$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa File: 1016c453-3950-3157-8238-b1385cd19da0.roa (raw, json) Hash identifier: LOa9giyyX3yJGsRYB0QNRvQXGk8e7MuwT4GDxxxA7qY= Subject key identifier: 79:CD:21:64:3E:75:1E:CD:47:6B:7B:67:4B:5C:9B:B9:4E:03:DF:A5 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F432858491246B8BDF80607C2F8916800 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 32128 IP address blocks: 158.106.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b8:bd:f8:06:07:c2:f8:91:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=3c276468-8956-4491-8951-11d5fc4f2352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:d8:37:93:9e:5c:ad:02:ce:f5:54:1c:88: c3:91:bb:8d:0a:d7:73:30:82:0b:29:e3:a1:fb:17: 6c:c9:da:44:63:24:b2:1c:d8:9e:b2:d5:11:f5:b2: 42:b9:ee:2c:d0:59:5c:3e:c9:71:9b:48:49:a6:38: 84:d0:3a:2f:1c:7c:bf:6a:3b:a6:61:a1:6b:54:c8: f6:f2:23:89:17:07:a1:2a:44:c8:96:0d:6d:de:36: a0:14:48:42:d2:ed:15:80:3b:25:da:1b:c0:c3:6e: 7c:eb:c6:91:08:20:94:a1:1a:c9:02:7d:7b:f9:fb: 26:67:c7:e0:48:be:98:53:8c:fd:a3:08:14:fc:be: 2e:39:1e:34:30:b7:d2:50:8c:42:48:2f:28:11:e5: cb:f3:1a:8b:4f:40:47:20:54:34:6d:bc:e1:3f:f8: c6:78:fe:46:4c:4f:f5:b6:95:ee:ee:6b:82:b1:63: 91:60:6d:84:2b:37:52:be:67:ec:6c:14:23:30:c9: f1:20:89:70:ae:39:29:2b:24:79:a9:c7:e4:01:eb: ea:58:53:4c:16:dc:ed:12:67:96:5b:32:4f:b1:e6: ca:c3:c5:ae:8a:fa:21:a1:99:cc:73:b4:d0:72:e5: a0:c1:54:de:a3:b7:b0:53:33:28:35:75:0f:ca:d6: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CD:21:64:3E:75:1E:CD:47:6B:7B:67:4B:5C:9B:B9:4E:03:DF:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 158.106.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:5e:4f:8c:39:4c:6e:f2:b2:8e:81:d2:3d:9c:bc:85:c3:24: 17:17:69:c6:36:e1:90:c8:76:d2:2c:2e:5c:f3:7a:f4:52:05: 57:59:fa:d8:4c:9d:4c:b4:6e:5e:0d:b2:80:15:97:fa:89:24: 63:b6:bc:99:fa:1c:33:a5:f3:f9:84:0a:87:39:99:46:a7:19: 43:56:27:f1:47:34:f2:e4:c8:dd:6f:2f:19:1a:d2:0d:cd:51: 24:7b:68:8d:30:30:f5:2e:8e:a7:9d:21:37:1a:97:75:50:02: a7:9f:ce:30:c1:be:08:23:f7:f9:11:06:02:44:9d:da:ae:53: c0:1d:59:ae:ec:08:37:69:12:a2:31:f1:12:71:83:5f:39:ea: ea:70:fb:a7:06:69:38:a7:13:1b:e5:b7:32:d8:fc:6d:3e:7f: fe:ae:4a:00:a2:05:be:45:3a:c4:fe:ce:d9:45:7d:64:83:c0: 91:30:d0:7f:00:c7:60:bf:26:68:f8:ce:2a:17:6c:37:7a:2b: 71:d0:0d:72:19:4f:5a:e0:8b:e8:b1:6e:d6:3f:10:61:64:b5: d5:d1:11:c1:7a:c8:26:4e:78:08:c4:a6:2d:5f:9f:6a:03:b0: a2:9d:03:95:cf:e1:5b:65:e9:02:c5:49:97:d1:27:a9:39:cf: e4:0d:33:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRri9+AYHwviRaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk M2MyNzY0NjgtODk1Ni00NDkxLTg5NTEtMTFkNWZjNGYyMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQbYN5OeXK0CzvVUHIjDkbuNCtdzMIILKeOh +xdsydpEYySyHNiestUR9bJCue4s0FlcPslxm0hJpjiE0DovHHy/ajumYaFrVMj2 8iOJFwehKkTIlg1t3jagFEhC0u0VgDsl2hvAw25868aRCCCUoRrJAn17+fsmZ8fg SL6YU4z9owgU/L4uOR40MLfSUIxCSC8oEeXL8xqLT0BHIFQ0bbzhP/jGeP5GTE/1 tpXu7muCsWORYG2EKzdSvmfsbBQjMMnxIIlwrjkpKyR5qcfkAevqWFNMFtztEmeW WzJPsebKw8WuivohoZnMc7TQcuWgwVTeo7ewUzMoNXUPytaLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnNIWQ+dR7NR2t7Z0tcm7lOA9+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMTAxNmM0NTMtMzk1MC0z MTU3LTgyMzgtYjEzODVjZDE5ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnmrOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFeT4w5TG7yso6B0j2cvIXDJBcXacY24ZDIdtIsLlzzevRSBVdZ+thM nUy0bl4NsoAVl/qJJGO2vJn6HDOl8/mECoc5mUanGUNWJ/FHNPLkyN1vLxka0g3N USR7aI0wMPUujqedITcal3VQAqefzjDBvggj9/kRBgJEndquU8AdWa7sCDdpEqIx 8RJxg1856upw+6cGaTinExvltzLY/G0+f/6uSgCiBb5FOsT+ztlFfWSDwJEw0H8A x2C/Jmj4zioXbDd6K3HQDXIZT1rgi+ixbtY/EGFktdXREcF6yCZOeAjEpi1fn2oD sKKdA5XP4Vtl6QLFSZfRJ6k5z+QNM0k= -----END CERTIFICATE-----Generated at Fri Apr 11 21:27:17 2025 by rpki-client