98:c5:a8:ba:e6:6b:61: 27:0f:d8:91:49:6e:f9:be:8b:08:ec:2d:60:7a:a4:71:49:18: dc:59:be:79:17:03:8a:83:ed:c9:5c:36:c8:b7:cb:f0:af:ff: bf:5e:d4:58:76:82:23:36:98:8d:ee:03:14:fc:54:9f:d3:c8: e1:d4:52:8b:75:22:b8:5e:71:1c:1d:24:4c:4e:11:33:c1:6d: 99:9d:e7:34:34:24:61:cc:7d:3c:fd:13:a6:f0:3f:17:43:4b: 15:3b:2f:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsJ4hcoiS5eKHfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk OGRlNmM4MWUtMTE4YS00NGFlLThhNTEtODZmZjY5ZmNmNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIilnPvNq84eUHL6A4K5y3cPSbs6uTt8l9M2 Td4hQfSuDnK6dCnFhpXZ2nMBhEGxX0/LIkzjbo7eUOAQZHs4uHsw/cbFpoWn3cUP RFMVNHVDZjgZ94vMMSrZfl0hxcmi40WgojQ/LsWki5QaItsMPw5BAht5ve8VVjGZ qQg4EU0okZX8nVbfOFl4lazw87pzTUKGnLreLe1md6Z/c99GslD1SMS/birB4Y4Q JETUoes25kpCdcLhSoiwYva09VQQS6pP9bImzN9l1SbjTNL6LTsBRT36p8n8ZveB 7g51TEMH7VqYwiMtKa+LcvbWzN0Gbtp3tXd3tB727LeTowofFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWtqxScxQZxKAzSPpEO5Xfv/ZPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZWZiNTExZDAtM2MzNy0z MzVjLWJhMGItNDQyZTk4MTczZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLe903RgFxuUDri9HXGv67WPOnpZNa3XvqV1pnFCn1LdNjGfFhHPh0i ETBh9KnSbj7L4PZ0jXMJmWTsuCSDOFK+9PjEel5Xx0MIRlyUveaB/OKEpZO3RfzY iHXgW0KX3KsccGtuyUganyEe7p0VK80wi5jB1+IDlKGEp3oKQoe4gAjmD5CZE6cn 4PdQKOWRy5tt3yCt+aNpCgqkmMWouuZrYScP2JFJbvm+iwjsLWB6pHFJGNxZvnkX A4qD7clcNsi3y/Cv/79e1Fh2giM2mI3uAxT8VJ/TyOHUUot1IrhecRwdJExOETPB bZmd5zQ0JGHMfTz9E6bwPxdDSxU7L2E= -----END CERTIFICATE-----Generated at Sun Apr 20 13:55:35 2025 by rpki-client