$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa File: 4424548c-9e14-33ec-919d-7d3e1baa168f.roa (raw, json) Hash identifier: HJ7I8PlffoQ9MeBNzJ73h9KjoTvEGGlnRYssm0xfAMo= Subject key identifier: EA:76:F1:62:55:F3:A7:6F:4D:FF:A0:57:85:CC:59:46:02:8F:41:80 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FCFAB5BD67165FA909500 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 206.255.120.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:cf:ab:5b:d6:71:65:fa:90:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=739323a9-3078-41c9-9346-a573c08fd340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:d4:70:25:95:a7:d6:aa:3d:44:bd:f7:46: bb:35:71:ce:80:71:71:3a:d0:ee:35:08:66:53:c6: c7:57:6e:a1:b5:3b:44:d4:26:b9:b1:11:f7:7e:d3: 8c:08:1b:e6:3c:28:52:b4:8e:fb:3d:c2:ed:4f:ec: 4c:43:22:39:79:64:ab:71:6f:91:33:e6:54:00:0f: 6a:0d:43:09:bf:42:0c:90:30:7d:86:b1:6f:e2:9f: 72:01:ee:48:01:c2:5d:06:94:c7:b2:58:01:0b:2a: 15:1c:f2:6d:dd:83:01:3f:6d:09:62:89:b5:f4:84: 25:2f:35:e9:e0:51:cf:46:15:46:5f:32:8a:72:fd: c8:c1:72:70:e9:67:64:ca:9f:e2:dc:ba:8b:68:e7: 17:cc:76:3d:67:13:a5:af:17:f1:aa:f1:04:74:7d: a9:d2:59:2d:89:00:f7:79:8c:e2:4f:98:a0:60:ac: cc:6f:8d:99:e2:bd:c8:36:bd:d2:11:b6:7a:83:32: 9a:df:09:bf:aa:cc:f4:33:09:c6:77:ff:c5:93:78: 66:f5:be:02:8d:fd:ae:34:8b:f8:ae:b9:e0:e9:d6: 18:68:5e:bb:48:51:02:34:0e:11:a6:68:e7:3a:3e: f3:b1:32:2d:d1:4f:93:b5:5c:ea:55:ff:0a:5e:38: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:76:F1:62:55:F3:A7:6F:4D:FF:A0:57:85:CC:59:46:02:8F:41:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1d:5f:00:d2:84:75:33:e7:58:31:45:07:fb:3f:79:59:2b: a3:a7:b5:cf:7d:f7:4f:d2:3a:ab:0c:8e:fb:fd:36:0c:7e:a0: 53:09:76:cd:0f:03:68:df:1a:a4:35:d4:28:14:3c:c1:38:b6: 0e:49:c4:59:47:b4:00:b5:85:81:f3:7b:2b:06:ab:f6:04:a4: 3c:c6:d4:21:13:9d:4d:67:af:d2:6d:b2:06:fb:32:21:aa:35: 1a:3b:cf:ec:83:5f:15:9a:fc:89:21:3a:7c:b8:e4:b9:ea:01: e4:9a:e4:e5:9c:00:e6:0b:ba:74:00:9f:80:81:df:06:59:9f: ad:0f:7a:c0:56:15:ec:48:f7:a7:fc:d2:3a:4f:46:58:51:eb: 42:30:eb:77:d9:d9:9c:d6:56:97:da:cd:45:fd:02:ab:6a:d6: 63:f6:13:a9:56:ad:72:3a:74:c1:4c:b3:c7:0c:4a:1d:42:e4: 5f:29:12:7f:b4:98:25:33:44:51:cc:15:47:2f:48:ca:e9:8a: 67:79:75:42:04:44:ff:ab:4b:ca:6c:d3:33:ea:12:47:9e:b8: 54:33:1d:44:03:be:50:e9:0c:86:95:23:bf:fd:b7:43:39:52: 9c:0c:99:e9:5b:d7:29:e8:4a:f3:0f:f7:cd:0a:10:a1:f0:7c: 04:79:2f:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8+rW9ZxZfqQlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk NzM5MzIzYTktMzA3OC00MWM5LTkzNDYtYTU3M2MwOGZkMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPzUcCWVp9aqPUS990a7NXHOgHFxOtDuNQhm U8bHV26htTtE1Ca5sRH3ftOMCBvmPChStI77PcLtT+xMQyI5eWSrcW+RM+ZUAA9q DUMJv0IMkDB9hrFv4p9yAe5IAcJdBpTHslgBCyoVHPJt3YMBP20JYom19IQlLzXp 4FHPRhVGXzKKcv3IwXJw6Wdkyp/i3LqLaOcXzHY9ZxOlrxfxqvEEdH2p0lktiQD3 eYziT5igYKzMb42Z4r3INr3SEbZ6gzKa3wm/qsz0MwnGd//Fk3hm9b4Cjf2uNIv4 rrng6dYYaF67SFECNA4RpmjnOj7zsTIt0U+TtVzqVf8KXjh5aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp28WJV86dvTf+gV4XMWUYCj0GAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDQyNDU0OGMtOWUxNC0z M2VjLTkxOWQtN2QzZTFiYWExNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgdXwDShHUz51gxRQf7P3lZK6Ontc9990/SOqsMjvv9Ngx+oFMJds0P A2jfGqQ11CgUPME4tg5JxFlHtAC1hYHzeysGq/YEpDzG1CETnU1nr9Jtsgb7MiGq NRo7z+yDXxWa/IkhOny45LnqAeSa5OWcAOYLunQAn4CB3wZZn60PesBWFexI96f8 0jpPRlhR60Iw63fZ2ZzWVpfazUX9Aqtq1mP2E6lWrXI6dMFMs8cMSh1C5F8pEn+0 mCUzRFHMFUcvSMrpimd5dUIERP+rS8ps0zPqEkeeuFQzHUQDvlDpDIaVI7/9t0M5 UpwMmelb1ynoSvMP980KEKHwfAR5L7Y= -----END CERTIFICATE-----Generated at Mon Jun 16 23:42:42 2025 by rpki-client