$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa File: 7e2175eb-4a04-310c-b9fd-72861a506b88.roa (raw, json) Hash identifier: G3qCWIjgBy1uyaaE/32uoZg5I7slATnxceSqfBm+HFQ= Subject key identifier: 41:60:71:9C:57:5B:70:3C:4B:73:2C:C3:14:21:1B:6A:16:22:2B:F9 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FC46DE765B20998C67080 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 206.255.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c4:6d:e7:65:b2:09:98:c6:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=a6b81984-6c62-4714-a537-4a7ea4dacbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:8a:4b:80:cd:c9:06:82:e2:25:12:1b:17: 67:a2:08:97:d0:02:80:3a:82:c8:d0:3b:96:2a:0a: a9:5f:3a:a3:3c:a5:d6:d3:f8:ed:1c:0e:e8:3f:17: 01:11:86:77:56:a3:b1:8d:b8:43:d7:7a:2b:ab:80: 9d:6c:5a:5b:66:31:c8:83:90:3c:cc:8f:1a:4f:82: 2f:48:51:5f:b4:8e:36:b0:50:71:69:3b:59:cd:8f: 43:78:23:22:ed:60:75:cf:96:91:66:3b:dc:fa:b3: 36:46:74:8a:bc:44:f9:f7:91:2b:01:ab:5f:a3:ae: 58:7c:a6:81:83:a6:66:a0:e3:84:01:3a:19:35:76: 5f:c5:14:a2:2f:31:eb:29:52:fc:7a:e9:b8:42:25: 3c:c0:94:f6:35:f3:e3:3f:64:db:a4:93:8c:b7:df: 42:09:68:73:4d:cd:1e:9c:05:64:ab:d0:72:c3:bf: 76:8f:65:46:ee:ca:63:d1:53:4b:35:a8:29:bb:24: 5f:18:68:2e:cd:e1:2d:ef:c6:6f:bc:df:40:6f:c1: 95:4c:0a:a6:c2:7f:aa:5c:83:b6:5c:f5:bc:f5:51: c4:e3:dd:1a:60:e1:9c:b3:5e:17:78:5d:b5:ee:ad: 16:f7:f0:00:6e:e8:0e:fb:2b:0b:6f:33:db:96:95: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:71:9C:57:5B:70:3C:4B:73:2C:C3:14:21:1B:6A:16:22:2B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:15:02:99:75:5c:4e:eb:94:c7:f6:03:96:9d:c5:f4:61:b8: 59:22:d0:49:a7:89:d8:50:01:0d:fd:95:3c:ef:b8:86:52:0d: 6d:f8:1e:2f:82:ac:18:e9:bb:cd:0e:7c:5b:3c:f4:54:c3:1a: c4:99:8a:ce:93:bb:bc:59:35:6d:c0:52:ee:58:f7:4c:a5:b5: ab:be:b7:e7:43:65:d3:37:4c:b5:dc:8d:0b:32:87:ee:ef:9d: 69:a1:8e:c5:eb:8d:97:69:be:f4:a2:de:dc:85:92:31:d9:60: f0:7b:e7:ff:96:9b:73:88:e9:14:9b:3f:c7:54:b1:1a:e4:c5: e8:0c:5d:a4:71:20:e8:39:7e:bb:56:0e:04:28:1b:2b:b1:d8: b6:75:97:40:64:26:ee:2d:50:c9:88:9a:fc:f1:5f:78:21:e3: 18:cc:be:b0:1b:2d:61:55:23:c0:73:50:1c:e6:36:7c:ca:0a: 9e:58:b3:a5:e2:57:c8:73:d6:10:96:f8:ee:60:74:c0:31:af: 92:ff:38:62:d2:13:48:bb:bc:53:45:7d:d2:0c:27:16:64:d2: bd:df:65:64:eb:e6:69:5c:fe:96:3b:a4:62:a8:24:7f:51:7f: 29:b7:3d:31:49:da:87:5b:fd:e4:39:88:42:6a:88:3b:99:08: 79:6c:9b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8Rt52WyCZjGcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YTZiODE5ODQtNmM2Mi00NzE0LWE1MzctNGE3ZWE0ZGFjYmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTaKS4DNyQaC4iUSGxdnogiX0AKAOoLI0DuW KgqpXzqjPKXW0/jtHA7oPxcBEYZ3VqOxjbhD13orq4CdbFpbZjHIg5A8zI8aT4Iv SFFftI42sFBxaTtZzY9DeCMi7WB1z5aRZjvc+rM2RnSKvET595ErAatfo65YfKaB g6ZmoOOEAToZNXZfxRSiLzHrKVL8eum4QiU8wJT2NfPjP2TbpJOMt99CCWhzTc0e nAVkq9Byw792j2VG7spj0VNLNagpuyRfGGguzeEt78ZvvN9Ab8GVTAqmwn+qXIO2 XPW89VHE490aYOGcs14XeF217q0W9/AAbugO+ysLbzPblpXhowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFgcZxXW3A8S3MswxQhG2oWIiv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvN2UyMTc1ZWItNGEwNC0z MTBjLWI5ZmQtNzI4NjFhNTA2Yjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzv8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEVApl1XE7rlMf2A5adxfRhuFki0EmnidhQAQ39lTzvuIZSDW34Hi+C rBjpu80OfFs89FTDGsSZis6Tu7xZNW3AUu5Y90yltau+t+dDZdM3TLXcjQsyh+7v nWmhjsXrjZdpvvSi3tyFkjHZYPB75/+Wm3OI6RSbP8dUsRrkxegMXaRxIOg5frtW DgQoGyux2LZ1l0BkJu4tUMmImvzxX3gh4xjMvrAbLWFVI8BzUBzmNnzKCp5Ys6Xi V8hz1hCW+O5gdMAxr5L/OGLSE0i7vFNFfdIMJxZk0r3fZWTr5mlc/pY7pGKoJH9R fym3PTFJ2odb/eQ5iEJqiDuZCHlsm1E= -----END CERTIFICATE-----Generated at Mon Jun 16 19:57:07 2025 by rpki-client