$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/79af0ffd-19dc-3f61-a048-83af6276d1fe.roa File: 79af0ffd-19dc-3f61-a048-83af6276d1fe.roa (raw, json) Hash identifier: khRsxs0+IqA6Y2vALAaeqYfTQAR1pmqnR3veVvbukeA= Subject key identifier: 6D:B6:CC:84:6D:CF:F1:DD:D7:8D:14:BB:DC:7E:4E:3E:0C:60:FC:36 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FC3C8918FB17FF5519480 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/79af0ffd-19dc-3f61-a048-83af6276d1fe.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 24.89.52.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c3:c8:91:8f:b1:7f:f5:51:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=478f13c0-7eb9-4cbe-96b7-d9bea0ff8cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dd:9f:31:c4:49:4a:3c:d3:75:85:05:8f:20: ad:2c:0e:f8:05:e7:8a:05:92:64:fb:d7:f4:c7:54: 21:10:4a:c6:a5:b5:e6:de:64:fb:73:83:cb:a9:6e: 83:e0:18:f2:09:07:a0:42:e4:a8:ba:1c:d9:08:ff: 8d:de:fd:4d:6e:df:11:c8:e3:58:85:5e:ab:f1:5d: 43:d4:30:93:2e:b4:b5:ab:91:ee:dc:65:d1:23:2f: 52:dd:4d:a6:7a:71:32:c1:06:8b:b8:a2:c0:b1:4c: c1:b3:0a:bd:ef:24:0e:a2:a0:d9:54:c4:af:82:d1: 30:f1:cb:39:35:db:43:73:6c:05:cc:14:fb:7d:43: f2:af:0a:b1:11:dd:48:10:22:65:57:be:0b:f6:68: 97:72:91:a2:26:ef:fb:17:7d:b1:30:5c:03:2e:12: 88:63:2c:a0:6e:09:66:4e:85:45:f4:d6:28:ec:ad: 68:7f:f0:9c:ef:48:b1:53:96:a5:8c:d3:a2:74:35: d7:82:be:bb:54:f8:3a:42:ba:c8:94:c2:f9:69:55: 2f:02:c8:47:55:a6:da:51:3c:57:56:56:56:72:de: 2f:02:b4:26:cf:46:01:8c:16:d0:c6:c3:80:05:d0: 90:41:a7:99:bc:db:f3:95:c9:0d:00:f6:5c:f2:9b: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B6:CC:84:6D:CF:F1:DD:D7:8D:14:BB:DC:7E:4E:3E:0C:60:FC:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/79af0ffd-19dc-3f61-a048-83af6276d1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6d:03:a8:79:b5:ce:38:d9:71:83:73:47:9d:0e:0b:c5:3c: d8:e1:79:44:53:0a:c5:0b:36:df:76:5a:0b:4d:0b:70:cc:c6: bb:e6:59:64:f1:3a:9e:9b:47:ca:56:09:10:31:70:ac:a1:4f: 67:fb:41:cb:cf:f2:12:69:f8:33:cf:0e:3a:81:5f:ab:2b:2f: 2b:dc:fd:47:d0:53:02:77:7e:a7:f6:b7:3f:dc:ea:25:cc:4f: 60:5a:f3:20:18:6a:72:3b:c4:da:75:0f:9f:f0:e6:f5:9d:19: f9:f2:49:70:4a:10:3b:0b:3e:1b:e6:03:88:a4:3e:12:b6:10: 80:14:1f:ec:e7:71:c8:65:2b:fb:96:f4:f3:8c:8d:44:2b:25: f6:42:d7:fd:05:81:30:1c:ac:95:d1:06:95:ed:08:8b:fe:84: 85:ed:d3:1e:e0:76:91:7b:72:12:b6:00:21:11:71:82:19:5d: b4:cb:9c:fa:c8:9c:bd:47:ba:f5:cb:e1:40:d9:0b:2d:63:04: c6:e9:49:53:45:24:2d:54:38:4a:c2:4e:1a:11:47:09:18:ff: aa:c9:19:74:1c:aa:7a:f0:c2:c7:1a:94:89:81:02:40:2d:c9: 6e:d2:bc:e0:13:c8:15:d2:e7:35:d6:dd:52:74:33:4c:29:01: 73:1a:a6:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8PIkY+xf/VRlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk NDc4ZjEzYzAtN2ViOS00Y2JlLTk2YjctZDliZWEwZmY4Y2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj92fMcRJSjzTdYUFjyCtLA74BeeKBZJk+9f0 x1QhEErGpbXm3mT7c4PLqW6D4BjyCQegQuSouhzZCP+N3v1Nbt8RyONYhV6r8V1D 1DCTLrS1q5Hu3GXRIy9S3U2menEywQaLuKLAsUzBswq97yQOoqDZVMSvgtEw8cs5 NdtDc2wFzBT7fUPyrwqxEd1IECJlV74L9miXcpGiJu/7F32xMFwDLhKIYyygbglm ToVF9NYo7K1of/Cc70ixU5aljNOidDXXgr67VPg6QrrIlML5aVUvAshHVabaUTxX VlZWct4vArQmz0YBjBbQxsOABdCQQaeZvNvzlckNAPZc8psOvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG22zIRtz/Hd140Uu9x+Tj4MYPw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNzlhZjBmZmQtMTlkYy0z ZjYxLWEwNDgtODNhZjYyNzZkMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGFk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABptA6h5tc442XGDc0edDgvFPNjheURTCsULNt92WgtNC3DMxrvmWWTx Op6bR8pWCRAxcKyhT2f7QcvP8hJp+DPPDjqBX6srLyvc/UfQUwJ3fqf2tz/c6iXM T2Ba8yAYanI7xNp1D5/w5vWdGfnySXBKEDsLPhvmA4ikPhK2EIAUH+zncchlK/uW 9POMjUQrJfZC1/0FgTAcrJXRBpXtCIv+hIXt0x7gdpF7chK2ACERcYIZXbTLnPrI nL1HuvXL4UDZCy1jBMbpSVNFJC1UOErCThoRRwkY/6rJGXQcqnrwwscalImBAkAt yW7SvOATyBXS5zXW3VJ0M0wpAXMapkk= -----END CERTIFICATE-----Generated at Thu May 15 17:01:58 2025 by rpki-client