$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/d0850b9d-4bfd-38e4-b542-e85ba9bc54fe.roa File: d0850b9d-4bfd-38e4-b542-e85ba9bc54fe.roa (raw, json) Hash identifier: IWOqCN/8KP0hkqV3fgeFJCPFSYPqhsHJdbnk9q4IRjs= Subject key identifier: A3:BA:27:DB:91:D1:79:8A:CD:FB:5E:03:36:96:B2:2F:6E:E0:DC:42 Certificate issuer: /CN=bcb20664-51b2-4919-9c78-27ce58e571d9 Certificate serial: 010D0C9F43285848D7A64679244ADAEB952AF580 Authority key identifier: 22:02:C5:3C:A1:BA:E9:97:2F:1D:BD:D2:19:05:40:C5:7C:AC:A2:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/d0850b9d-4bfd-38e4-b542-e85ba9bc54fe.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 394462 IP address blocks: 204.69.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/bcb20664-51b2-4919-9c78-27ce58e571d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/bcb20664-51b2-4919-9c78-27ce58e571d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:46:79:24:4a:da:eb:95:2a:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb20664-51b2-4919-9c78-27ce58e571d9 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=8d1d1a27-08dc-482e-bb5b-617ced7dd01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:62:30:80:82:e6:bc:5d:97:d4:00:ef:09:dd: d7:e4:da:f6:75:89:43:9c:b6:d9:67:db:d1:de:04: 7d:7e:23:49:c0:e8:02:78:69:cf:dd:ad:00:49:84: c4:2e:6c:6e:5f:03:1d:b4:82:94:ca:02:86:05:7d: 85:83:9c:0c:d9:ea:7c:11:2a:d4:a8:21:a4:6a:47: 99:48:91:04:c3:5e:d1:db:17:04:03:08:67:3a:fb: 2e:1f:6c:2d:3a:7a:3e:2c:b3:49:cc:e9:dc:e3:56: b9:35:30:28:82:61:73:6c:20:67:76:2f:1f:ba:8d: 3d:ee:76:41:c1:53:a8:93:e8:d8:74:80:51:41:97: 30:a0:bc:51:06:c6:03:21:84:c5:38:a0:10:47:68: 42:88:9d:62:38:b6:fc:af:0e:5e:85:89:78:e4:d4: 8b:71:36:3f:af:d0:af:37:5c:c9:21:fd:9f:d5:3c: be:91:f5:8a:cc:36:87:fa:e8:e2:06:e1:41:9d:ac: d3:9d:12:29:f4:5d:5d:02:a5:e2:62:bf:b7:ae:3f: 20:98:eb:25:00:a2:89:d7:5f:17:7b:6d:91:16:63: 99:71:dd:36:bc:bc:c7:fb:01:60:0c:91:0c:3a:1a: ba:a6:7b:a1:e8:7f:75:53:42:2a:aa:bc:ff:1c:71: 7a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BA:27:DB:91:D1:79:8A:CD:FB:5E:03:36:96:B2:2F:6E:E0:DC:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/d0850b9d-4bfd-38e4-b542-e85ba9bc54fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/bcb20664-51b2-4919-9c78-27ce58e571d9.crl X509v3 Authority Key Identifier: keyid:22:02:C5:3C:A1:BA:E9:97:2F:1D:BD:D2:19:05:40:C5:7C:AC:A2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9.cer sbgp-ipAddrBlock: critical IPv4: 204.69.