$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa File: 40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa (raw, json) Hash identifier: TH6z7eZNCqIlcVqUMtZN+2P/Ui7iQV3fbPpIE8AEt3I= Subject key identifier: 40:8C:06:DF:28:F7:03:2D:A9:C0:8E:F3:B2:05:7C:02:3A:5E:75:2F Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FCD6CBB944E52881A7E80 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 24.244.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:cd:6c:bb:94:4e:52:88:1a:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=d1a97f28-4319-4367-b5e8-692024401034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:40:74:ee:de:1b:da:8b:85:04:2f:c6:d0:6f: 0f:f7:d6:b6:31:7f:24:85:b2:23:e2:c6:1c:cb:4b: d5:d2:74:3d:97:5a:12:f3:93:03:fe:a3:bb:a2:00: ca:48:a9:3c:0c:4c:8d:04:6f:00:c5:b4:52:f4:41: c4:87:f0:95:8d:45:a5:df:e5:1e:bd:1a:87:30:c1: ef:da:3e:6e:31:5d:70:03:79:ff:63:73:55:cf:75: dc:f8:c8:b0:f1:a2:76:af:11:d2:b9:78:e7:e6:86: 6a:7f:cc:fa:eb:88:69:7f:5a:d2:e8:e2:85:f1:81: 2c:94:48:b9:04:b5:c5:7e:01:73:ab:5d:7f:8b:2f: 9f:54:34:7d:29:7e:22:0d:96:af:ba:6a:46:bf:03: 21:b9:1e:8a:d9:92:3a:5a:97:0d:19:b5:cd:11:c0: e5:42:88:81:cc:fc:f7:35:ad:77:2b:71:05:5e:e1: 20:da:2e:e4:83:b1:59:2a:ef:7c:a0:fe:dd:ba:b5: 03:97:b2:bc:0a:dd:f3:24:fd:53:74:46:c4:25:6b: a2:17:cc:12:c3:b4:60:5e:95:fc:3f:37:1f:6e:89: 83:7e:8f:88:d4:cd:bd:2c:b0:bb:df:bb:d7:5d:0a: 3c:83:9e:fb:99:ea:39:98:23:28:1a:00:05:5d:fc: 57:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8C:06:DF:28:F7:03:2D:A9:C0:8E:F3:B2:05:7C:02:3A:5E:75:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.244.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2a:aa:0d:b6:3a:68:5c:55:d1:70:01:e4:91:02:78:ec:28: 03:86:e2:f4:42:1d:ff:16:a0:3e:74:f5:2a:68:9a:a9:14:f0: e0:92:e4:cf:2b:10:4c:a5:d0:c9:42:4c:a5:96:b9:34:f0:d6: e1:97:3b:24:84:2d:0f:f0:78:db:5e:b5:47:0c:8d:b1:5e:77: 7d:e7:21:1d:ce:0b:5b:bb:4b:69:36:fd:ef:73:c5:5a:b3:77: ff:65:2a:b9:0a:83:c3:68:07:4d:8a:91:aa:2c:3b:41:37:b9: cc:13:53:08:5d:ed:ad:5b:43:99:b8:64:bb:59:2a:09:be:e5: 2f:e5:a3:11:96:58:e5:6a:c9:3d:06:0d:8e:56:95:d0:68:36: 90:de:77:ab:fe:03:d2:1f:3a:5e:b9:d7:22:fc:d3:bb:49:44: 6f:82:2f:2a:9e:4d:ba:68:a4:e7:2a:5b:b4:f1:2a:5c:ee:e3: fe:fe:8f:75:dc:e5:0c:cb:96:67:03:4d:bf:8d:b4:20:bc:eb: 18:28:cf:8e:ee:c1:d2:f9:0c:82:49:57:5e:47:bb:58:4e:1d: ad:af:34:8b:a9:1d:6d:48:78:c7:42:1e:25:97:03:38:30:4a: 22:8f:b5:49:ac:4d:13:93:67:89:e4:1f:c9:98:df:7b:46:f9: 4b:83:7b:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj81su5ROUogafoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDFhOTdmMjgtNDMxOS00MzY3LWI1ZTgtNjkyMDI0NDAxMDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0B07t4b2ouFBC/G0G8P99a2MX8khbIj4sYc y0vV0nQ9l1oS85MD/qO7ogDKSKk8DEyNBG8AxbRS9EHEh/CVjUWl3+UevRqHMMHv 2j5uMV1wA3n/Y3NVz3Xc+Miw8aJ2rxHSuXjn5oZqf8z664hpf1rS6OKF8YEslEi5 BLXFfgFzq11/iy+fVDR9KX4iDZavumpGvwMhuR6K2ZI6WpcNGbXNEcDlQoiBzPz3 Na13K3EFXuEg2i7kg7FZKu98oP7durUDl7K8Ct3zJP1TdEbEJWuiF8wSw7RgXpX8 PzcfbomDfo+I1M29LLC737vXXQo8g577meo5mCMoGgAFXfxXmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECMBt8o9wMtqcCO87IFfAI6XnUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDBkZmVjOWYtZmIzNS0z YzdkLWI3YzAtOTk1MWI1ZTVhMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAqqg22OmhcVdFwAeSRAnjsKAOG4vRCHf8WoD509SpomqkU8OCS5M8r EEyl0MlCTKWWuTTw1uGXOySELQ/weNtetUcMjbFed33nIR3OC1u7S2k2/e9zxVqz d/9lKrkKg8NoB02KkaosO0E3ucwTUwhd7a1bQ5m4ZLtZKgm+5S/loxGWWOVqyT0G DY5WldBoNpDed6v+A9IfOl651yL807tJRG+CLyqeTbpopOcqW7TxKlzu4/7+j3Xc 5QzLlmcDTb+NtCC86xgoz47uwdL5DIJJV15Hu1hOHa2vNIupHW1IeMdCHiWXAzgw SiKPtUmsTROTZ4nkH8mY33tG+UuDezU= -----END CERTIFICATE-----Generated at Mon Jun 16 19:24:56 2025 by rpki-client