$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa File: 28c297e9-6701-3a4f-bea0-343929f7fbc3.roa (raw, json) Hash identifier: b2BvCCziB2lAkmrgWxtQMJjSyykJdqxrdQ4G5b9Wcqg= Subject key identifier: 4C:1E:AC:26:D6:7A:14:E1:C9:2F:B5:C5:76:EC:8E:C7:EA:01:BC:25 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F43285848A9961BE9B6D3C9827BE6EE00 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 14340 IP address blocks: 140.190.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1b:e9:b6:d3:c9:82:7b:e6:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=145da4b4-5dd6-4e48-98ff-862598ec290c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:8b:09:68:97:e9:1c:7d:23:c7:76:bc:35: be:1a:b2:af:1e:be:ef:4c:c6:59:d3:54:38:d1:83: d9:43:4e:08:5b:52:48:ea:fc:f6:d5:5c:a8:a1:82: 05:4a:ac:72:2c:f1:03:2b:c4:7e:a1:88:be:73:87: 21:d4:7b:ba:ee:0e:fd:79:97:af:a4:bc:f2:5d:c2: 13:b1:22:66:dd:82:4b:f5:28:1f:9b:cc:7e:e0:01: a8:10:4b:2d:e2:45:d6:60:8b:7a:a3:eb:b2:00:27: 12:82:df:02:bf:f7:55:64:1a:9b:ad:88:5f:bc:3c: b4:7d:87:51:d0:c3:bb:c9:15:cf:f7:1a:a7:bb:c4: 4f:8e:ab:bf:b1:dd:07:54:9a:aa:5b:e2:6a:89:1d: 23:ea:d1:74:24:46:2f:e6:bf:c3:6d:51:41:53:0e: 24:4a:96:91:5a:d2:f2:2a:9c:1e:c9:95:ce:e6:7b: b4:0d:0e:b2:11:3f:83:13:d9:14:b5:6f:17:25:1c: 84:d9:58:cd:3e:7e:1f:f8:65:2a:a7:81:3e:25:be: e3:f2:79:cb:43:56:fa:0c:2e:46:e0:fa:56:06:4c: 14:63:88:d7:08:6b:53:93:de:e7:46:21:8c:28:85: 03:13:e8:ac:2f:44:4d:a7:3a:09:2b:1e:02:e0:63: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1E:AC:26:D6:7A:14:E1:C9:2F:B5:C5:76:EC:8E:C7:EA:01:BC:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d5:e7:80:ec:c1:21:88:bd:6c:90:f7:f8:41:90:f0:e6:6d: d3:cb:25:fd:12:af:45:d6:bb:ca:ed:54:b0:92:2a:ac:19:c1: 8a:c1:46:0c:1c:55:06:1a:79:20:71:af:05:c9:11:50:ed:01: 32:27:2a:bf:eb:4b:e5:eb:5a:8e:f7:5d:ad:af:d3:33:5f:2d: 51:d8:0d:dd:57:19:e1:b3:9a:ed:15:01:9b:60:e1:0a:9f:c0: 0f:08:1c:53:49:95:8e:27:77:33:33:0d:25:ef:a6:c8:55:b4: 46:4a:63:3c:78:2f:91:03:81:c7:6a:47:bf:86:a4:4d:cd:9d: 98:43:10:e2:6c:c6:1b:81:4a:61:f1:a2:f6:c4:44:d4:5f:8c: f6:ac:f3:4b:98:3e:82:6b:81:9b:3c:13:11:70:06:10:39:c7: 4e:59:f0:63:3a:45:4d:cc:26:3a:dd:5d:3c:f5:b9:36:e3:92: d0:85:43:86:50:29:84:f9:86:f7:d0:0a:8f:a5:ac:23:2d:99: c6:c5:61:5b:82:0b:f9:3b:5f:41:69:68:c0:d4:d3:7c:81:d6: 51:6b:48:39:59:9c:17:56:54:58:d0:89:26:ea:93:cd:c2:92: 59:8a:2f:72:60:64:a9:71:a3:0c:1e:fe:00:7b:b4:d1:1a:03: 0a:02:fc:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplhvpttPJgnvm7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MTQ1ZGE0YjQtNWRkNi00ZTQ4LTk4ZmYtODYyNTk4ZWMyOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVaLCWiX6Rx9I8d2vDW+GrKvHr7vTMZZ01Q4 0YPZQ04IW1JI6vz21VyooYIFSqxyLPEDK8R+oYi+c4ch1Hu67g79eZevpLzyXcIT sSJm3YJL9Sgfm8x+4AGoEEst4kXWYIt6o+uyACcSgt8Cv/dVZBqbrYhfvDy0fYdR 0MO7yRXP9xqnu8RPjqu/sd0HVJqqW+JqiR0j6tF0JEYv5r/DbVFBUw4kSpaRWtLy KpweyZXO5nu0DQ6yET+DE9kUtW8XJRyE2VjNPn4f+GUqp4E+Jb7j8nnLQ1b6DC5G 4PpWBkwUY4jXCGtTk97nRiGMKIUDE+isL0RNpzoJKx4C4GMSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwerCbWehThyS+1xXbsjsfqAbwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMjhjMjk3ZTktNjcwMS0z YTRmLWJlYTAtMzQzOTI5ZjdmYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjL5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPV54DswSGIvWyQ9/hBkPDmbdPLJf0Sr0XWu8rtVLCSKqwZwYrBRgwc VQYaeSBxrwXJEVDtATInKr/rS+XrWo73Xa2v0zNfLVHYDd1XGeGzmu0VAZtg4Qqf wA8IHFNJlY4ndzMzDSXvpshVtEZKYzx4L5EDgcdqR7+GpE3NnZhDEOJsxhuBSmHx ovbERNRfjPas80uYPoJrgZs8ExFwBhA5x05Z8GM6RU3MJjrdXTz1uTbjktCFQ4ZQ KYT5hvfQCo+lrCMtmcbFYVuCC/k7X0FpaMDU03yB1lFrSDlZnBdWVFjQiSbqk83C klmKL3JgZKlxowwe/gB7tNEaAwoC/GU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:13 2025 by rpki-client