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d6:1b:d4:7c:96:fe:fd:0d:3a:40:15:77:3e:86:a8:a9:29: 21:3d:bc:70:1b:b0:66:f1:31:68:6b:3f:16:bd:6f:d8:3b:07: 86:15:41:68:70:8e:5e:79:ad:42:1e:85:5e:71:72:a2:b4:8b: b7:b4:7a:1c:57:77:ae:c5:0b:b9:88:fe:c8:cc:35:71:10:f5: d2:f7:14:d3:26:59:19:d0:e9:87:52:b2:ee:72:7f:2f:ec:7d: 7e:8d:a9:7a:5a:76:8f:99:2f:66:e0:ba:69:9c:fd:b9:5d:da: 62:d4:99:9a:32:e7:65:a3:fe:c6:c4:49:8c:b3:e6:62:ed:e9: dc:99:b2:2f:ef:8c:5a:16:42:80:23:15:fb:eb:dd:45:9c:ad: d4:1d:05:6b:3a:9e:db:7f:29:45:45:5e:1d:6d:92:df:38:22: 82:95:e9:9e:8e:f1:7d:d0:fd:f8:e9:09:27:1c:19:90:fd:98: fd:57:e4:c5:9f:03:8a:54:96:c2:1a:25:f0:db:cd:a5:48:90: a9:e7:22:1e:57:7d:a1:22:3a:e5:7d:ba:ff:5c:57:e9:88:72: b1:ec:be:4a:eb:72:2f:de:7f:16:81:34:e8:a7:45:e7:0e:3d: 1b:35:d7:3d:45:21:30:34:25:02:4a:7b:19:1e:67:04:8e:35: cf:60:d5:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpkZ5JEra65Uq9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiMjA2NjQtNTFiMi00OTE5LTljNzgtMjdjZTU4ZTU3 MWQ5MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk OGQxZDFhMjctMDhkYy00ODJlLWJiNWItNjE3Y2VkN2RkMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2IwgILmvF2X1ADvCd3X5Nr2dYlDnLbZZ9vR 3gR9fiNJwOgCeGnP3a0ASYTELmxuXwMdtIKUygKGBX2Fg5wM2ep8ESrUqCGkakeZ SJEEw17R2xcEAwhnOvsuH2wtOno+LLNJzOnc41a5NTAogmFzbCBndi8fuo097nZB wVOok+jYdIBRQZcwoLxRBsYDIYTFOKAQR2hCiJ1iOLb8rw5ehYl45NSLcTY/r9Cv N1zJIf2f1Ty+kfWKzDaH+ujiBuFBnazTnRIp9F1dAqXiYr+3rj8gmOslAKKJ118X e22RFmOZcd02vLzH+wFgDJEMOhq6pnuh6H91U0Iqqrz/HHF64wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO6J9uR0XmKzfteAzaWsi9u4NxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2Iy MDY2NC01MWIyLTQ5MTktOWM3OC0yN2NlNThlNTcxZDkvZDA4NTBiOWQtNGJmZC0z OGU0LWI1NDItZTg1YmE5YmM1NGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNiMjA2NjQtNTFiMi00OTE5LTlj NzgtMjdjZTU4ZTU3MWQ5L2JjYjIwNjY0LTUxYjItNDkxOS05Yzc4LTI3Y2U1OGU1 NzFkOS5jcmwwHwYDVR0jBBgwFoAUIgLFPKG66ZcvHb3SGQVAxXysot8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2IyMDY2NC01MWIyLTQ5MTktOWM3OC0yN2Nl NThlNTcxZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTWG9R8lv79DTpAFXc+hqipKSE9vHAbsGbxMWhrPxa9b9g7B4YVQWhw jl55rUIehV5xcqK0i7e0ehxXd67FC7mI/sjMNXEQ9dL3FNMmWRnQ6YdSsu5yfy/s fX6NqXpado+ZL2bgummc/bld2mLUmZoy52Wj/sbESYyz5mLt6dyZsi/vjFoWQoAj Ffvr3UWcrdQdBWs6ntt/KUVFXh1tkt84IoKV6Z6O8X3Q/fjpCSccGZD9mP1X5MWf A4pUlsIaJfDbzaVIkKnnIh5XfaEiOuV9uv9cV+mIcrHsvkrrci/efxaBNOinRecO PRs11z1FITA0JQJKexkeZwSONc9g1XI= -----END CERTIFICATE-----Generated at Fri Apr 11 22:33:29 2025 by rpki-client