$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa File: efb511d0-3c37-335c-ba0b-442e98173e1e.roa (raw, json) Hash identifier: 8GsSQcWn9olr+tE/GxJytXLcZIQQONfobThqCGRS3Uo= Subject key identifier: 61:26:E8:A2:2A:23:DE:1D:2D:0B:1B:8A:9C:41:37:31:6D:C1:59:C5 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FC579AEFB9C4F46CAFA00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 206.255.152.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c5:79:ae:fb:9c:4f:46:ca:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=c7efa703-8547-4c4b-9a59-e8d5e5aed887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:34:38:46:00:59:8e:5c:17:8b:49:af:a1:99: 8a:ba:57:7d:eb:15:c2:5f:71:6c:34:07:7b:4d:12: d0:52:e3:f2:52:f1:38:16:c1:0a:7b:a2:ec:39:21: df:cc:c8:21:ed:14:08:63:c3:2e:f4:4f:79:97:60: a8:25:39:a0:7c:fc:ba:22:98:47:91:8a:b6:45:f2: c9:3c:c9:1b:3a:b5:40:e2:6c:ef:98:9f:58:be:99: 48:80:4b:08:3f:cf:b2:4e:5c:7c:4a:41:99:a9:bf: 99:a6:c2:0e:05:1a:34:8e:07:48:66:0f:01:fd:b3: c2:9d:71:a0:ab:63:f9:92:4a:0f:90:00:3d:89:99: 8b:0d:08:2d:19:c4:10:52:2c:5c:0f:bd:fb:78:f1: fb:ff:6f:51:ce:8d:d4:f5:60:ab:dd:3f:ba:ac:76: b5:c0:54:c3:76:5e:2f:18:6f:a9:68:50:d0:1e:dd: 1b:ab:65:59:ce:96:2d:72:91:d7:2a:5c:41:8e:db: 5a:30:4b:09:20:2f:a3:30:54:6f:05:db:e8:e8:1f: 01:2d:dc:16:03:66:c9:4c:65:b9:03:18:09:c5:c3: e8:cb:c4:1a:75:72:4f:8e:79:29:af:01:d8:a9:91: 6a:7a:be:fe:14:29:ca:c8:9d:e6:af:e5:32:54:38: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:26:E8:A2:2A:23:DE:1D:2D:0B:1B:8A:9C:41:37:31:6D:C1:59:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:af:eb:21:eb:97:e8:8d:9a:50:e1:48:3c:91:d3:f1:49:a6: a7:bb:93:28:af:2a:42:00:b6:40:62:5f:ab:c2:25:39:b9:11: 9a:fe:da:cf:2f:06:ea:1c:32:55:07:8c:af:3e:c7:89:cd:4a: 37:95:38:7a:cb:fb:70:b0:cd:95:5a:07:41:1a:a2:cd:d3:dc: 52:d8:3a:70:40:5c:86:c3:ce:55:42:63:49:cc:9d:17:73:8f: da:9c:82:1a:22:26:e6:af:ee:db:c4:7a:2c:de:ac:32:60:74: 12:5d:b7:2d:6d:8c:56:98:50:df:91:96:ed:c3:9e:b2:c8:bd: 2b:05:69:26:57:14:26:44:a0:e0:3d:a8:1a:df:9b:70:b8:e2: 52:dd:87:0e:40:65:17:6d:d3:4c:75:8d:b6:21:c2:cb:58:0d: 3f:8e:0f:c5:de:86:54:a1:fe:2b:ee:86:e3:bb:98:5d:8b:d1: 96:0d:36:38:10:11:c2:a9:73:c7:d8:96:56:b4:26:25:39:30: 4a:d3:02:5f:f7:84:fe:38:58:d0:16:f7:eb:dd:a3:79:ab:95: ba:ed:e7:ff:3c:f6:b8:19:9e:73:98:a4:51:87:1f:a6:5e:05: f9:e0:de:27:e3:cc:a7:8c:88:94:98:47:76:ee:ce:35:0d:e7: e8:24:9e:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8V5rvucT0bK+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YzdlZmE3MDMtODU0Ny00YzRiLTlhNTktZThkNWU1YWVkODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTQ4RgBZjlwXi0mvoZmKuld96xXCX3FsNAd7 TRLQUuPyUvE4FsEKe6LsOSHfzMgh7RQIY8Mu9E95l2CoJTmgfPy6IphHkYq2RfLJ PMkbOrVA4mzvmJ9YvplIgEsIP8+yTlx8SkGZqb+ZpsIOBRo0jgdIZg8B/bPCnXGg q2P5kkoPkAA9iZmLDQgtGcQQUixcD737ePH7/29Rzo3U9WCr3T+6rHa1wFTDdl4v GG+paFDQHt0bq2VZzpYtcpHXKlxBjttaMEsJIC+jMFRvBdvo6B8BLdwWA2bJTGW5 AxgJxcPoy8QadXJPjnkprwHYqZFqer7+FCnKyJ3mr+UyVDiDkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEm6KIqI94dLQsbipxBNzFtwVnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZWZiNTExZDAtM2MzNy0z MzVjLWJhMGItNDQyZTk4MTczZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiv6yHrl+iNmlDhSDyR0/FJpqe7kyivKkIAtkBiX6vCJTm5EZr+2s8v BuocMlUHjK8+x4nNSjeVOHrL+3CwzZVaB0Eaos3T3FLYOnBAXIbDzlVCY0nMnRdz j9qcghoiJuav7tvEeizerDJgdBJdty1tjFaYUN+Rlu3DnrLIvSsFaSZXFCZEoOA9 qBrfm3C44lLdhw5AZRdt00x1jbYhwstYDT+OD8XehlSh/ivuhuO7mF2L0ZYNNjgQ EcKpc8fYlla0JiU5MErTAl/3hP44WNAW9+vdo3mrlbrt5/889rgZnnOYpFGHH6Ze Bfng3ifjzKeMiJSYR3buzjUN5+gknr0= -----END CERTIFICATE-----Generated at Mon Jun 16 19:32:04 2025 by rpki-client