$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa File: df882eef-1faf-3541-8255-366c9e2451b2.roa (raw, json) Hash identifier: 8koDageBHTjINllwvO3wy3FOAn+5Er/zKoVDbN1AnH8= Subject key identifier: BC:5E:B1:B6:8C:27:F2:11:31:6E:BD:0C:49:79:F4:BD:0A:18:D5:90 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584929E3CC17B08A106E3AFB8940 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 4213 IP address blocks: 174.139.126.0/23 maxlen: 24 174.139.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:cc:17:b0:8a:10:6e:3a:fb:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=f78cac9d-c8ff-42a1-9eac-416abe17a377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:e1:18:41:de:3a:cd:64:ef:a6:ba:16:b8: a6:13:e6:95:70:48:b9:15:78:7a:2a:b6:83:4d:79: cc:fb:4e:3c:7a:e1:c4:a6:1e:a4:cb:d7:0f:36:32: 0f:5c:35:9a:b8:9b:e7:26:8a:4a:9d:94:4f:3c:41: a6:c7:ef:f7:ee:5d:bc:c1:4f:5d:4a:f5:74:ae:46: e3:c4:75:3c:54:1c:c4:f3:a9:4b:23:9b:d8:1f:e8: 92:ce:a6:78:3a:e6:59:5f:0f:8c:39:99:01:e3:b5: a5:33:46:8d:e7:8c:70:eb:86:36:d2:11:0c:07:8f: d1:4b:14:42:51:f8:65:db:0d:10:52:24:84:d0:40: 1d:f0:c7:fb:4b:0e:36:cf:cf:0e:0e:03:f3:c2:9d: 7c:e2:2b:40:8e:c8:b1:e9:9e:60:0a:b6:b5:19:0c: 2d:be:2c:83:2a:e7:79:ce:3b:9b:e7:9f:52:13:a6: 6f:b2:42:7f:5c:0e:70:25:cc:f2:70:d1:0b:90:3e: 5b:04:57:4b:5d:bc:21:30:e3:9f:79:7e:98:b6:39: 7a:8b:07:12:2f:1b:32:5e:2c:39:79:f5:7f:13:49: 03:7b:5a:7e:cf:f5:17:a1:5b:e3:de:d4:1c:a5:f3: 62:99:26:69:f4:53:66:a5:f3:08:16:1b:e5:dc:68: 0f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5E:B1:B6:8C:27:F2:11:31:6E:BD:0C:49:79:F4:BD:0A:18:D5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.126.0/23 174.139.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:bd:8c:57:19:7b:54:a6:74:6d:f3:8f:29:80:78:17:27:1c: 0a:98:8b:f4:57:31:45:54:ec:26:87:71:21:e7:fe:83:44:e8: 05:e2:41:0f:e0:18:dc:50:be:08:23:58:bc:b8:40:d0:55:4d: 1a:a9:5f:ed:e5:2e:de:5c:f7:a7:88:7d:ad:f5:83:52:1d:41: ae:4d:2d:9a:0c:fc:4a:96:48:5a:85:6b:ff:ed:94:a2:2f:43: 9f:9a:b2:ca:37:a6:c6:4a:a6:77:80:99:df:dc:98:b9:da:6e: 8c:3f:ef:ba:53:05:6c:5e:26:da:40:ba:85:2e:ca:70:ff:ae: fa:50:ff:e5:29:2b:0c:87:cb:be:ca:0e:9a:7c:5b:9f:8f:42: 74:63:6a:d4:ae:f0:6b:51:96:86:56:21:54:bf:b4:59:75:2a: e4:95:cc:7c:ed:2f:fe:94:6f:fd:8f:18:a4:48:38:27:f6:ca: 77:75:7e:06:fd:1c:7c:dd:e5:6d:6d:69:b2:ef:69:35:c0:e4: ba:42:7d:82:19:e0:63:3c:e6:d7:08:69:8d:7f:15:73:c2:02: 78:d5:cb:7b:9a:4c:74:55:ef:c6:05:3d:7f:00:80:92:e4:9e: b1:51:6f:45:fb:af:a2:f7:b0:77:77:7a:36:8d:19:02:72:d7: 77:1b:4f:3d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkp48wXsIoQbjr7iUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk Zjc4Y2FjOWQtYzhmZi00MmExLTllYWMtNDE2YWJlMTdhMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPPhGEHeOs1k76a6FrimE+aVcEi5FXh6KraD TXnM+048euHEph6ky9cPNjIPXDWauJvnJopKnZRPPEGmx+/37l28wU9dSvV0rkbj xHU8VBzE86lLI5vYH+iSzqZ4OuZZXw+MOZkB47WlM0aN54xw64Y20hEMB4/RSxRC Ufhl2w0QUiSE0EAd8Mf7Sw42z88ODgPzwp184itAjsix6Z5gCra1GQwtviyDKud5 zjub559SE6ZvskJ/XA5wJczycNELkD5bBFdLXbwhMOOfeX6Ytjl6iwcSLxsyXiw5 efV/E0kDe1p+z/UXoVvj3tQcpfNimSZp9FNmpfMIFhvl3GgPHwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLxesbaMJ/IRMW69DEl59L0KGNWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZGY4ODJlZWYtMWZhZi0z NTQxLTgyNTUtMzY2YzllMjQ1MWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBrot+AwQA rouJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAS9jFcZe1SmdG3zjymAeBcnHAqYi/RXMUVU7CaHcSHn/oNE 6AXiQQ/gGNxQvggjWLy4QNBVTRqpX+3lLt5c96eIfa31g1IdQa5NLZoM/EqWSFqF a//tlKIvQ5+asso3psZKpneAmd/cmLnabow/77pTBWxeJtpAuoUuynD/rvpQ/+Up KwyHy77KDpp8W5+PQnRjatSu8GtRloZWIVS/tFl1KuSVzHztL/6Ub/2PGKRIOCf2 ynd1fgb9HHzd5W1tabLvaTXA5LpCfYIZ4GM85tcIaY1/FXPCAnjVy3uaTHRV78YF PX8AgJLknrFRb0X7r6L3sHd3ejaNGQJy13cbTz0= -----END CERTIFICATE-----Generated at Fri Apr 4 19:29:46 2025 by rpki-client