$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/ba408bf2-9f89-36c3-a90c-001bd191eae6.roa File: ba408bf2-9f89-36c3-a90c-001bd191eae6.roa (raw, json) Hash identifier: BEyZgBFvzBxIVzFnce7L8upPIQxAn4exVIlOxqK7MlU= Subject key identifier: 8C:34:AF:ED:B1:FA:C5:1A:D5:7B:8B:C0:2F:64:C9:55:2C:19:BF:C8 Certificate issuer: /CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186 Certificate serial: 010D0C9F4328584891DB2E81101C52DD9F187B00 Authority key identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/ba408bf2-9f89-36c3-a90c-001bd191eae6.roa Signing time: Fri 17 Jan 2025 02:00:40 +0000 ROA not before: Fri 17 Jan 2025 02:00:40 +0000 ROA not after: Thu 17 Apr 2025 01:00:40 +0000 asID: 36610 IP address blocks: 23.226.160.0/20 maxlen: 24 64.190.44.0/22 maxlen: 24 168.100.48.0/20 maxlen: 24 216.246.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:db:2e:81:10:1c:52:dd:9f:18:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186 Validity Not Before: Jan 17 02:00:40 2025 GMT Not After : Apr 17 01:00:40 2025 GMT Subject: CN=3231ff91-9dab-485f-a015-c088d3049c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:8b:58:d3:74:25:bd:6a:e2:de:cf:1d:19: a4:6a:fa:cc:f9:c6:b9:f1:35:08:57:17:6c:06:b7: a7:d6:52:c8:49:05:c0:0d:ef:39:1a:67:f1:8a:e0: af:dd:19:28:c0:a9:c9:27:ce:72:d8:a8:52:81:e8: 47:b5:12:11:ee:fc:fb:12:9e:db:da:01:a7:24:cb: 88:0b:25:ab:df:53:22:09:b5:97:2d:25:dd:46:e5: 6f:57:8f:e7:07:c7:eb:75:d8:ef:3e:0c:8a:93:c1: 7f:72:69:31:ea:72:ec:53:bc:02:b6:2d:05:fb:f4: 67:77:fd:88:d7:79:2a:51:b4:b7:87:2a:b7:b2:44: ff:59:a2:78:47:e7:1e:11:b7:0e:e2:d6:3a:53:8f: 61:cd:e0:dc:06:d3:32:54:b1:80:33:a8:cd:63:e5: ff:e2:78:41:19:69:44:75:77:a5:ed:d3:36:62:71: 32:da:40:da:e6:67:94:05:ae:14:a4:c5:96:9a:87: 3e:c4:77:80:61:19:22:60:52:72:a1:99:df:c5:53: 60:1d:e3:23:fa:a3:83:da:0d:22:06:17:a9:2d:51: 8f:c2:c4:16:0b:76:a7:65:98:f7:61:c8:8f:de:da: 79:ae:59:f4:96:43:cd:1f:7f:22:ca:17:52:65:61: 0d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:34:AF:ED:B1:FA:C5:1A:D5:7B:8B:C0:2F:64:C9:55:2C:19:BF:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/ba408bf2-9f89-36c3-a90c-001bd191eae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl X509v3 Authority Key Identifier: keyid:9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer sbgp-ipAddrBlock: critical IPv4: 23.226.160.0/20 64.190.44.0/22 168.100.48.0/20 216.246.