$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa File: 09435df8-02ac-3656-b5c3-baaac1dd687b.roa (raw, json) Hash identifier: 5u3uBaEmoU2DU6WeZACXZ7fXcZvQcKnPn7Vedzjbn0I= Subject key identifier: 47:8E:69:FB:75:CC:E5:89:D7:3D:A3:69:09:F7:99:E1:80:05:99:1A Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FC4CB27DE662E1A0F5300 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 206.255.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c4:cb:27:de:66:2e:1a:0f:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=0f4466d0-c411-40a8-92b7-f90d63676c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:88:e7:65:24:ea:fd:31:e8:38:e6:89:ab:42: 8b:c9:2b:54:37:db:72:c3:b0:0c:6e:b5:70:53:06: 74:af:93:6b:67:bc:52:f0:88:79:0a:2f:fc:c2:db: 7a:3c:2e:69:3b:ff:ab:cf:5e:00:85:8d:02:57:3f: 5d:0d:38:f5:e1:57:e9:24:39:f9:30:47:01:6b:be: 37:d3:1b:83:fd:1c:9d:47:6c:e3:b9:3d:ab:38:7c: a8:b9:23:0c:6e:34:ce:07:47:06:c1:e3:97:dd:ec: d5:be:f7:7d:c0:35:d4:4a:d5:fd:fe:7a:5d:0d:1b: f5:fd:de:29:38:49:49:7f:0e:79:44:7d:fc:e6:fa: e6:41:90:1c:8e:01:a4:9f:76:d3:54:da:52:33:e2: 8b:0c:c5:dc:33:6a:cf:d9:a8:4f:b7:33:8f:72:79: fa:49:92:7a:d6:b4:50:47:bd:33:7d:6f:f7:35:ed: 59:3c:91:92:19:4b:15:e2:1a:cc:7b:34:be:22:f5: 6f:3d:53:dc:a0:bc:19:dc:62:f2:bb:ef:63:85:71: 13:81:f7:41:4a:51:11:29:d4:ba:82:86:52:02:e0: 1c:2a:7b:7f:f5:e2:1c:3d:3c:4c:87:05:8e:12:03: 29:b4:4c:f9:57:13:31:e7:e8:7a:33:33:2b:6f:17: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8E:69:FB:75:CC:E5:89:D7:3D:A3:69:09:F7:99:E1:80:05:99:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:91:03:53:72:d4:fd:97:1c:15:ad:7d:9f:71:6d:b4:d6:3f: c5:d4:17:6c:93:b5:28:3b:ee:26:4c:21:60:cf:2f:fd:61:1d: 26:81:fa:37:65:e7:c7:8a:a0:b4:4b:4a:16:75:fd:00:75:ef: 08:aa:76:4d:70:b3:8e:17:08:6a:30:b8:06:21:bc:5c:23:6b: 15:e2:9d:75:56:a0:4b:6d:30:bb:e9:07:aa:08:e2:be:eb:6c: 4d:3e:45:50:7a:23:fd:6d:03:7c:86:6b:c6:84:26:9f:d7:13: a2:f2:0f:98:d1:4f:bf:19:97:a8:85:b1:b6:d9:ea:12:8a:2e: 77:8b:7b:8f:1e:f6:25:d2:33:01:d3:ce:8a:fa:c0:99:07:8d: 75:1a:74:f7:fe:1b:a7:2f:70:2f:0b:6d:14:70:a6:4e:63:a5: 0d:a1:2c:33:83:ec:66:17:06:47:14:79:fa:99:81:ad:11:22: 7a:58:24:47:e2:54:43:31:56:0b:6a:e0:cb:79:21:83:ae:b4: a1:90:be:59:75:a4:51:f8:63:f2:17:c5:49:a2:e6:04:8e:e0: 6b:e9:60:6f:66:74:43:2f:28:ee:3f:7f:5b:0c:ae:eb:56:78: d6:8e:8d:ba:ba:d6:4b:05:ef:eb:1d:13:9a:31:00:0f:64:d1: f1:d5:58:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8TLJ95mLhoPUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MGY0NDY2ZDAtYzQxMS00MGE4LTkyYjctZjkwZDYzNjc2YzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYjnZSTq/THoOOaJq0KLyStUN9tyw7AMbrVw UwZ0r5NrZ7xS8Ih5Ci/8wtt6PC5pO/+rz14AhY0CVz9dDTj14VfpJDn5MEcBa743 0xuD/RydR2zjuT2rOHyouSMMbjTOB0cGweOX3ezVvvd9wDXUStX9/npdDRv1/d4p OElJfw55RH385vrmQZAcjgGkn3bTVNpSM+KLDMXcM2rP2ahPtzOPcnn6SZJ61rRQ R70zfW/3Ne1ZPJGSGUsV4hrMezS+IvVvPVPcoLwZ3GLyu+9jhXETgfdBSlERKdS6 goZSAuAcKnt/9eIcPTxMhwWOEgMptEz5VxMx5+h6MzMrbxef5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeOaft1zOWJ1z2jaQn3meGABZkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMDk0MzVkZjgtMDJhYy0z NjU2LWI1YzMtYmFhYWMxZGQ2ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmRA1Ny1P2XHBWtfZ9xbbTWP8XUF2yTtSg77iZMIWDPL/1hHSaB+jdl 58eKoLRLShZ1/QB17wiqdk1ws44XCGowuAYhvFwjaxXinXVWoEttMLvpB6oI4r7r bE0+RVB6I/1tA3yGa8aEJp/XE6LyD5jRT78Zl6iFsbbZ6hKKLneLe48e9iXSMwHT zor6wJkHjXUadPf+G6cvcC8LbRRwpk5jpQ2hLDOD7GYXBkcUefqZga0RInpYJEfi VEMxVgtq4Mt5IYOutKGQvll1pFH4Y/IXxUmi5gSO4GvpYG9mdEMvKO4/f1sMrutW eNaOjbq61ksF7+sdE5oxAA9k0fHVWJc= -----END CERTIFICATE-----Generated at Wed Jun 18 04:31:46 2025 by rpki-client