$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa File: 28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa (raw, json) Hash identifier: BmnjFMCiuiVXm4maBlMthKBoJxAIICT+7cdsLnetMJ4= Subject key identifier: 0E:DB:77:95:09:5C:24:FC:54:22:21:6B:4A:FC:16:1D:AA:BC:5A:4B Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849D42FB5A9B0A7C766D68BCE80 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 142.79.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b5:a9:b0:a7:c7:66:d6:8b:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=6263f06f-e30e-40b4-8347-6d1bd0a89ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:15:22:f7:ba:43:ec:f4:4e:59:91:61:ec:e5: 1e:d3:e9:de:da:08:9d:5d:81:79:71:e8:1b:6a:22: e1:2a:55:c3:78:b1:66:fc:d9:4d:51:54:cb:b2:9b: b6:d6:c7:a0:ee:04:fa:87:41:59:25:09:b5:6b:2d: 22:11:93:d8:d0:9b:54:56:60:e2:92:b7:e0:d1:61: f9:db:93:76:74:fb:07:78:2e:98:dc:1c:6b:14:bb: b7:48:21:a1:88:07:65:e7:9c:07:4f:42:5a:9c:3e: be:55:a6:2b:9b:c1:11:1a:dc:fe:fc:90:25:99:a2: 87:a0:02:c4:52:f4:43:df:4b:b6:a0:dd:f6:6b:fc: 34:0f:a2:55:c7:1e:4e:bd:6f:93:86:ab:53:78:04: 48:f9:16:fa:e6:e5:17:00:1f:de:a0:0c:2d:b5:87: 19:9a:7a:c3:08:c7:ec:6a:3f:79:64:13:8e:05:be: 7d:f1:48:9b:1d:a6:dc:6d:e7:4d:0a:de:5d:a6:7a: 1d:41:c1:c3:6c:72:7c:09:b9:77:32:e8:02:7f:c1: fc:9b:43:95:79:61:df:67:97:ba:01:37:b4:76:9f: ea:e2:4f:b7:21:60:e4:d8:b2:c4:46:b5:03:f2:e2: 76:99:c1:53:af:41:8b:53:13:9d:55:1c:83:26:f5: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DB:77:95:09:5C:24:FC:54:22:21:6B:4A:FC:16:1D:AA:BC:5A:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e7:7f:99:7c:26:5e:52:8b:43:88:c0:9e:25:3d:95:2f:e7: 66:b4:0e:ec:c1:63:e5:b2:69:d2:3d:7f:10:5e:08:0c:bf:36: 51:4e:42:7a:d5:87:ca:10:63:9a:53:48:6f:88:d6:c5:81:98: e8:5d:7c:81:0d:38:4f:82:63:04:4e:5b:fc:63:09:01:db:92: 86:5a:af:a7:74:ac:ba:01:81:12:8b:7e:20:4e:d9:9a:02:bf: 21:9e:e8:f9:bc:e7:ca:f3:55:ed:8b:99:c8:17:27:90:ff:ec: 49:ec:af:fb:ef:35:c8:1d:12:94:5e:ec:43:d9:01:91:cd:44: a7:d4:b0:f0:07:77:b5:ba:a9:67:6d:c7:58:f7:c5:cc:fc:4c: a9:3a:05:a6:3a:d4:62:6c:bd:24:db:50:83:b0:17:a4:3a:f4: eb:65:48:1e:3d:d5:38:dc:f8:ec:8c:f0:85:e5:4e:14:5c:f6: bd:d3:8d:e5:3a:32:d4:d3:66:a4:c4:59:88:08:b2:9a:0d:10: 37:01:f6:fe:bf:a5:5e:99:58:3d:de:44:bb:de:e4:25:bc:ee: 6c:d2:fb:01:d4:7a:7f:d6:17:7c:ec:0b:4b:3c:f0:2b:b4:56: 00:48:c3:23:ed:de:b3:92:bd:03:97:66:77:06:f3:64:14:cb: 11:78:5b:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7WpsKfHZtaLzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NjI2M2YwNmYtZTMwZS00MGI0LTgzNDctNmQxYmQwYTg5ZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxUi97pD7PROWZFh7OUe0+ne2gidXYF5cegb aiLhKlXDeLFm/NlNUVTLspu21seg7gT6h0FZJQm1ay0iEZPY0JtUVmDikrfg0WH5 25N2dPsHeC6Y3BxrFLu3SCGhiAdl55wHT0JanD6+VaYrm8ERGtz+/JAlmaKHoALE UvRD30u2oN32a/w0D6JVxx5OvW+ThqtTeARI+Rb65uUXAB/eoAwttYcZmnrDCMfs aj95ZBOOBb598UibHabcbedNCt5dpnodQcHDbHJ8Cbl3MugCf8H8m0OVeWHfZ5e6 ATe0dp/q4k+3IWDk2LLERrUD8uJ2mcFTr0GLUxOdVRyDJvX1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7bd5UJXCT8VCIha0r8Fh2qvFpLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMjg1NDFkYjYtMWY4Mi0z ZTE0LThhN2MtYzhlZWVlYWM2MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk9qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXnf5l8Jl5Si0OIwJ4lPZUv52a0DuzBY+WyadI9fxBeCAy/NlFOQnrV h8oQY5pTSG+I1sWBmOhdfIENOE+CYwROW/xjCQHbkoZar6d0rLoBgRKLfiBO2ZoC vyGe6Pm858rzVe2LmcgXJ5D/7Ensr/vvNcgdEpRe7EPZAZHNRKfUsPAHd7W6qWdt x1j3xcz8TKk6BaY61GJsvSTbUIOwF6Q69OtlSB491Tjc+OyM8IXlThRc9r3TjeU6 MtTTZqTEWYgIspoNEDcB9v6/pV6ZWD3eRLve5CW87mzS+wHUen/WF3zsC0s88Cu0 VgBIwyPt3rOSvQOXZncG82QUyxF4W2s= -----END CERTIFICATE-----Generated at Thu May 15 13:47:08 2025 by rpki-client