$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1f9399f9-8607-3d69-88f2-92f70bb947b8.roa File: 1f9399f9-8607-3d69-88f2-92f70bb947b8.roa (raw, json) Hash identifier: SRNkN47r+uL79f1llU5bdl3JbhVPb6QAAV1d7BaQYDI= Subject key identifier: 23:9D:4D:67:69:29:2F:10:1D:33:09:30:C8:01:9E:F3:DE:24:F4:34 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F43285848A9961BD48ED37DDF0E795758 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1f9399f9-8607-3d69-88f2-92f70bb947b8.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 14340 IP address blocks: 140.190.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1b:d4:8e:d3:7d:df:0e:79:57:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=02b38fd8-5327-44c6-aaec-87c7b40c6e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e7:5e:c4:6e:d6:78:ac:44:5f:fe:ae:25:8e: 22:1b:17:35:e3:13:15:a0:29:4f:9e:e8:58:20:fe: 89:b2:0e:6c:a8:09:60:63:49:e6:b2:ba:72:1e:14: f1:d9:ae:86:b8:9f:d5:e5:d2:d8:5f:f3:40:ba:39: 39:60:14:3d:02:98:0d:ca:36:46:ed:a1:f4:13:32: e5:61:e0:f7:61:7e:51:13:74:c2:eb:14:6b:6b:42: 0c:81:64:0c:59:a8:6e:66:f8:a6:d5:0b:53:b3:de: 18:36:5f:31:10:aa:ac:6e:b4:fa:bb:3a:91:53:d9: c4:64:43:f6:70:8a:a6:87:e6:f8:02:df:7c:1f:1b: 98:0a:c4:1e:cb:7e:db:c5:98:7e:86:2f:e6:6b:45: 82:4e:bf:9a:1c:a7:30:14:46:4b:ad:eb:ad:68:46: c8:04:a1:3e:a7:c1:f0:c7:78:13:1b:23:fe:59:17: 38:d3:a1:bc:d6:1c:77:ce:3e:42:ca:80:06:96:c5: c0:5b:9e:ac:22:49:48:d7:6c:54:29:91:ab:1d:38: 63:39:5b:2a:a8:83:3b:aa:54:53:5e:8b:92:27:d6: 26:76:09:35:48:71:18:a8:8d:b2:41:12:bd:b1:e7: 56:fb:7a:ff:92:27:99:6c:eb:86:2f:61:e5:80:47: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9D:4D:67:69:29:2F:10:1D:33:09:30:C8:01:9E:F3:DE:24:F4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1f9399f9-8607-3d69-88f2-92f70bb947b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ec:74:bf:cd:be:76:97:b3:95:04:8e:76:2b:ba:b3:e8:18: 01:e1:05:9d:c7:64:c9:13:6d:9a:ea:25:b4:2d:0d:11:69:ea: bd:f4:7d:98:2d:3f:7f:82:61:9b:8d:c7:92:88:cf:2f:95:7a: 32:4d:4e:90:77:c6:e4:a1:1f:fd:9e:d0:c1:b8:31:ea:a0:61: 6a:67:ee:94:1d:09:21:5c:aa:52:9b:1e:21:f1:4a:fa:d8:bf: 73:4d:d2:38:1e:d7:20:d7:63:41:c3:a6:ed:14:21:f6:f9:35: 66:c7:ac:54:25:c4:d8:76:36:a4:a9:7e:4e:95:aa:e5:4e:89: 92:7b:df:43:4a:bf:58:2a:44:34:dc:b1:f8:59:90:4d:89:51: 51:1b:d7:99:09:d1:29:d3:7e:bb:b4:31:78:f1:67:c5:48:8f: 5b:b0:79:e4:de:df:ac:53:f4:17:01:d0:81:ef:68:14:67:e8: a6:cd:cc:a1:6d:a2:51:91:91:80:fc:a3:cf:11:33:a2:52:d3: 76:91:77:c4:3a:fb:c2:df:55:8e:eb:88:7a:a0:6a:a8:3f:66: 8f:ec:fa:44:da:59:32:07:51:66:44:7e:e2:49:d1:20:7f:13: 4b:74:80:41:b8:c5:12:a6:b6:41:45:9c:70:0f:3b:bd:b9:56: 57:22:fe:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplhvUjtN93w55V1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDJiMzhmZDgtNTMyNy00NGM2LWFhZWMtODdjN2I0MGM2ZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8edexG7WeKxEX/6uJY4iGxc14xMVoClPnuhY IP6Jsg5sqAlgY0nmsrpyHhTx2a6GuJ/V5dLYX/NAujk5YBQ9ApgNyjZG7aH0EzLl YeD3YX5RE3TC6xRra0IMgWQMWahuZvim1QtTs94YNl8xEKqsbrT6uzqRU9nEZEP2 cIqmh+b4At98HxuYCsQey37bxZh+hi/ma0WCTr+aHKcwFEZLreutaEbIBKE+p8Hw x3gTGyP+WRc406G81hx3zj5CyoAGlsXAW56sIklI12xUKZGrHThjOVsqqIM7qlRT XouSJ9Ymdgk1SHEYqI2yQRK9sedW+3r/kieZbOuGL2HlgEe/LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOdTWdpKS8QHTMJMMgBnvPeJPQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMWY5Mzk5ZjktODYwNy0z ZDY5LTg4ZjItOTJmNzBiYjk0N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjL5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILsdL/NvnaXs5UEjnYrurPoGAHhBZ3HZMkTbZrqJbQtDRFp6r30fZgt P3+CYZuNx5KIzy+VejJNTpB3xuShH/2e0MG4MeqgYWpn7pQdCSFcqlKbHiHxSvrY v3NN0jge1yDXY0HDpu0UIfb5NWbHrFQlxNh2NqSpfk6VquVOiZJ730NKv1gqRDTc sfhZkE2JUVEb15kJ0SnTfru0MXjxZ8VIj1uweeTe36xT9BcB0IHvaBRn6KbNzKFt olGRkYD8o88RM6JS03aRd8Q6+8LfVY7riHqgaqg/Zo/s+kTaWTIHUWZEfuJJ0SB/ E0t0gEG4xRKmtkFFnHAPO725Vlci/mA= -----END CERTIFICATE-----Generated at Sat Apr 5 08:44:43 2025 by rpki-client