$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/8c331a9e-96af-36b7-9340-fff260336dd6.roa File: 8c331a9e-96af-36b7-9340-fff260336dd6.roa (raw, json) Hash identifier: uwZY3Zmkvzvbsb6f3wfp+DtIiEkrmodmn5XpuP6jyr8= Subject key identifier: BD:52:3D:9B:D6:B0:B8:7A:50:B4:3F:FA:8F:C3:97:8C:CF:F3:40:0D Certificate issuer: /CN=bc4d5614-d1d4-42eb-a171-b3d234aef7a3 Certificate serial: 010D0C9F432858493ED3D3D719E01526EA908480 Authority key identifier: 64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/8c331a9e-96af-36b7-9340-fff260336dd6.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 35891 IP address blocks: 192.83.205.0/24 maxlen: 24 199.254.124.0/22 maxlen: 24 208.93.248.0/21 maxlen: 24 216.211.240.0/20 maxlen: 24 2606:bf00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d3:d7:19:e0:15:26:ea:90:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4d5614-d1d4-42eb-a171-b3d234aef7a3 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=9b21b699-175d-4214-8343-6151f1ee4992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:94:6a:c7:ae:49:d9:ce:27:e1:5e:d9:19: a0:88:d1:5d:a9:01:bb:2c:a3:55:52:46:65:64:2d: c6:bb:8f:74:bd:59:cc:15:5f:fa:06:8b:eb:7e:d1: 09:d3:90:66:06:be:2b:4a:1b:f0:e5:81:26:db:ac: aa:6b:35:f8:20:73:68:d8:da:bb:ff:51:76:63:62: 2a:59:57:e8:be:9f:18:88:50:56:92:b3:0a:31:79: 3f:4f:cc:dd:c0:2b:15:20:49:9c:86:e4:ee:48:36: 73:85:96:20:b2:e7:52:9f:ac:41:af:24:13:40:18: a9:42:47:5b:08:0b:21:d0:81:c6:15:cc:79:a6:12: f0:84:99:21:f2:78:2d:d8:76:d4:43:54:49:37:f8: 20:04:b1:e2:0c:77:24:b1:f1:e9:ff:26:b3:d2:96: 65:08:bb:65:ef:20:db:a0:e5:6d:ba:70:1d:a6:49: d9:9d:32:1b:1f:d8:6a:cc:bf:77:3c:cf:89:d6:e6: 2e:2b:fc:44:3a:26:31:7f:9d:9c:ef:f1:e0:18:20: 4c:e6:81:45:5b:e3:d9:ea:90:0f:1b:88:42:68:68: 7d:37:3d:95:ef:93:49:7b:e7:aa:dc:c9:ec:9b:de: 29:c3:c4:a7:8f:49:8d:5c:c9:70:7d:67:ff:08:6c: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:52:3D:9B:D6:B0:B8:7A:50:B4:3F:FA:8F:C3:97:8C:CF:F3:40:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/8c331a9e-96af-36b7-9340-fff260336dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.crl X509v3 Authority Key Identifier: keyid:64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer sbgp-ipAddrBlock: critical IPv4: 192.83.205.0/24 199.254.124.0/22 208.93.248.0/21 216.211.240.0/20 IPv6: 2606:bf00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7c:73:2c:b6:83:13:da:2c:99:80:f9:c8:c1:a7:09:f1:bf: ef:7f:ac:a2:53:22:15:7f:5e:9f:71:df:cc:01:4c:8b:74:f2: 