$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa File: e969eb6b-84bd-33ed-adf5-6a299076b70f.roa (raw, json) Hash identifier: huuWo4Img1n/jUWAZdhNlHPluOJgUZTqDMVOcrSOC14= Subject key identifier: 14:4D:9E:45:B6:7B:2C:86:C6:1C:2F:4E:70:D2:AF:9A:EE:59:D4:9A Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584908816AC3584B3027A295D040 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 32870 IP address blocks: 136.147.164.0/22 maxlen: 24 136.147.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6a:c3:58:4b:30:27:a2:95:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=2af2ef4e-f3ed-4f73-85eb-f6954330eb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:83:08:54:35:5e:cb:ca:ea:2d:ba:e1:5a:d8: 6b:78:91:d8:61:3d:25:58:c4:a0:7f:48:1b:72:95: 9d:69:62:24:bf:e9:e6:d6:6e:39:67:be:3b:44:4a: 81:21:33:ca:19:e2:e3:8d:12:8b:c4:65:09:c0:2f: 03:4a:ef:88:16:6a:b6:3c:01:0f:85:c7:52:97:3f: a1:4c:1e:40:9f:cf:40:d9:e0:51:2c:40:b1:f0:59: d8:5b:80:b7:42:53:8c:6f:10:83:99:2e:65:46:63: 6c:52:89:95:bf:3c:85:b3:8b:c4:df:a0:c5:eb:08: b5:f6:dd:c4:f3:fa:00:a4:48:d1:4d:5f:70:fc:39: 53:18:51:99:80:42:f7:08:40:c5:dc:d7:e6:e4:c9: d1:f5:51:20:e5:8e:6f:5d:3f:47:eb:41:6f:3c:53: 22:c8:9b:d5:cf:88:d3:37:77:84:e2:d7:bc:c0:7f: e8:5b:28:e2:96:70:8b:ce:f7:06:39:57:52:ae:96: 6d:3a:2d:d4:6a:65:43:83:6a:bf:87:dc:1c:92:fc: 3d:53:09:d9:8d:51:14:18:bb:4b:36:0c:1a:bd:f9: 0c:65:92:80:13:8b:01:fa:56:a0:97:63:77:7f:c8: b3:2b:08:bc:a8:f7:32:80:2f:e4:ea:38:60:3b:b1: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4D:9E:45:B6:7B:2C:86:C6:1C:2F:4E:70:D2:AF:9A:EE:59:D4:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.164.0/22 136.147.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:24:cc:c5:55:28:e4:e1:04:1e:8d:7e:41:b6:b4:c5:04:bb: 2a:29:01:aa:5f:1a:63:f5:62:3b:37:57:93:ca:88:e9:57:90: 0f:2e:e6:e4:fc:a9:7c:55:f1:36:49:ea:0c:e4:8c:ac:89:40: fa:8e:4c:eb:eb:b3:61:87:da:93:bc:5d:37:72:84:4a:6d:71: e3:da:cb:32:2d:6a:fb:1d:d0:0b:17:cf:23:9c:7b:17:96:54: fc:d9:08:78:65:bc:3c:e5:61:f3:de:ac:27:cb:62:d3:b7:8b: 19:56:c7:da:8e:2f:3b:47:21:f4:27:42:d4:9c:10:c5:8b:60: b8:ed:54:d9:f6:5c:1c:f2:75:12:33:54:3d:72:22:8c:97:d5: 3c:19:5b:7b:92:6f:ec:c0:e2:5b:74:94:e8:3d:5c:c0:d1:89: 2f:f8:5e:9b:5c:93:9b:3b:a0:72:21:2f:a4:2c:d8:d7:05:42: 7d:6e:e1:79:8f:d0:cf:15:47:8e:ca:a2:90:58:0f:eb:bf:a7: 61:44:f8:10:27:2c:11:c8:3d:cb:56:db:2c:8d:1a:d2:88:e2: a8:de:22:d2:ac:74:73:d7:a6:5a:5c:de:c4:48:00:c9:30:9d: d8:fd:3b:9c:64:6b:48:d9:df:c2:69:72:ae:b9:65:c4:58:fe: bd:2c:c5:31 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkIgWrDWEswJ6KV0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MmFmMmVmNGUtZjNlZC00ZjczLTg1ZWItZjY5NTQzMzBlYjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloMIVDVey8rqLbrhWthreJHYYT0lWMSgf0gb cpWdaWIkv+nm1m45Z747REqBITPKGeLjjRKLxGUJwC8DSu+IFmq2PAEPhcdSlz+h TB5An89A2eBRLECx8FnYW4C3QlOMbxCDmS5lRmNsUomVvzyFs4vE36DF6wi19t3E 8/oApEjRTV9w/DlTGFGZgEL3CEDF3Nfm5MnR9VEg5Y5vXT9H60FvPFMiyJvVz4jT N3eE4te8wH/oWyjilnCLzvcGOVdSrpZtOi3UamVDg2q/h9wckvw9UwnZjVEUGLtL NgwavfkMZZKAE4sB+lagl2N3f8izKwi8qPcygC/k6jhgO7F+uQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBRNnkW2eyyGxhwvTnDSr5ruWdSaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZTk2OWViNmItODRiZC0z M2VkLWFkZjUtNmEyOTkwNzZiNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCiJOkAwQB iJOuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKwkzMVVKOThBB6NfkG2tMUEuyopAapfGmP1Yjs3V5PKiOlX kA8u5uT8qXxV8TZJ6gzkjKyJQPqOTOvrs2GH2pO8XTdyhEptcePayzItavsd0AsX zyOcexeWVPzZCHhlvDzlYfPerCfLYtO3ixlWx9qOLztHIfQnQtScEMWLYLjtVNn2 XBzydRIzVD1yIoyX1TwZW3uSb+zA4lt0lOg9XMDRiS/4Xptck5s7oHIhL6Qs2NcF Qn1u4XmP0M8VR47KopBYD+u/p2FE+BAnLBHIPctW2yyNGtKI4qjeItKsdHPXplpc 3sRIAMkwndj9O5xka0jZ38Jpcq65ZcRY/r0sxTE= -----END CERTIFICATE-----Generated at Sat Apr 5 08:56:04 2025 by rpki-client