$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa File: 67711168-57b6-3fb5-9d03-dd8b8f2377da.roa (raw, json) Hash identifier: Nx7HTf+RnUUrpIxcQrqhMr+/F3FtQcLc/LLh65PXO/0= Subject key identifier: 71:82:59:2E:0A:3B:FD:26:8A:01:E0:BA:F2:1D:5D:8F:98:F4:E6:04 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FCF39896189EE6ED0A400 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 206.255.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:cf:39:89:61:89:ee:6e:d0:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=b03c52b4-aaeb-4329-8efc-9ff793154243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:24:7d:17:5a:ae:bd:9c:02:fc:ae:b4:d3:da: 64:9c:8a:d0:29:cc:d2:3f:31:81:73:33:cc:ec:23: 12:ad:22:e5:6c:17:15:65:d5:c3:56:91:e2:72:68: 17:ff:e0:1d:38:c5:ef:2f:7e:ef:65:72:54:27:10: 61:f3:b6:68:fb:ed:d6:ee:fb:b5:68:f4:10:af:6b: 23:39:5e:72:ba:bb:a7:e4:b0:52:3b:c1:13:6f:2d: 26:1c:6c:d6:86:3e:e0:9b:e2:cb:a0:03:5e:4d:3c: aa:eb:d4:9b:62:a0:ff:78:38:e7:c6:2a:d2:78:ae: 50:78:9a:f1:98:1a:30:2f:03:50:96:a0:58:b5:ca: 72:bf:1a:52:d0:25:b7:09:0e:1c:f4:ec:ea:a8:6f: 4a:ed:5a:f6:d3:32:87:2e:36:23:4f:44:a5:12:16: 22:38:19:3c:9e:97:9f:ae:cd:73:77:87:e6:77:94: 58:f9:d9:89:67:cd:ec:8e:a0:5c:d3:86:f9:74:86: a8:b8:e0:e9:18:32:78:c3:5f:8b:10:57:c4:05:a1: 1e:9e:cc:29:33:70:80:12:02:69:ae:2c:eb:08:ec: da:69:62:b2:65:f2:89:6e:b2:ca:c8:ac:5e:aa:80: f2:ca:90:42:d7:28:4f:1c:28:8c:98:ea:7f:dc:56: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:82:59:2E:0A:3B:FD:26:8A:01:E0:BA:F2:1D:5D:8F:98:F4:E6:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:84:d6:b7:f1:41:48:e7:f3:54:f7:cd:8c:be:8e:f3:ef:e2: ed:0d:c3:e4:fd:5a:ef:1a:bb:6e:d7:73:7c:85:c4:ec:2c:b0: b6:83:18:72:60:cf:b5:03:1f:67:f8:b0:33:fa:55:21:94:2f: 4f:12:b8:9a:f0:2d:20:20:5a:a1:ca:78:14:78:44:62:e3:0a: 9d:89:f4:36:c1:94:e2:c3:5c:a3:30:90:52:96:cf:40:a8:9a: fa:87:45:2b:a0:bd:05:60:71:93:a9:25:a7:8d:1a:c0:79:bd: b4:88:01:58:4c:38:bf:9c:7c:44:5a:b2:00:54:70:f4:38:f0: 98:a5:d4:f3:c4:60:4b:06:53:2e:70:5f:e5:99:62:43:38:ed: 62:2c:87:7a:34:90:89:b2:ee:b3:60:33:05:ce:e9:a1:3d:56: a4:fb:b6:09:c2:82:d9:39:33:cf:7a:9c:d5:26:ac:f6:42:09: 88:02:db:27:48:15:06:e2:09:91:3e:d3:42:60:c9:e1:5d:68: 28:cd:db:11:88:89:a8:72:8e:40:2f:88:a9:85:b7:5e:9b:4e: 0e:5c:21:33:4e:a7:0d:58:08:81:96:54:5a:a2:16:18:5f:d4: 0b:3c:6b:d4:bd:4b:f4:53:8e:f7:24:88:35:f1:a2:1f:09:12: 82:55:e1:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj885iWGJ7m7QpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YjAzYzUyYjQtYWFlYi00MzI5LThlZmMtOWZmNzkzMTU0MjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyR9F1quvZwC/K6009pknIrQKczSPzGBczPM 7CMSrSLlbBcVZdXDVpHicmgX/+AdOMXvL37vZXJUJxBh87Zo++3W7vu1aPQQr2sj OV5yurun5LBSO8ETby0mHGzWhj7gm+LLoANeTTyq69SbYqD/eDjnxirSeK5QeJrx mBowLwNQlqBYtcpyvxpS0CW3CQ4c9OzqqG9K7Vr20zKHLjYjT0SlEhYiOBk8npef rs1zd4fmd5RY+dmJZ83sjqBc04b5dIaouODpGDJ4w1+LEFfEBaEenswpM3CAEgJp rizrCOzaaWKyZfKJbrLKyKxeqoDyypBC1yhPHCiMmOp/3FYkyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGCWS4KO/0migHguvIdXY+Y9OYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNjc3MTExNjgtNTdiNi0z ZmI1LTlkMDMtZGQ4YjhmMjM3N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6E1rfxQUjn81T3zYy+jvPv4u0Nw+T9Wu8au27Xc3yFxOwssLaDGHJg z7UDH2f4sDP6VSGUL08SuJrwLSAgWqHKeBR4RGLjCp2J9DbBlOLDXKMwkFKWz0Co mvqHRSugvQVgcZOpJaeNGsB5vbSIAVhMOL+cfERasgBUcPQ48Jil1PPEYEsGUy5w X+WZYkM47WIsh3o0kImy7rNgMwXO6aE9VqT7tgnCgtk5M896nNUmrPZCCYgC2ydI FQbiCZE+00JgyeFdaCjN2xGIiahyjkAviKmFt16bTg5cITNOpw1YCIGWVFqiFhhf 1As8a9S9S/RTjvckiDXxoh8JEoJV4Wk= -----END CERTIFICATE-----Generated at Wed Jul 2 04:24:04 2025 by rpki-client