3c:79:9d:9e:12:06:78:d9:5c:a7:4d:43:61:e4:33:ff:1b:99: 1a:88:fe:04:81:ca:c5:02:94:87:d6:2a:92:d0:9b:88:3f:64: 51:b5:dd:cc:a0:d1:06:c6:da:35:2d:00:88:40:67:6b:33:6c: fc:a8:48:f7:40:44:26:13:6b:0b:d6:c8:6f:f8:2a:e7:b5:d4: e7:8f:28:5c:9f:34:12:0c:29:8f:7c:4a:a3:35:b1:23:8c:21: 10:03:6e:ee:3d:2c:63:92:70:bf:23:96:9a:93:a1:f8:ef:07: 42:eb:db:f1:4b:63:4f:e8:77:dc:0c:73:b1:f7:d5:4b:a6:ab: 9d:19:81:5f:d7:a5:9c:3a:c8:d1:1a:95:ab:f7:a4:99:63:ae: 93:b9:f8:f9:7e:dc:a8:51:61:8d:e5:58:56:e3:bb:0e:92:d8: 59:db:74:e0:8c:7d:88:ad:b5:8c:da:2d:9f:7b:f2:16:c5:85: e4:32:d9:0f:f7:91:dd:95:16:35:ea:e6:97:89:a0:f8:9a:5d: a9:35:50:bd:6e:de:1f:0c:27:a5:fa:80:f6:62:72:dc:0a:08: dd:d9:14:12 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEk+09PXGeAVJuqQhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM0ZDU2MTQtZDFkNC00MmViLWExNzEtYjNkMjM0YWVm N2EzMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk OWIyMWI2OTktMTc1ZC00MjE0LTgzNDMtNjE1MWYxZWU0OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xiUaseuSdnOJ+Fe2RmgiNFdqQG7LKNVUkZl ZC3Gu490vVnMFV/6BovrftEJ05BmBr4rShvw5YEm26yqazX4IHNo2Nq7/1F2Y2Iq WVfovp8YiFBWkrMKMXk/T8zdwCsVIEmchuTuSDZzhZYgsudSn6xBryQTQBipQkdb CAsh0IHGFcx5phLwhJkh8ngt2HbUQ1RJN/ggBLHiDHcksfHp/yaz0pZlCLtl7yDb oOVtunAdpknZnTIbH9hqzL93PM+J1uYuK/xEOiYxf52c7/HgGCBM5oFFW+PZ6pAP G4hCaGh9Nz2V75NJe+eq3Mnsm94pw8Snj0mNXMlwfWf/CGymAQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFL1SPZvWsLh6ULQ/+o/Dl4zP80ANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYzRk NTYxNC1kMWQ0LTQyZWItYTE3MS1iM2QyMzRhZWY3YTMvOGMzMzFhOWUtOTZhZi0z NmI3LTkzNDAtZmZmMjYwMzM2ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmM0ZDU2MTQtZDFkNC00MmViLWEx NzEtYjNkMjM0YWVmN2EzL2JjNGQ1NjE0LWQxZDQtNDJlYi1hMTcxLWIzZDIzNGFl ZjdhMy5jcmwwHwYDVR0jBBgwFoAUZAiXsEeycIv0VtjcIYi3W/QsbAowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYzRkNTYxNC1kMWQ0LTQyZWItYTE3MS1iM2Qy MzRhZWY3YTMuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwFPNAwQC x/58AwQD0F34AwQE2NPwMA0EAgACMAcDBQAmBr8AMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA58cyy2gxPa LJmA+cjBpwnxv+9/rKJTIhV/Xp9x38wBTIt08jx5nZ4SBnjZXKdNQ2HkM/8bmRqI /gSBysUClIfWKpLQm4g/ZFG13cyg0QbG2jUtAIhAZ2szbPyoSPdARCYTawvWyG/4 Kue11OePKFyfNBIMKY98SqM1sSOMIRADbu49LGOScL8jlpqTofjvB0Lr2/FLY0/o d9wMc7H31Uumq50ZgV/XpZw6yNEalav3pJljrpO5+Pl+3KhRYY3lWFbjuw6S2Fnb dOCMfYittYzaLZ978hbFheQy2Q/3kd2VFjXq5peJoPiaXak1UL1u3h8MJ6X6gPZi ctwKCN3ZFBI= -----END CERTIFICATE-----Generated at Wed Apr 30 17:46:12 2025 by rpki-client