$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa File: aae70563-797d-34b1-9db2-9978daa04520.roa (raw, json) Hash identifier: pGBMjNMfk7qGdEhBfN7RLbMZTvEIgbakzMkb7NJujTQ= Subject key identifier: 14:58:EB:15:48:D3:91:B6:02:E3:59:F6:10:B4:2E:DB:06:69:9D:1E Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FCE2B87F2CE3347409700 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 206.255.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:ce:2b:87:f2:ce:33:47:40:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=5d1c9074-da6d-4361-a738-1e4dfc8279ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:44:df:6a:4e:7c:27:d2:0f:79:cd:17:90:4b: 77:c4:29:60:8e:48:7e:d6:84:a1:27:29:39:7c:3a: 77:e1:07:21:25:b0:ae:a1:20:45:ff:ad:97:6a:0c: a7:28:c0:df:00:96:33:26:06:a3:b9:4c:95:22:13: ed:d7:46:0b:04:14:9b:47:d4:e9:4f:2c:0c:47:bc: 01:69:fb:6e:04:f0:71:33:87:32:cf:7c:34:91:77: 76:92:4a:4e:7a:02:3d:0a:04:91:9c:66:81:09:f6: b2:25:df:7c:d4:82:8e:6a:3f:e4:9b:a7:f0:b1:07: e8:60:10:d4:80:57:69:63:cc:38:a0:39:ec:44:d3: 65:24:4f:87:8a:33:99:2f:78:98:78:30:67:06:15: 32:24:93:43:1c:48:10:31:4d:6b:38:1b:c7:c7:0b: 15:e3:55:98:32:29:92:0e:8d:19:49:b1:49:41:16: 6b:01:85:02:de:cc:1b:85:a1:b6:4d:14:40:c9:9c: 32:b6:aa:a7:0f:2e:98:a4:08:c1:ec:19:5e:9b:9e: 6d:94:ab:72:d3:cc:d6:71:3c:9e:d8:a4:1e:fc:10: 4c:0a:c5:16:d9:0b:8b:09:40:c0:2c:03:21:69:df: a2:a1:c6:6d:e1:75:7d:28:fb:c3:0f:8c:35:12:df: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:58:EB:15:48:D3:91:B6:02:E3:59:F6:10:B4:2E:DB:06:69:9D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5d:c8:6e:3c:3c:d4:f2:65:31:25:c2:6a:d8:f6:b5:02:66: 07:5d:1c:60:88:26:b4:3a:7c:53:b7:1e:8b:78:c9:49:47:69: ef:38:f5:0b:7e:23:47:91:0c:c0:97:5f:f1:0b:b0:c1:c5:c7: d7:2b:0c:a3:91:17:60:e9:74:59:97:3e:85:40:bf:d3:16:ce: 71:8c:7e:64:57:bc:02:ae:eb:c4:8a:bc:9b:09:49:b1:d4:0f: 77:a3:8f:5e:de:3e:a7:ad:ae:08:2d:7b:ae:9d:41:b4:d1:61: c0:9f:04:0a:69:92:28:6e:7a:e5:2b:09:c3:0f:fe:78:b2:02: 13:6e:5a:d6:33:5f:d9:5e:57:55:93:c2:b5:cb:65:e2:0c:37: 60:70:f1:2c:ef:8a:74:42:30:32:7a:df:7a:4a:eb:10:47:5c: e0:d6:0f:b0:ab:ce:47:08:a4:4e:4f:16:ec:5b:91:91:3c:8d: eb:fd:12:5e:39:6c:10:20:84:34:eb:6b:a9:e7:9a:8b:c7:ba: 90:1e:02:5b:ab:06:ca:41:be:d5:20:b6:9e:0e:f0:db:42:00: 00:8c:64:59:86:49:10:a9:9a:66:43:a3:f8:c2:f1:3d:7c:0a: 79:c3:c9:59:2e:12:d1:9a:73:b8:be:c5:6b:7a:42:41:3b:bf: b6:80:b7:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj84rh/LOM0dAlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk NWQxYzkwNzQtZGE2ZC00MzYxLWE3MzgtMWU0ZGZjODI3OWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUTfak58J9IPec0XkEt3xClgjkh+1oShJyk5 fDp34QchJbCuoSBF/62XagynKMDfAJYzJgajuUyVIhPt10YLBBSbR9TpTywMR7wB aftuBPBxM4cyz3w0kXd2kkpOegI9CgSRnGaBCfayJd981IKOaj/km6fwsQfoYBDU gFdpY8w4oDnsRNNlJE+HijOZL3iYeDBnBhUyJJNDHEgQMU1rOBvHxwsV41WYMimS Do0ZSbFJQRZrAYUC3swbhaG2TRRAyZwytqqnDy6YpAjB7Blem55tlKty08zWcTye 2KQe/BBMCsUW2QuLCUDALAMhad+iocZt4XV9KPvDD4w1Et/SCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRY6xVI05G2AuNZ9hC0LtsGaZ0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYWFlNzA1NjMtNzk3ZC0z NGIxLTlkYjItOTk3OGRhYTA0NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAddyG48PNTyZTElwmrY9rUCZgddHGCIJrQ6fFO3Hot4yUlHae849Qt+ I0eRDMCXX/ELsMHFx9crDKORF2DpdFmXPoVAv9MWznGMfmRXvAKu68SKvJsJSbHU D3ejj17ePqetrggte66dQbTRYcCfBAppkihueuUrCcMP/niyAhNuWtYzX9leV1WT wrXLZeIMN2Bw8SzvinRCMDJ633pK6xBHXODWD7CrzkcIpE5PFuxbkZE8jev9El45 bBAghDTra6nnmovHupAeAlurBspBvtUgtp4O8NtCAACMZFmGSRCpmmZDo/jC8T18 CnnDyVkuEtGac7i+xWt6QkE7v7aAtxA= -----END CERTIFICATE-----Generated at Tue Jul 1 19:58:05 2025 by rpki-client