$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa File: b818da63-b5bf-3282-a0d6-062f6b347687.roa (raw, json) Hash identifier: zBeQXsMti/EB8gd78V5tNib16hchykXcqp9jpPo/1dA= Subject key identifier: C8:DA:17:27:23:28:32:49:A0:2A:9A:35:78:AC:AA:DD:77:C2:4E:7B Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584929E3CC51BC10840A97075780 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 35908 IP address blocks: 174.139.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:cc:51:bc:10:84:0a:97:07:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=391886a0-1b60-4ec6-85dd-0a39470caa50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:30:ce:ba:15:3c:17:9d:a9:f5:01:ab:49: 9a:49:7b:ec:dc:9c:7d:88:9e:0b:99:b3:15:7e:3c: 44:8f:d2:6b:be:8a:49:ee:08:1a:21:2c:55:18:65: 0b:12:57:95:00:e2:ec:6a:91:2f:27:91:ec:c4:ec: 36:60:c0:db:5d:d3:9d:db:ab:c2:4e:4c:27:ac:cf: 22:b1:71:75:c4:01:29:87:27:68:2a:36:e5:d2:36: 32:d2:47:0d:1e:d5:3f:cf:b7:18:39:ed:e9:00:2d: 1d:aa:08:00:c6:dd:fd:44:08:92:63:7e:d8:11:0a: 75:8d:60:bc:69:13:39:72:e3:c1:69:ef:bc:9f:1b: 51:32:02:92:c9:29:5b:b5:d9:ba:00:98:72:9a:61: 7c:76:63:b1:50:e4:ba:60:ce:bd:fa:32:c0:c8:65: 37:d3:a5:24:9c:5b:85:c1:02:af:1f:c5:fb:3c:f4: 4a:6b:e0:3f:c9:ec:9d:fa:57:d8:9e:fa:33:19:a9: b1:a8:77:3d:85:a5:4e:49:91:17:24:de:12:49:ac: b4:07:fd:99:58:ad:d1:c8:c0:22:55:be:2b:ec:44: d2:1d:3b:2b:22:bd:f1:a1:2f:bc:74:8d:42:9f:89: 17:30:1a:1d:16:7e:f1:b1:18:d1:43:c0:f9:aa:65: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DA:17:27:23:28:32:49:A0:2A:9A:35:78:AC:AA:DD:77:C2:4E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:a6:38:f5:59:08:95:81:0f:68:a8:8f:ea:85:3b:2e:ab:4b: f2:ef:ed:db:78:14:8f:b5:86:36:a4:a0:3f:b3:a0:1f:be:63: 67:72:51:fc:d5:9c:af:f8:d0:68:ad:99:1a:ef:29:4b:72:c2: e5:a6:6a:c0:c3:ad:27:d8:e6:d5:6c:a3:4a:83:86:54:ee:6e: 5b:23:bf:fc:a6:b0:17:3e:75:d8:27:22:6a:5b:6e:b6:78:91: 36:29:15:a5:9d:b7:ce:db:b1:b2:a7:25:3a:cb:00:68:a8:36: f4:22:3e:7b:cf:42:a5:1a:1a:50:2b:b9:db:66:1f:19:69:ae: d2:67:7e:45:74:8c:5c:33:8b:c8:62:fe:6a:c7:6e:bd:ac:d1: af:e4:d0:ef:4a:47:43:bb:9b:5d:eb:76:14:b0:ee:8e:80:24: 74:e9:91:bd:6b:0d:57:75:df:3d:1b:46:1f:f4:26:01:cd:77: ce:c7:39:69:51:d1:b4:65:7a:93:da:72:22:77:a1:52:03:e2: 4c:a3:e0:b5:fd:31:17:d7:af:9f:ff:4d:89:39:7f:02:8c:68: 71:f9:54:e3:1a:7c:d4:5b:74:e8:7b:fb:36:3a:00:46:f6:f5: 3e:94:85:8c:7c:80:4c:92:bb:9a:ac:dc:15:56:04:b8:e5:3a: c0:85:c3:ee -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkp48xRvBCECpcHV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk MzkxODg2YTAtMWI2MC00ZWM2LTg1ZGQtMGEzOTQ3MGNhYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE0wzroVPBedqfUBq0maSXvs3Jx9iJ4LmbMV fjxEj9JrvopJ7ggaISxVGGULEleVAOLsapEvJ5HsxOw2YMDbXdOd26vCTkwnrM8i sXF1xAEphydoKjbl0jYy0kcNHtU/z7cYOe3pAC0dqggAxt39RAiSY37YEQp1jWC8 aRM5cuPBae+8nxtRMgKSySlbtdm6AJhymmF8dmOxUOS6YM69+jLAyGU306UknFuF wQKvH8X7PPRKa+A/yeyd+lfYnvozGamxqHc9haVOSZEXJN4SSay0B/2ZWK3RyMAi Vb4r7ETSHTsrIr3xoS+8dI1Cn4kXMBodFn7xsRjRQ8D5qmXzyQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMjaFycjKDJJoCqaNXisqt13wk57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYjgxOGRhNjMtYjViZi0z MjgyLWEwZDYtMDYyZjZiMzQ3Njg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAroswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAraY49VkIlYEPaKiP6oU7LqtL8u/t23gUj7WGNqSgP7OgH75jZ3JR/NWc r/jQaK2ZGu8pS3LC5aZqwMOtJ9jm1WyjSoOGVO5uWyO//KawFz512CcialtutniR NikVpZ23ztuxsqclOssAaKg29CI+e89CpRoaUCu522YfGWmu0md+RXSMXDOLyGL+ asduvazRr+TQ70pHQ7ubXet2FLDujoAkdOmRvWsNV3XfPRtGH/QmAc13zsc5aVHR tGV6k9pyInehUgPiTKPgtf0xF9evn/9NiTl/AoxocflU4xp81Ft06Hv7NjoARvb1 PpSFjHyATJK7mqzcFVYEuOU6wIXD7g== -----END CERTIFICATE-----Generated at Fri Apr 4 16:03:02 2025 by rpki-client