$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3aa31347-1ae5-323d-86b9-b57659cd5d56.roa File: 3aa31347-1ae5-323d-86b9-b57659cd5d56.roa (raw, json) Hash identifier: AJMa6ep8+uovyUaxui0NNX0ZfGV1JmIzsJQ8p20CqEI= Subject key identifier: 1E:7A:72:1B:34:81:58:7B:4C:BD:D5:DE:6E:6A:96:12:F5:E9:FD:D3 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F43285848D0ABB1D5165CE939B5AAB388 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3aa31347-1ae5-323d-86b9-b57659cd5d56.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 155.226.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b1:d5:16:5c:e9:39:b5:aa:b3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=5f6d02c3-3f5b-462b-b34a-854e07dd8720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:16:9b:6a:5b:5f:65:90:b2:23:1e:a9:93:ea: 79:db:91:d5:c8:9b:01:9d:ce:69:d3:a7:62:77:87: 61:d1:e4:13:25:95:75:46:f8:fa:6f:a7:af:df:34: b8:f5:62:f9:33:74:47:f8:ca:65:43:d9:c3:92:f0: 01:74:65:1b:18:e2:69:8f:f5:2a:39:6b:70:93:3f: 58:ba:0b:ae:6f:16:a5:9e:1c:f0:f2:d7:3c:1f:f2: 50:ec:e7:5d:f6:0a:e9:9d:2b:eb:64:05:84:93:d7: 29:25:1c:22:a3:35:b4:96:49:59:b6:97:50:68:45: 36:41:df:2c:89:66:95:1c:e0:ea:56:46:bf:c8:54: e0:fd:df:63:d4:f5:4c:0d:c4:96:83:4d:01:0b:15: 84:fa:e6:5e:97:39:c6:b2:e8:9a:83:36:aa:d8:27: 7c:96:6c:25:b3:28:bb:b8:bf:27:8a:10:b2:8c:c5: a2:ba:ae:a8:a1:a7:4b:a9:c2:06:f4:1d:71:27:4b: 11:58:7d:73:70:b2:a3:ec:32:a9:2a:48:ab:c4:39: d4:c6:a4:bf:b5:35:83:5e:e6:13:b2:42:67:78:64: 62:54:f8:74:f0:e4:81:f1:c4:c9:e7:b3:55:6b:a8: 19:e0:f8:02:97:45:a8:13:fd:23:71:ae:48:81:67: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7A:72:1B:34:81:58:7B:4C:BD:D5:DE:6E:6A:96:12:F5:E9:FD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3aa31347-1ae5-323d-86b9-b57659cd5d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 155.226.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:3d:fd:1f:13:92:67:fe:5c:2c:b3:d3:c8:ff:da:56:48:ef: 6f:b6:bc:37:99:61:d7:c2:24:64:82:6a:a1:45:31:04:2e:de: 03:8f:e9:88:05:79:0f:dd:0e:63:98:f3:a3:a9:d1:cc:1a:89: 24:0f:8e:0e:29:c9:69:0f:0b:9a:ff:e5:17:56:8f:66:f8:25: 86:35:13:de:3b:56:85:f1:eb:c7:17:94:8a:81:0e:50:d7:f8: cc:bd:de:ac:c7:fe:e1:47:ef:5d:b9:72:8f:12:45:aa:a0:7f: c8:83:97:68:84:c4:a5:04:90:c4:0f:3d:e5:3f:db:94:b2:68: 65:ab:71:f7:63:d8:0f:6b:7d:64:79:50:b8:c7:29:d4:28:e7: 09:9c:32:e9:6a:b5:bc:ed:29:3b:e9:a9:1f:da:af:59:a3:74: 52:9f:5a:cb:0e:a2:f9:99:92:57:ba:61:d7:0d:a8:92:41:65: 03:5b:a6:63:6e:93:8f:7e:88:ed:ff:b7:71:e9:5b:c1:5f:37: 57:2f:cb:97:e3:87:87:98:23:c5:75:e5:99:51:95:1d:69:0f: e1:e0:a9:d3:fb:de:c2:ac:2d:52:a7:12:e1:3d:49:57:63:e2: da:94:ad:ad:0c:cb:04:39:28:be:19:1a:27:43:04:e1:d7:8e: 32:0c:c4:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7HVFlzpObWqs4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NWY2ZDAyYzMtM2Y1Yi00NjJiLWIzNGEtODU0ZTA3ZGQ4NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxabaltfZZCyIx6pk+p525HVyJsBnc5p06di d4dh0eQTJZV1Rvj6b6ev3zS49WL5M3RH+MplQ9nDkvABdGUbGOJpj/UqOWtwkz9Y uguubxalnhzw8tc8H/JQ7Odd9grpnSvrZAWEk9cpJRwiozW0lklZtpdQaEU2Qd8s iWaVHODqVka/yFTg/d9j1PVMDcSWg00BCxWE+uZelznGsuiagzaq2Cd8lmwlsyi7 uL8nihCyjMWiuq6ooadLqcIG9B1xJ0sRWH1zcLKj7DKpKkirxDnUxqS/tTWDXuYT skJneGRiVPh08OSB8cTJ57NVa6gZ4PgCl0WoE/0jca5IgWdj1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB56chs0gVh7TL3V3m5qlhL16f3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvM2FhMzEzNDctMWFlNS0z MjNkLTg2YjktYjU3NjU5Y2Q1ZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm+KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKg9/R8Tkmf+XCyz08j/2lZI72+2vDeZYdfCJGSCaqFFMQQu3gOP6YgF eQ/dDmOY86Op0cwaiSQPjg4pyWkPC5r/5RdWj2b4JYY1E947VoXx68cXlIqBDlDX +My93qzH/uFH7125co8SRaqgf8iDl2iExKUEkMQPPeU/25SyaGWrcfdj2A9rfWR5 ULjHKdQo5wmcMulqtbztKTvpqR/ar1mjdFKfWssOovmZkle6YdcNqJJBZQNbpmNu k49+iO3/t3HpW8FfN1cvy5fjh4eYI8V15ZlRlR1pD+HgqdP73sKsLVKnEuE9SVdj 4tqUra0MywQ5KL4ZGidDBOHXjjIMxB4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:08 2025 by rpki-client