$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/206642a2-d7e1-3098-9a4d-25ac023b6972.roa File: 206642a2-d7e1-3098-9a4d-25ac023b6972.roa (raw, json) Hash identifier: QHAGQXzMvnqNOucVW3XMAjy8rpCZHHtcvviPbAnlY+c= Subject key identifier: F7:1E:83:CA:A3:B7:E2:FC:92:A5:DE:DC:90:8A:2F:A9:FD:44:98:9C Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584965E97C30E71606E7FC059040 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/206642a2-d7e1-3098-9a4d-25ac023b6972.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 46450 IP address blocks: 192.81.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7c:30:e7:16:06:e7:fc:05:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=5dd97a59-8178-42c8-b084-2c2d0bf87472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ff:97:15:24:d4:f2:0f:35:66:c7:b0:a8:4b: 1e:99:3e:39:a9:31:be:ad:64:34:c3:73:cf:11:c8: 23:fa:ce:72:31:f6:bf:4d:b8:24:b6:49:72:4f:89: e9:3d:b6:28:a5:42:7d:45:22:57:44:d1:68:9e:8b: 96:97:0a:d1:25:bd:3b:38:e3:19:07:39:47:11:60: 27:0b:23:e3:18:07:74:8b:8d:7e:86:d2:53:1d:c8: 47:76:6a:6f:56:5c:51:31:fa:bf:0a:24:dc:da:48: d2:8a:e3:a0:26:fa:c6:f2:72:1b:46:91:f9:f9:a8: b0:ac:57:72:e8:0a:cb:d0:74:7a:52:17:0a:fa:74: e9:f8:d3:c3:7d:e9:2d:a6:a3:2a:c3:c9:00:f3:0b: d3:17:e8:15:55:06:c5:22:33:79:0a:19:7f:38:8c: 7b:7e:d5:4c:3a:43:3a:77:dc:3a:0e:24:22:c5:1a: e2:d5:e6:d5:69:a9:33:00:d2:f7:5a:90:3b:b8:f8: c9:f6:b9:c2:e1:cc:db:df:97:10:cc:97:44:55:db: c2:31:bc:0d:27:d8:26:28:99:d1:e2:56:db:14:2d: 8b:e9:79:d8:ea:c6:28:33:ba:03:7c:4f:77:a5:2b: fb:0a:06:c6:27:e8:33:dc:15:c3:54:c3:45:4e:e4: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1E:83:CA:A3:B7:E2:FC:92:A5:DE:DC:90:8A:2F:A9:FD:44:98:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/206642a2-d7e1-3098-9a4d-25ac023b6972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 192.81.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fc:ac:39:4e:94:6c:e9:41:b6:f4:d9:94:30:c7:6b:d1:57: f4:cc:d4:a4:0c:6e:d3:98:97:42:b7:9b:cc:2e:b4:be:ea:1c: 69:a3:d2:a8:ed:96:01:17:24:d3:78:b5:3c:1b:bf:f5:fb:be: c2:e9:10:a4:22:84:ad:1c:9e:8e:ef:30:58:67:cc:bb:44:13: 6a:b5:69:45:26:dd:1d:e3:a7:bc:b1:09:de:3b:43:41:79:bf: cc:23:fc:e8:ef:28:d6:85:ba:79:64:ea:70:3a:da:c9:cd:e9: 0a:a6:63:02:12:da:7f:5c:9e:46:6c:7b:69:9a:26:32:54:6b: 61:f9:a2:e6:30:19:d1:ed:71:34:20:d7:32:1a:8d:eb:ea:6e: 11:96:64:23:c2:c9:91:10:8d:a9:cf:f5:56:1c:a1:ba:66:3f: 3d:ad:7d:d9:29:45:5f:5d:b9:fa:d0:69:65:46:3f:1c:bb:48: d4:37:be:a5:1d:03:04:85:90:f0:91:48:17:0b:1f:71:8a:0c: 75:7e:32:9f:a7:48:31:9e:7e:1a:33:10:49:77:34:df:43:66: a6:11:1a:ee:d4:22:85:7c:52:e9:08:f6:66:01:c1:8c:be:c2: 53:63:25:33:85:ce:ef:5e:3b:84:f3:13:3b:36:fd:42:54:55: 3d:c6:fd:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6Xww5xYG5/wFkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk NWRkOTdhNTktODE3OC00MmM4LWIwODQtMmMyZDBiZjg3NDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f+XFSTU8g81ZsewqEsemT45qTG+rWQ0w3PP Ecgj+s5yMfa/TbgktklyT4npPbYopUJ9RSJXRNFonouWlwrRJb07OOMZBzlHEWAn CyPjGAd0i41+htJTHchHdmpvVlxRMfq/CiTc2kjSiuOgJvrG8nIbRpH5+aiwrFdy 6ArL0HR6UhcK+nTp+NPDfektpqMqw8kA8wvTF+gVVQbFIjN5Chl/OIx7ftVMOkM6 d9w6DiQixRri1ebVaakzANL3WpA7uPjJ9rnC4czb35cQzJdEVdvCMbwNJ9gmKJnR 4lbbFC2L6XnY6sYoM7oDfE93pSv7CgbGJ+gz3BXDVMNFTuRtbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPceg8qjt+L8kqXe3JCKL6n9RJicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMjA2NjQyYTItZDdlMS0z MDk4LTlhNGQtMjVhYzAyM2I2OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwFGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD38rDlOlGzpQbb02ZQwx2vRV/TM1KQMbtOYl0K3m8wutL7qHGmj0qjt lgEXJNN4tTwbv/X7vsLpEKQihK0cno7vMFhnzLtEE2q1aUUm3R3jp7yxCd47Q0F5 v8wj/OjvKNaFunlk6nA62snN6QqmYwIS2n9cnkZse2maJjJUa2H5ouYwGdHtcTQg 1zIajevqbhGWZCPCyZEQjanP9VYcobpmPz2tfdkpRV9dufrQaWVGPxy7SNQ3vqUd AwSFkPCRSBcLH3GKDHV+Mp+nSDGefhozEEl3NN9DZqYRGu7UIoV8UukI9mYBwYy+ wlNjJTOFzu9eO4TzEzs2/UJUVT3G/fY= -----END CERTIFICATE-----Generated at Sun May 11 00:36:54 2025 by rpki-client