$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa File: f4eee786-dbd9-307a-9a11-b190b93526d8.roa (raw, json) Hash identifier: i6O+Xvv8jJCkvvRJ5M5g5aFlaUXXryAw8R1kEkuoe/g= Subject key identifier: D8:48:2F:E1:05:4F:A4:3E:1D:0D:B9:97:81:05:BC:00:AE:EB:60:58 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584827C54299889C6FA5FE01BBC0 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 14340 IP address blocks: 128.17.0.0/16 maxlen: 24 128.245.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:42:99:88:9c:6f:a5:fe:01:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=5eae1e87-eb5b-403f-9ccc-9eb6a3a91c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:0b:31:a9:dc:4b:1d:84:be:c6:c1:c1:30: 00:fc:e6:ec:46:e9:57:c9:54:a1:84:88:c1:a7:fe: d2:6d:40:aa:0b:e9:b7:58:a4:5c:28:02:15:dc:04: 10:84:48:58:a3:99:ed:84:40:b2:a2:da:66:43:4b: 5e:38:c5:73:f3:e4:0d:ee:7b:57:02:fc:4c:af:cb: 96:25:bf:35:cd:9e:5e:e8:0f:76:88:6a:2c:84:18: 91:74:7e:fa:aa:8e:ad:df:47:be:15:80:d6:86:6b: 2d:49:de:42:6d:d1:c8:5c:5a:26:4a:fb:12:db:7b: 2d:8b:b9:12:75:51:e7:aa:dc:b6:72:1a:8c:e8:b4: b2:c1:5c:54:a0:99:ac:74:13:72:b6:9e:a8:f3:54: aa:e5:1e:3f:ed:b1:42:d2:da:18:d6:26:89:0b:c1: ec:8e:f0:da:ea:f6:43:be:af:ab:75:f0:cd:35:3f: dc:c2:85:7e:11:7b:56:71:d4:89:74:27:4c:6c:ab: 82:8d:4c:86:ba:28:f2:06:5b:41:6d:b9:5a:2f:9e: aa:61:da:aa:a5:27:3f:00:8c:ee:67:7e:2e:db:58: 5c:63:87:c2:45:ab:4e:91:57:ec:3d:39:63:76:25: 52:02:d0:ff:ed:12:4a:f1:f7:72:d1:9f:63:dd:78: ea:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:48:2F:E1:05:4F:A4:3E:1D:0D:B9:97:81:05:BC:00:AE:EB:60:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 128.17.0.0/16 128.245.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:da:39:a9:9e:73:6e:ff:73:95:2f:ae:27:ca:cc:0e:56:b8: 15:a0:b5:38:a6:69:3d:8d:00:2b:28:10:6e:69:69:dd:81:8e: 01:8c:6f:61:87:da:b1:66:7b:45:cf:cc:57:77:48:68:e2:79: 76:8b:01:d7:1f:ee:f8:ba:fc:60:46:1d:98:f2:d6:02:3a:77: 0b:d0:de:5e:88:36:4d:a5:89:f4:d0:3b:86:1b:1c:03:29:e3: 37:84:98:b0:99:1a:e5:22:ad:3b:9e:c2:3f:ec:32:4f:d5:3b: b7:9a:ab:d0:d4:37:8e:65:e2:93:90:85:a2:22:27:d0:08:26: 86:40:ec:f9:90:81:e0:1f:cb:fd:dc:30:75:30:18:c8:a3:da: bb:6c:86:b0:a8:14:25:81:8b:5e:90:9a:a8:00:81:a9:9e:0d: 3b:90:4f:a6:27:9e:d7:3b:6a:47:a9:17:f9:bd:1d:03:c2:27: eb:eb:df:f9:5b:74:f9:12:09:78:44:0f:19:9a:d9:f8:b2:ca: b1:e4:5a:74:40:12:2b:78:26:9a:91:9e:c5:5d:a8:42:cf:33: 26:a2:e9:77:ba:ca:d1:9f:d9:c9:13:ed:38:be:8b:3d:87:0f: c4:26:db:82:fb:d0:dd:64:9f:a0:ec:a0:e5:4e:a5:be:4d:97: 11:81:99:4d -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEgnxUKZiJxvpf4Bu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk NWVhZTFlODctZWI1Yi00MDNmLTljY2MtOWViNmEzYTkxYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ4LMancSx2EvsbBwTAA/ObsRulXyVShhIjB p/7SbUCqC+m3WKRcKAIV3AQQhEhYo5nthECyotpmQ0teOMVz8+QN7ntXAvxMr8uW Jb81zZ5e6A92iGoshBiRdH76qo6t30e+FYDWhmstSd5CbdHIXFomSvsS23sti7kS dVHnqty2chqM6LSywVxUoJmsdBNytp6o81Sq5R4/7bFC0toY1iaJC8HsjvDa6vZD vq+rdfDNNT/cwoV+EXtWcdSJdCdMbKuCjUyGuijyBltBbblaL56qYdqqpSc/AIzu Z34u21hcY4fCRatOkVfsPTljdiVSAtD/7RJK8fdy0Z9j3XjqRwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFNhIL+EFT6Q+HQ25l4EFvACu62BYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZjRlZWU3ODYtZGJkOS0z MDdhLTlhMTEtYjE5MGI5MzUyNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgBEDAwCA 9TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBl2jmpnnNu/3OVL64nyswOVrgVoLU4pmk9jQArKBBuaWndgY4B jG9hh9qxZntFz8xXd0ho4nl2iwHXH+74uvxgRh2Y8tYCOncL0N5eiDZNpYn00DuG GxwDKeM3hJiwmRrlIq07nsI/7DJP1Tu3mqvQ1DeOZeKTkIWiIifQCCaGQOz5kIHg H8v93DB1MBjIo9q7bIawqBQlgYtekJqoAIGpng07kE+mJ57XO2pHqRf5vR0Dwifr 69/5W3T5Egl4RA8Zmtn4ssqx5Fp0QBIreCaakZ7FXahCzzMmoul3usrRn9nJE+04 vos9hw/EJtuC+9DdZJ+g7KDlTqW+TZcRgZlN -----END CERTIFICATE-----Generated at Sun Feb 16 16:03:16 2025 by rpki-client