$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa File: bc6990b7-5135-34a6-8b7f-da63625a8f64.roa (raw, json) Hash identifier: 5lGMNpjWPfY4PKpy3mQv3eBRYdPArrsKhjNr9A9jbGo= Subject key identifier: EB:B6:89:82:0A:2B:52:B6:5D:B2:6D:5A:59:14:86:21:8D:18:18:10 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F43285849C20A11C20DD983B2FA3E5D10 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 1403 IP address blocks: 198.58.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:11:c2:0d:d9:83:b2:fa:3e:5d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=6763d841-294e-44c2-8052-9374c7835e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:c6:0a:29:d7:1b:69:cd:f2:f5:45:bd:f7: c3:16:93:85:90:a6:ab:a4:f4:d0:57:08:ff:41:7d: 20:bc:9c:6c:6f:20:44:ba:83:c3:ca:f5:20:e5:33: d2:96:92:e2:19:25:c3:81:19:83:d2:c4:58:b9:be: 90:44:66:47:49:8d:bd:58:6f:75:43:df:b6:c1:2c: f5:9c:f7:34:fb:16:8f:b5:e3:0a:9d:f6:e7:8f:8b: 4f:41:c1:b5:15:6d:40:5d:59:5a:39:ef:64:70:4f: 54:46:c4:e8:a2:e6:06:a7:f1:d4:42:f6:31:54:b3: 72:70:10:60:78:eb:e8:85:7e:99:cf:9f:7c:38:f8: 5e:76:83:46:3c:20:ee:c5:a3:80:e6:02:95:d7:be: a7:99:8f:7e:1e:0e:bd:b7:e2:60:d7:71:0d:e5:79: 1e:6d:45:b5:5a:a5:c5:a9:c8:ab:4e:9b:5a:ed:d7: 68:c5:a2:2d:e2:85:10:2f:69:48:50:d4:aa:9f:ee: b0:bf:f2:5b:f8:e5:d0:11:d5:65:2e:b7:d8:8a:e5: 2c:8d:49:2e:7f:a6:ea:34:56:4f:65:a7:df:18:ba: 5e:58:d9:c3:37:3e:0c:27:07:09:bd:f6:16:91:c1: 94:55:48:bd:ad:db:87:f8:3d:66:37:21:c2:a2:48: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B6:89:82:0A:2B:52:B6:5D:B2:6D:5A:59:14:86:21:8D:18:18:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 198.58.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ce:08:1f:45:a1:6c:f0:62:9a:69:a8:ec:53:d2:a4:ee:9e: d6:96:60:ad:43:2d:47:e0:fa:fd:dd:8d:44:e9:41:d0:4b:63: 5a:05:8e:05:e5:a7:7e:5c:e5:c2:54:2b:35:48:dd:fa:29:18: 8a:1b:06:ff:3c:fd:5e:65:07:0e:67:0b:09:80:8b:c6:a1:1d: 47:4a:c2:9d:64:32:93:c2:eb:6e:56:ed:dd:17:01:ca:b9:fb: 7d:0c:a3:d5:44:32:cc:24:0b:5c:77:9f:91:0b:d4:f3:0e:5b: 61:b8:56:26:5f:9d:81:a0:cf:99:33:79:70:ec:28:be:5a:46: 52:48:ed:49:54:08:f3:a2:21:d0:15:0b:0f:08:52:e1:94:7d: e4:09:72:e9:02:6d:77:d4:3f:29:f8:20:f9:94:c1:4f:4e:b9: 33:9f:1a:08:1f:19:99:09:a5:75:bc:80:35:43:f1:98:76:b4: 24:14:b6:c3:b1:f5:fc:3d:a7:e3:3a:3f:a8:c5:21:73:fe:17: ae:fc:c6:55:59:27:2e:d0:b0:b2:25:eb:b0:80:e5:58:07:1b: b3:7a:8e:95:bc:c2:b9:ce:28:b9:ec:73:15:ec:36:6c:7b:f6: 4b:7b:ce:17:b4:2a:dc:47:56:35:f5:a0:e9:f3:12:86:ec:cc: 6b:7f:7c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChHCDdmDsvo+XRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk Njc2M2Q4NDEtMjk0ZS00NGMyLTgwNTItOTM3NGM3ODM1ZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVDGCinXG2nN8vVFvffDFpOFkKarpPTQVwj/ QX0gvJxsbyBEuoPDyvUg5TPSlpLiGSXDgRmD0sRYub6QRGZHSY29WG91Q9+2wSz1 nPc0+xaPteMKnfbnj4tPQcG1FW1AXVlaOe9kcE9URsToouYGp/HUQvYxVLNycBBg eOvohX6Zz598OPhedoNGPCDuxaOA5gKV176nmY9+Hg69t+Jg13EN5XkebUW1WqXF qcirTpta7ddoxaIt4oUQL2lIUNSqn+6wv/Jb+OXQEdVlLrfYiuUsjUkuf6bqNFZP ZaffGLpeWNnDNz4MJwcJvfYWkcGUVUi9rduH+D1mNyHCokh1UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOu2iYIKK1K2XbJtWlkUhiGNGBgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYmM2OTkwYjctNTEzNS0z NGE2LThiN2YtZGE2MzYyNWE4ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxjqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPOCB9FoWzwYpppqOxT0qTuntaWYK1DLUfg+v3djUTpQdBLY1oFjgXl p35c5cJUKzVI3fopGIobBv88/V5lBw5nCwmAi8ahHUdKwp1kMpPC625W7d0XAcq5 +30Mo9VEMswkC1x3n5EL1PMOW2G4ViZfnYGgz5kzeXDsKL5aRlJI7UlUCPOiIdAV Cw8IUuGUfeQJcukCbXfUPyn4IPmUwU9OuTOfGggfGZkJpXW8gDVD8Zh2tCQUtsOx 9fw9p+M6P6jFIXP+F678xlVZJy7QsLIl67CA5VgHG7N6jpW8wrnOKLnscxXsNmx7 9kt7zhe0KtxHVjX1oOnzEobszGt/fEA= -----END CERTIFICATE-----Generated at Mon Jun 30 14:14:07 2025 by rpki-client