$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/43c42f57-7861-3049-b15f-7232871b010d.roa File: 43c42f57-7861-3049-b15f-7232871b010d.roa (raw, json) Hash identifier: ctXSSa/QzB+QX+PUULU96VNmI9do3FQWc/MXrsvDK+U= Subject key identifier: 84:FE:FB:7F:8B:D9:66:00:15:72:49:26:A0:41:8B:D7:56:AC:69:2D Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FCDB9289033FABF72B6C0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/43c42f57-7861-3049-b15f-7232871b010d.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 142.79.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:cd:b9:28:90:33:fa:bf:72:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=2a18572e-579d-4374-b648-b8bbb38c60f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0c:82:9b:27:b9:1c:4b:29:38:c4:a0:e5:f9: 1a:29:f0:8f:61:1a:ad:37:f2:34:2e:da:ff:87:eb: 7f:b0:7f:6f:20:49:26:48:3d:0c:7a:84:07:62:b2: 2a:c8:fb:7b:bc:75:85:18:19:8e:09:17:0c:b1:39: d0:ac:8b:de:0b:c0:78:34:55:ee:80:b1:32:42:bd: b4:4e:ee:26:b3:99:36:84:e1:f4:6a:c4:89:d1:32: 36:15:b7:22:eb:93:d4:1f:39:06:72:e6:2f:94:d2: 9e:30:4c:02:5a:3e:c3:05:a6:2f:d8:e9:07:0a:fb: ad:f7:0a:83:f4:8f:dd:9d:17:3c:b4:01:be:18:f2: 22:61:1c:0c:4f:50:26:96:c4:e8:d7:32:a1:80:dd: 1b:2f:d7:f4:dd:e4:82:a5:c1:af:46:06:38:96:d9: 7a:65:09:c6:16:8a:74:a4:b6:1c:ab:a0:92:05:60: 23:1f:4c:23:45:bc:f6:a2:fc:2f:48:af:9f:99:e2: f8:d3:ec:46:ec:2d:e4:23:fe:c4:47:41:58:21:62: d6:2e:26:ec:04:71:b1:3f:db:5b:af:c1:08:6e:28: 3d:8b:fb:af:7b:28:d3:26:b3:4f:23:6e:ce:0f:4b: 87:f4:db:03:06:06:0b:2f:59:e4:27:9b:b9:62:20: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FE:FB:7F:8B:D9:66:00:15:72:49:26:A0:41:8B:D7:56:AC:69:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/43c42f57-7861-3049-b15f-7232871b010d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:87:2d:3d:84:0b:40:98:5e:20:8d:dd:2b:aa:65:10:67:65: a0:11:c9:21:32:d1:ef:98:17:91:04:84:fc:49:c6:23:7b:67: 73:00:30:44:1c:32:2c:b9:30:5a:16:b0:03:b2:9d:f3:d5:8c: 2f:b2:70:3a:42:53:0b:d3:0c:80:fa:7e:fb:e5:9b:8d:44:7f: ca:af:6a:fa:bd:c6:b3:a3:0b:d5:8f:b5:ec:0e:7e:88:5e:fa: 5e:08:22:0f:3a:5b:76:7d:29:d9:09:ef:aa:f4:1b:99:fd:a8: 62:4c:12:cc:ff:e5:64:aa:d8:94:00:d1:12:9d:20:ab:50:b3: 0a:38:9a:fa:48:e3:93:cd:a1:e1:c3:e4:49:c4:8a:0f:d5:f7: be:ae:3e:a3:c4:3b:1d:3d:93:f4:cc:d3:ba:c4:69:ed:aa:98: bf:aa:48:37:fa:11:7f:fa:b5:c9:46:8c:51:5e:f2:d4:69:71: e5:56:a0:c8:e9:ac:bd:9e:60:0b:a5:54:7f:49:ac:90:21:8b: 0f:de:b6:e2:07:fb:2f:8c:25:32:b5:5e:99:5b:62:fa:b3:8a: ee:87:cb:e9:27:d6:ee:14:6f:de:5c:28:b1:bd:0d:a4:c5:55: 99:eb:41:d4:55:84:75:77:5c:8f:4f:f0:8f:de:be:13:65:15: 9d:22:af:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj825KJAz+r9ytsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MmExODU3MmUtNTc5ZC00Mzc0LWI2NDgtYjhiYmIzOGM2MGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigyCmye5HEspOMSg5fkaKfCPYRqtN/I0Ltr/ h+t/sH9vIEkmSD0MeoQHYrIqyPt7vHWFGBmOCRcMsTnQrIveC8B4NFXugLEyQr20 Tu4ms5k2hOH0asSJ0TI2Fbci65PUHzkGcuYvlNKeMEwCWj7DBaYv2OkHCvut9wqD 9I/dnRc8tAG+GPIiYRwMT1AmlsTo1zKhgN0bL9f03eSCpcGvRgY4ltl6ZQnGFop0 pLYcq6CSBWAjH0wjRbz2ovwvSK+fmeL40+xG7C3kI/7ER0FYIWLWLibsBHGxP9tb r8EIbig9i/uveyjTJrNPI27OD0uH9NsDBgYLL1nkJ5u5YiDuMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIT++3+L2WYAFXJJJqBBi9dWrGktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDNjNDJmNTctNzg2MS0z MDQ5LWIxNWYtNzIzMjg3MWIwMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk9yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOHLT2EC0CYXiCN3SuqZRBnZaARySEy0e+YF5EEhPxJxiN7Z3MAMEQc Miy5MFoWsAOynfPVjC+ycDpCUwvTDID6fvvlm41Ef8qvavq9xrOjC9WPtewOfohe +l4IIg86W3Z9KdkJ76r0G5n9qGJMEsz/5WSq2JQA0RKdIKtQswo4mvpI45PNoeHD 5EnEig/V976uPqPEOx09k/TM07rEae2qmL+qSDf6EX/6tclGjFFe8tRpceVWoMjp rL2eYAulVH9JrJAhiw/etuIH+y+MJTK1XplbYvqziu6Hy+kn1u4Ub95cKLG9DaTF VZnrQdRVhHV3XI9P8I/evhNlFZ0ir4E= -----END CERTIFICATE-----Generated at Tue Jun 17 11:13:22 2025 by rpki-client