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:af:1a:ce:df:3d:11:35:55:a8:9e:9b:78:56:13:d3:ca:ad: 08:e2:4a:e7:f7:9b:a2:ea:c2:2b:1e:c0:88:d4:46:7b:94:ef: 64:db:9c:d2:2c:07:bd:b5:8f:6e:2f:1d:99:b3:25:23:db:19: 82:29:54:ac:84:66:b1:a0:a4:1c:6d:b1:6d:e5:07:08:7d:d8: 49:82:12:b9:0f:e0:c7:8d:9d:f0:99:35:af:ba:78:44:38:ba: 36:db:ca:20:09:ce:64:87:a0:1e:a8:10:41:6e:94:d7:29:25: 6e:6c:87:41:ed:1f:2e:41:ae:2c:7e:db:a3:19:d5:8a:64:a0: 5a:18:18:3d:b8:f6:b1:96:c1:78:ac:9e:d7:43:5c:01:31:b0: 56:90:77:ed:59:ef:a9:32:46:24:a0:67:ca:46:61:66:f1:cc: 87:0a:f6:6c:ba:23:2c:48:be:99:ee:02:13:bf:db:24:da:f6: 57:c4:1c:33:eb:8f:a2:98:80:5d:fd:10:7e:be:4d:b3:e8:fe: 21:db:63:5b:31:fb:de:f1:c2:b1:9d:5c:3c:97:2a:68:51:8b: c9:6d:be:ac:7b:be:78:97:34:dc:6b:f0:ec:c8:50:f6:a6:9b: 42:83:25:16:44:68:9b:cb:5d:c3:37:ee:09:72:46:59:80:53: 4b:94:73:77 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEiR2y6BEBxS3Z8YewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY1Zjc3NDItOThmNy00MWNhLTljNTctNWI5MDJiYzRi MTg2MB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk MzIzMWZmOTEtOWRhYi00ODVmLWEwMTUtYzA4OGQzMDQ5YzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSeLWNN0Jb1q4t7PHRmkavrM+ca58TUIVxds Bren1lLISQXADe85GmfxiuCv3RkowKnJJ85y2KhSgehHtRIR7vz7Ep7b2gGnJMuI CyWr31MiCbWXLSXdRuVvV4/nB8frddjvPgyKk8F/cmkx6nLsU7wCti0F+/Rnd/2I 13kqUbS3hyq3skT/WaJ4R+ceEbcO4tY6U49hzeDcBtMyVLGAM6jNY+X/4nhBGWlE dXel7dM2YnEy2kDa5meUBa4UpMWWmoc+xHeAYRkiYFJyoZnfxVNgHeMj+qOD2g0i BhepLVGPwsQWC3anZZj3YciP3tp5rln0lkPNH38iyhdSZWENMwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFIw0r+2x+sUa1XuLwC9kyVUsGb/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZjVm Nzc0Mi05OGY3LTQxY2EtOWM1Ny01YjkwMmJjNGIxODYvYmE0MDhiZjItOWY4OS0z NmMzLWE5MGMtMDAxYmQxOTFlYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmY1Zjc3NDItOThmNy00MWNhLTlj NTctNWI5MDJiYzRiMTg2L2JmNWY3NzQyLTk4ZjctNDFjYS05YzU3LTViOTAyYmM0 YjE4Ni5jcmwwHwYDVR0jBBgwFoAUnXppW5JWwGHhkQNScKNQYZA2d2IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZjVmNzc0Mi05OGY3LTQxY2EtOWM1Ny01Yjkw MmJjNGIxODYuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEF+KgAwQC QL4sAwQEqGQwAwQC2PbMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIavGs7fPRE1Vaiem3hWE9PKrQjiSuf3 m6LqwisewIjURnuU72TbnNIsB721j24vHZmzJSPbGYIpVKyEZrGgpBxtsW3lBwh9 2EmCErkP4MeNnfCZNa+6eEQ4ujbbyiAJzmSHoB6oEEFulNcpJW5sh0HtHy5Brix+ 26MZ1YpkoFoYGD249rGWwXisntdDXAExsFaQd+1Z76kyRiSgZ8pGYWbxzIcK9my6 IyxIvpnuAhO/2yTa9lfEHDPrj6KYgF39EH6+TbPo/iHbY1sx+97xwrGdXDyXKmhR i8ltvqx7vniXNNxr8OzIUPamm0KDJRZEaJvLXcM37glyRlmAU0uUc3c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:54 2025 by rpki-client