$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa File: bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa (raw, json) Hash identifier: BkSed7ZOg7TW+3hgD32iQ2KlhR9Lb88RvPjGz6Y5y3c= Subject key identifier: 97:A2:1C:34:B7:CA:C2:BE:E8:3C:93:EF:E0:35:78:CB:57:47:37:5F Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858494E2EA646DE15EE4821B4BC00 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 394437 IP address blocks: 206.198.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:a6:46:de:15:ee:48:21:b4:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=a0f3acaf-205a-4fec-8fdb-d81c838a43e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:2e:f2:8d:6e:22:82:e7:1d:23:79:78:3b: 90:09:7a:ee:3f:a3:05:66:cb:23:ec:61:20:8b:82: de:d6:29:a8:9d:96:59:d6:61:d4:5a:bb:a0:e9:64: 7c:08:b1:54:6f:c5:9f:31:35:ac:ed:83:cb:32:cb: 3e:07:fc:aa:25:ad:67:43:e4:e8:bf:59:8f:81:2c: a7:e1:9d:4f:d6:44:7a:d0:3f:54:08:10:9f:4a:b0: 6c:1f:fb:7c:6e:2f:d4:a5:76:30:7b:e3:8d:57:d6: 8f:d4:fd:b5:3a:cb:bf:ef:c5:c1:a2:21:4e:11:79: 30:67:77:b6:df:df:93:07:4f:0e:8a:0b:20:b3:a9: 70:2c:3d:40:11:55:be:d2:36:1a:d2:4b:2d:5e:58: 8b:86:3a:22:34:40:2d:ad:04:15:c1:de:fc:46:99: 0a:18:d7:43:de:55:ce:2c:87:5f:b6:8c:85:e2:0d: b0:cf:bb:8f:2b:74:cb:7b:5a:b7:75:d4:34:a0:05: 8b:4a:c7:32:55:f9:4e:ec:fc:e6:20:74:69:58:4c: 55:88:4c:df:f5:72:5f:76:cb:3b:9f:bc:f7:79:dc: 22:8d:c2:e1:0d:06:29:11:c8:fb:21:04:f3:c8:f5: 0a:43:e4:2d:72:8c:2e:9c:ac:a8:d5:3c:b3:af:d4: 31:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A2:1C:34:B7:CA:C2:BE:E8:3C:93:EF:E0:35:78:CB:57:47:37:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 206.198.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1f:a4:e0:19:bd:43:a2:e1:29:f1:20:6a:55:c5:53:59:ce: 71:bb:64:6f:37:e0:f4:3f:b7:14:60:bd:9b:4d:4f:a3:76:fc: 71:fb:d4:89:3c:79:f1:4e:26:3a:80:23:0d:25:46:fc:c3:e5: 6b:6d:c3:8f:ca:a2:3c:f9:6d:d5:45:73:24:a4:1a:23:64:da: b5:cf:aa:7a:93:50:81:d6:94:97:cc:cc:87:0f:99:79:54:a9: c9:67:d4:a6:c1:21:a7:34:3e:c9:07:ff:6b:68:15:e1:8b:cc: 7b:1a:6a:4d:1b:dc:da:0b:80:62:1b:29:8f:44:d5:f5:65:c5: 36:8b:cf:37:b3:cc:47:3b:de:18:60:02:39:4f:56:6a:ad:e6: 77:3b:48:7e:9f:d0:bf:aa:e0:f2:d4:7a:fe:7d:2b:bf:65:77: e4:fe:07:11:95:ba:91:ba:49:72:f6:f1:e0:9a:0c:0e:24:17: f6:71:b9:d1:2d:3e:ac:3a:80:98:75:13:5e:29:ab:4f:1c:9b: e6:9e:7e:35:e8:72:7f:d5:1f:68:d9:a3:e6:bd:30:a1:f2:63: 7a:ae:79:db:c7:3e:2c:0d:34:9b:65:41:d8:40:16:f7:2a:b2: f0:d3:95:be:71:db:b2:75:8e:08:6e:b9:ce:e7:14:bd:a8:e0: d3:06:0a:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLqZG3hXuSCG0vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk YTBmM2FjYWYtMjA1YS00ZmVjLThmZGItZDgxYzgzOGE0M2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Qu8o1uIoLnHSN5eDuQCXruP6MFZssj7GEg i4Le1imonZZZ1mHUWrug6WR8CLFUb8WfMTWs7YPLMss+B/yqJa1nQ+Tov1mPgSyn 4Z1P1kR60D9UCBCfSrBsH/t8bi/UpXYwe+ONV9aP1P21Osu/78XBoiFOEXkwZ3e2 39+TB08Oigsgs6lwLD1AEVW+0jYa0kstXliLhjoiNEAtrQQVwd78RpkKGNdD3lXO LIdftoyF4g2wz7uPK3TLe1q3ddQ0oAWLSscyVflO7PzmIHRpWExViEzf9XJfdss7 n7z3edwijcLhDQYpEcj7IQTzyPUKQ+QtcowunKyo1Tyzr9QxtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeiHDS3ysK+6DyT7+A1eMtXRzdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvYmZhMzE4OGYtYTBlMS0z NGVkLWFkYWMtNDQ0NGE3YjYzOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsbXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYfpOAZvUOi4SnxIGpVxVNZznG7ZG834PQ/txRgvZtNT6N2/HH71Ik8 efFOJjqAIw0lRvzD5Wttw4/Kojz5bdVFcySkGiNk2rXPqnqTUIHWlJfMzIcPmXlU qcln1KbBIac0PskH/2toFeGLzHsaak0b3NoLgGIbKY9E1fVlxTaLzzezzEc73hhg AjlPVmqt5nc7SH6f0L+q4PLUev59K79ld+T+BxGVupG6SXL28eCaDA4kF/ZxudEt Pqw6gJh1E14pq08cm+aefjXocn/VH2jZo+a9MKHyY3quedvHPiwNNJtlQdhAFvcq svDTlb5x27J1jghuuc7nFL2o4NMGCuY= -----END CERTIFICATE-----Generated at Wed Apr 30 23:05:02 2025 by rpki-client