$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa File: fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa (raw, json) Hash identifier: lioRxM21g2EZTrE7UmS9t8Gz9UiwSlbn0/iAtfwYIvo= Subject key identifier: 02:45:82:00:C4:5C:6D:51:7D:7E:B4:56:AC:8E:58:76:79:6D:9C:8F Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584953C44C1E406FD794E09232C0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11051 IP address blocks: 174.139.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4c:1e:40:6f:d7:94:e0:92:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=5c8b6e12-bfa0-49c8-8419-6438ca84b8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e9:0b:89:0b:bf:d3:ba:eb:d8:ea:0f:54:df: 66:b0:f6:59:d6:5c:8e:7b:7b:32:4c:4d:81:cd:cc: ed:67:fd:f0:63:42:37:27:51:60:9e:79:3b:98:63: b7:85:f8:48:3c:4e:08:b0:56:64:ed:15:fa:a6:77: 8e:50:15:12:41:40:ce:dd:10:ac:44:4e:40:ae:1d: 71:39:84:f4:df:86:93:e0:da:3e:cc:d6:5b:6b:4f: c8:cc:4e:29:b3:6c:53:89:4c:45:e9:09:dc:7e:a8: 2e:c6:30:21:69:07:a6:0e:8a:d5:89:08:9e:9e:83: c9:e4:26:e6:1c:50:97:75:63:6c:6d:56:71:23:1d: c4:34:ed:19:d1:ab:78:2b:6d:5b:75:a9:0e:68:86: 12:74:63:0c:e7:53:34:09:91:9e:44:15:ee:dc:ed: 58:da:86:eb:19:fa:0f:70:f6:98:cf:6d:9f:5d:38: 0e:59:d8:87:60:24:f4:1e:5f:47:04:d9:ca:e9:95: b2:af:df:60:89:f2:0b:db:f0:70:ee:0e:82:09:94: 7a:24:81:e1:4b:96:23:26:77:e4:40:c7:43:56:df: 49:7b:91:d1:77:dc:a3:a9:0d:34:67:4c:32:6a:cb: bd:9c:4a:8f:4d:b4:d3:b9:8d:27:f8:45:e9:ef:2c: ae:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:45:82:00:C4:5C:6D:51:7D:7E:B4:56:AC:8E:58:76:79:6D:9C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:81:e8:b0:2d:75:45:bb:9a:01:bf:0f:e8:1c:66:82:5a:a6: 2e:52:4a:57:47:b0:93:46:89:17:26:a0:f1:d4:52:9a:47:66: 1c:6d:62:76:cc:ed:63:8a:80:0a:df:c3:47:07:e2:4d:dd:b4: 81:50:99:47:dc:68:3f:4d:00:c0:60:d2:ff:e0:6c:5f:53:71: e1:c3:21:08:81:3f:05:ee:d9:d1:3b:6e:a5:8a:c6:e2:08:e5: 1b:42:d2:c1:81:fb:40:e1:4f:23:0e:fe:cf:a0:d8:0a:a8:eb: 2b:7e:08:83:d4:85:e3:35:e6:61:99:31:98:bc:da:2a:06:22: 6a:13:38:e7:86:f8:a7:6d:45:ba:d7:89:86:eb:80:e3:1a:8a: 95:a4:73:71:89:c1:74:62:1a:08:1d:65:e4:83:3f:41:56:ae: 8d:5a:16:41:fb:a8:f1:0b:d1:74:3d:8c:3e:12:06:25:e6:18: 73:09:3c:77:41:11:78:9d:c7:fb:9d:64:b8:fe:c0:24:33:13: 1c:e9:e8:e4:ad:df:cf:46:98:75:d8:6e:84:63:1e:dd:4a:78: 31:c0:11:98:dc:57:8d:cf:2c:75:bc:6a:0f:9f:6e:e3:f5:b7: b6:44:ee:d3:9c:88:40:50:4a:2b:3a:27:fe:41:57:b1:e1:be: 8a:fd:71:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEweQG/XlOCSMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWM4YjZlMTItYmZhMC00OWM4LTg0MTktNjQzOGNhODRiOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+kLiQu/07rr2OoPVN9msPZZ1lyOe3syTE2B zcztZ/3wY0I3J1Fgnnk7mGO3hfhIPE4IsFZk7RX6pneOUBUSQUDO3RCsRE5Arh1x OYT034aT4No+zNZba0/IzE4ps2xTiUxF6QncfqguxjAhaQemDorViQienoPJ5Cbm HFCXdWNsbVZxIx3ENO0Z0at4K21bdakOaIYSdGMM51M0CZGeRBXu3O1Y2obrGfoP cPaYz22fXTgOWdiHYCT0Hl9HBNnK6ZWyr99gifIL2/Bw7g6CCZR6JIHhS5YjJnfk QMdDVt9Je5HRd9yjqQ00Z0wyasu9nEqPTbTTuY0n+EXp7yyuiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJFggDEXG1RfX60VqyOWHZ5bZyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZmM1MjNjZTQtYTZmNC0z ZTUzLWE0OGItMTM4ZTVhYjUwOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArosBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2B6LAtdUW7mgG/D+gcZoJapi5SSldHsJNGiRcmoPHUUppHZhxtYnbM 7WOKgArfw0cH4k3dtIFQmUfcaD9NAMBg0v/gbF9TceHDIQiBPwXu2dE7bqWKxuII 5RtC0sGB+0DhTyMO/s+g2Aqo6yt+CIPUheM15mGZMZi82ioGImoTOOeG+KdtRbrX iYbrgOMaipWkc3GJwXRiGggdZeSDP0FWro1aFkH7qPEL0XQ9jD4SBiXmGHMJPHdB EXidx/udZLj+wCQzExzp6OSt389GmHXYboRjHt1KeDHAEZjcV43PLHW8ag+fbuP1 t7ZE7tOciEBQSis6J/5BV7Hhvor9ceM= -----END CERTIFICATE-----Generated at Mon Apr 21 22:21:58 2025 by rpki-client