$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa File: 456c2cd9-454a-3d06-9031-8440b4842af7.roa (raw, json) Hash identifier: lhXDVcWeCt3K+P1kECa83jvGEG0TOxG7fBz8r278P6E= Subject key identifier: 73:01:6C:E9:47:43:76:D4:2A:00:22:0F:4B:84:89:78:E1:EA:96:97 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FCE636A1256EE49859500 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 206.255.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:ce:63:6a:12:56:ee:49:85:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=fcd902fe-28c2-4ef8-b56a-ddc32124918c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:ea:87:cb:28:f4:43:55:52:cc:41:58:25: 54:84:fb:1f:50:71:6d:ef:ea:74:ec:b9:f2:62:85: 53:8f:5c:b1:67:bb:0e:fb:9f:4a:6d:ff:ed:6b:56: e5:54:73:f8:34:3c:93:c5:9a:83:94:ad:b9:71:96: a9:a0:c9:ed:4f:70:ed:48:66:7c:78:17:fc:8c:0c: d7:35:cb:fd:65:d8:59:9e:65:c2:15:f6:e1:11:fc: 40:c3:15:52:9b:67:f3:79:db:39:50:af:85:40:d6: 50:32:d7:90:21:2a:42:58:9f:f8:83:b4:f5:3c:e9: 3d:1b:55:9c:ca:f6:0e:b8:34:9d:86:ff:43:f8:03: 64:7b:8c:16:67:9d:b4:2f:45:be:2b:f6:59:85:bc: 41:25:f4:fe:fe:16:02:60:e8:48:88:3d:e5:1b:83: 33:c5:7d:35:fe:79:aa:51:49:54:a6:62:63:fc:7d: f4:3d:8a:2c:40:f1:5d:ba:83:4f:aa:b4:fe:f7:18: af:a9:41:96:65:c0:e6:20:45:ac:86:90:1c:ee:5c: ca:86:6d:41:6c:fa:5e:6b:38:da:30:fb:bb:01:3d: ab:6d:c2:77:c2:4e:39:61:ab:ad:bb:50:eb:fc:ab: e6:0e:41:25:8d:c3:92:41:09:1b:d9:4a:47:aa:ea: c3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:6C:E9:47:43:76:D4:2A:00:22:0F:4B:84:89:78:E1:EA:96:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:25:8a:73:e4:ad:b8:bd:99:4c:5c:1a:a7:80:24:23:10:ee: 3e:b7:cc:6e:19:29:2a:6a:36:4e:df:e9:af:d7:e3:1a:b1:47: 4d:ed:f8:b6:12:61:f1:87:f8:f3:ca:09:36:d9:37:8c:36:cc: 0c:9b:01:f8:41:1c:91:2f:c8:e9:e5:ea:cb:90:3e:3c:88:19: da:c1:19:06:ab:09:2e:3f:bd:31:f6:b1:56:72:64:74:35:18: aa:8e:03:3e:2e:97:69:b5:76:46:b8:2c:06:1d:6b:73:f4:a0: 43:6e:77:8d:b8:f8:25:51:c7:01:4f:77:53:1f:9e:31:82:98: d7:ee:0c:a9:04:f6:89:9a:8e:d7:ea:4c:c3:9a:f2:7d:5b:2e: 4e:d0:d2:10:59:bd:02:31:57:43:26:88:fd:3c:80:f5:8e:34: 01:df:79:f1:91:9c:a5:f0:76:57:a8:4e:fe:95:70:d2:73:88: 1c:fb:e3:b8:43:63:49:38:d3:30:81:31:f8:6f:42:57:2c:02: 3e:83:c2:b1:9f:93:33:50:b6:5c:a0:29:17:d5:19:ed:51:d4: ab:57:5f:76:e1:24:23:f6:17:68:28:13:4b:ec:52:9f:f6:22: f3:07:16:c4:5c:87:12:4c:4f:ff:8d:b0:44:30:7e:79:c9:59: 84:7a:3f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj85jahJW7kmFlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZmNkOTAyZmUtMjhjMi00ZWY4LWI1NmEtZGRjMzIxMjQ5MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hbqh8so9ENVUsxBWCVUhPsfUHFt7+p07Lny YoVTj1yxZ7sO+59Kbf/ta1blVHP4NDyTxZqDlK25cZapoMntT3DtSGZ8eBf8jAzX Ncv9ZdhZnmXCFfbhEfxAwxVSm2fzeds5UK+FQNZQMteQISpCWJ/4g7T1POk9G1Wc yvYOuDSdhv9D+ANke4wWZ520L0W+K/ZZhbxBJfT+/hYCYOhIiD3lG4MzxX01/nmq UUlUpmJj/H30PYosQPFduoNPqrT+9xivqUGWZcDmIEWshpAc7lzKhm1BbPpeazja MPu7AT2rbcJ3wk45Yautu1Dr/KvmDkEljcOSQQkb2UpHqurDrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMBbOlHQ3bUKgAiD0uEiXjh6paXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDU2YzJjZDktNDU0YS0z ZDA2LTkwMzEtODQ0MGI0ODQyYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMlinPkrbi9mUxcGqeAJCMQ7j63zG4ZKSpqNk7f6a/X4xqxR03t+LYS YfGH+PPKCTbZN4w2zAybAfhBHJEvyOnl6suQPjyIGdrBGQarCS4/vTH2sVZyZHQ1 GKqOAz4ul2m1dka4LAYda3P0oENud424+CVRxwFPd1MfnjGCmNfuDKkE9omajtfq TMOa8n1bLk7Q0hBZvQIxV0MmiP08gPWONAHfefGRnKXwdleoTv6VcNJziBz747hD Y0k40zCBMfhvQlcsAj6DwrGfkzNQtlygKRfVGe1R1KtXX3bhJCP2F2goE0vsUp/2 IvMHFsRchxJMT/+NsEQwfnnJWYR6P5k= -----END CERTIFICATE-----Generated at Mon Jun 16 20:05:17 2025 by rpki-client