$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa File: 3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa (raw, json) Hash identifier: NKrXciDAB+uKpmI1FwiQHDW9lW0/HndVHujM+0CzHTU= Subject key identifier: 82:9C:3A:64:61:3E:63:06:7C:30:73:56:41:09:F7:5B:F6:F7:03:A7 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F43285848A9962355CF759513BF6EF780 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 14340 IP address blocks: 140.190.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:23:55:cf:75:95:13:bf:6e:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=1f9d5d33-f458-4b70-a79d-f758722d8c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8f:03:23:ab:59:85:83:56:10:f2:8c:f3:cb: c5:42:4a:0c:66:d7:e1:a3:46:22:e1:30:aa:47:46: 44:9f:27:08:2b:aa:e0:77:ef:bd:bc:d7:f2:ea:be: 7c:1a:a7:b5:4b:78:91:12:60:df:1f:2d:df:18:da: 54:6b:54:ca:db:3c:67:8a:ed:9a:7f:8f:e5:87:44: 71:d4:68:73:73:c0:34:49:3d:e9:1f:8d:cd:8c:47: ef:d1:fc:e1:72:8b:a8:ff:c3:9c:85:2f:a4:49:85: 0b:d3:a7:ca:47:68:f9:48:39:f6:bf:a7:79:19:ae: 3c:83:34:4e:54:c9:7c:5f:75:bf:73:ba:7e:00:ae: 9d:12:06:12:e3:63:64:f5:9c:3b:80:6f:0a:4d:1b: 55:e5:11:f0:c8:cf:f3:8f:49:d4:8e:07:26:0d:31: fa:dc:c6:ec:e4:9d:75:1c:3a:d3:54:19:a9:fd:ef: 18:40:fe:11:28:f5:a6:88:87:33:c7:1b:6e:f0:9e: d0:02:ab:4f:94:4e:c4:eb:e8:9c:8b:18:f8:10:cf: 29:7a:75:aa:70:50:84:78:e7:f3:66:a7:d7:05:45: 44:c8:22:28:b5:75:7f:8d:11:1d:3c:a1:21:8e:8f: 93:a7:c5:3b:9d:36:b4:d5:bb:ac:92:d5:01:bb:2e: 87:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9C:3A:64:61:3E:63:06:7C:30:73:56:41:09:F7:5B:F6:F7:03:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:bf:8e:23:0e:20:81:c3:58:9a:ed:38:f6:be:76:88:ad:63: 55:b8:16:fc:dc:81:3d:d6:70:4a:41:1e:ff:35:13:13:78:f2: e3:68:35:71:1f:fa:44:6c:07:e8:77:f7:78:2d:0f:2d:c1:d6: 59:f1:14:d3:d2:d6:24:17:9d:ec:c5:e8:54:6e:f5:53:ce:d7: 60:6d:8e:60:69:13:e7:07:28:69:d3:ed:41:10:ba:a3:80:43: 86:fb:66:9f:12:e1:97:b7:d0:2f:1e:dd:39:d9:cd:ec:6f:8d: 3c:00:85:ab:91:0c:03:51:f7:6d:0f:67:19:2e:b2:99:f6:19: 4b:c7:1d:d2:ed:1d:bc:34:70:9b:89:e9:7e:f2:76:2b:80:94: 66:ca:b2:29:7f:a6:84:ed:90:e3:46:15:4e:67:8c:c2:b7:e9: 99:1e:31:0b:d9:7a:b5:6c:a0:a0:c2:8e:99:19:74:d5:46:44: 2f:16:0e:df:71:09:bd:f8:4f:98:4a:ee:ef:d8:f6:9e:78:b4: c0:76:f3:51:02:2b:e6:88:8f:70:0f:55:ec:5d:f1:2a:4b:8f: dc:18:36:c7:10:75:21:52:5e:18:c7:8a:2e:73:d4:4b:9c:3c: 4e:fb:e0:aa:16:de:43:9f:d1:6c:09:2f:9c:e4:15:ba:86:36: a7:c1:23:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliNVz3WVE79u94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MWY5ZDVkMzMtZjQ1OC00YjcwLWE3OWQtZjc1ODcyMmQ4YzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko8DI6tZhYNWEPKM88vFQkoMZtfho0Yi4TCq R0ZEnycIK6rgd++9vNfy6r58Gqe1S3iREmDfHy3fGNpUa1TK2zxniu2af4/lh0Rx 1Ghzc8A0ST3pH43NjEfv0fzhcouo/8OchS+kSYUL06fKR2j5SDn2v6d5Ga48gzRO VMl8X3W/c7p+AK6dEgYS42Nk9Zw7gG8KTRtV5RHwyM/zj0nUjgcmDTH63Mbs5J11 HDrTVBmp/e8YQP4RKPWmiIczxxtu8J7QAqtPlE7E6+icixj4EM8penWqcFCEeOfz ZqfXBUVEyCIotXV/jREdPKEhjo+Tp8U7nTa01busktUBuy6HJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKcOmRhPmMGfDBzVkEJ91v29wOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvM2M2MTcxYjUtZjIwMC0z OTAyLTk1MDQtNmI1ZjllYjRmYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjL7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa/jiMOIIHDWJrtOPa+doitY1W4FvzcgT3WcEpBHv81ExN48uNoNXEf +kRsB+h393gtDy3B1lnxFNPS1iQXnezF6FRu9VPO12BtjmBpE+cHKGnT7UEQuqOA Q4b7Zp8S4Ze30C8e3TnZzexvjTwAhauRDANR920PZxkuspn2GUvHHdLtHbw0cJuJ 6X7ydiuAlGbKsil/poTtkONGFU5njMK36ZkeMQvZerVsoKDCjpkZdNVGRC8WDt9x Cb34T5hK7u/Y9p54tMB281ECK+aIj3APVexd8SpLj9wYNscQdSFSXhjHii5z1Euc PE774KoW3kOf0WwJL5zkFbqGNqfBIw4= -----END CERTIFICATE-----Generated at Sat Apr 5 08:56:13 2025 by rpki-client