$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa File: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (raw, json) Hash identifier: jRuUDHm5SwzBoHg3p0Bh+q9IW3rnIyBX5prRlQHHvtI= Subject key identifier: E8:B7:CC:09:23:93:E8:F0:4C:B7:B0:7D:6F:1F:DD:94:8C:2C:34:A7 Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F43285848E00650E9DC68C7FA96A51600 Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 54334 IP address blocks: 52.119.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:50:e9:dc:68:c7:fa:96:a5:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=e7332236-1717-424e-b381-6e241342a31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:c4:7f:e3:1c:03:91:8f:99:0a:1c:e7:6b: 9a:f0:54:83:3e:d9:7d:ac:c3:b9:ea:d2:5d:82:cc: fe:43:24:7e:6e:ca:a1:1a:32:06:b2:df:2d:e6:3d: 88:54:b5:f0:2d:38:e8:ef:6e:89:8c:0a:a3:0b:39: 26:ae:b5:17:a3:f6:92:14:e9:e8:41:a2:fc:ae:1a: 14:b2:35:a6:4f:39:06:ee:e2:aa:28:c6:27:2d:df: 3b:a1:5b:12:1c:df:e3:3d:7d:cd:9b:58:65:48:19: a2:d0:12:b1:2a:1d:23:27:9c:e7:3f:1d:fc:3b:81: a5:55:a8:0d:96:f1:a1:04:e3:1a:f9:c3:68:61:a1: 2f:0a:e8:82:0a:53:ec:97:0e:3f:97:32:da:34:8e: 96:e7:ad:6a:ce:71:b6:bd:6b:21:d5:a2:3e:69:50: 57:dd:82:30:1a:51:8e:21:90:ae:73:c5:6f:22:6c: be:d3:33:34:38:c5:ec:1a:45:12:70:d0:91:90:5b: b0:cf:7a:d5:5d:fc:1d:75:d1:70:89:4e:06:ef:50: 0e:4d:f8:b7:16:c4:60:a2:85:ca:be:13:4a:e6:12: ec:13:f2:92:e5:0b:ee:81:1e:61:12:2a:c9:16:21: 25:72:a5:73:c0:bc:0e:91:81:d5:a5:57:61:aa:a8: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B7:CC:09:23:93:E8:F0:4C:B7:B0:7D:6F:1F:DD:94:8C:2C:34:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: 52.119.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:1a:89:ea:54:b6:9b:99:ab:76:3a:95:16:df:01:c4:84:ca: d0:a7:8e:ca:c2:e8:dc:cb:7d:d8:3b:b9:31:be:90:4c:82:5e: a8:73:72:23:02:4c:ac:d8:a4:07:ec:82:1b:aa:78:3c:aa:3e: e2:a0:e6:8b:06:a7:d6:45:78:06:fe:1b:34:6d:77:f2:c5:8a: 8b:a1:2e:1f:a0:eb:c1:77:03:67:52:d1:95:de:4e:d9:2c:97: 1f:28:09:5c:34:64:50:c0:03:83:dc:5a:13:00:b0:04:e4:20: 92:5a:5b:39:dd:1f:b1:45:9f:d1:38:9c:4d:72:29:72:d0:5e: 01:9e:27:67:32:b3:02:f8:d6:ad:dc:ce:73:bb:f7:ae:e5:ad: 2e:6f:a2:c8:7e:01:1c:5c:58:0c:17:31:75:9e:3f:b6:31:4b: 02:c8:4a:75:e4:06:37:ad:23:82:9c:b6:14:11:55:ff:19:e4: c9:ea:9d:40:8f:47:e1:fe:cc:ec:dc:34:59:ad:31:8e:b7:63: a4:1a:34:76:b5:8d:e4:71:36:47:8b:50:d8:55:5c:4b:0b:0d: db:cf:42:30:79:77:c0:07:10:e3:90:47:e7:e4:87:a0:1b:85: 5d:a3:63:0f:13:21:7d:16:c0:e4:5e:2c:ba:b9:ca:da:d5:b8: be:6b:4a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBlDp3GjH+palFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTczMzIyMzYtMTcxNy00MjRlLWIzODEtNmUyNDEzNDJhMzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2TEf+McA5GPmQoc52ua8FSDPtl9rMO56tJd gsz+QyR+bsqhGjIGst8t5j2IVLXwLTjo726JjAqjCzkmrrUXo/aSFOnoQaL8rhoU sjWmTzkG7uKqKMYnLd87oVsSHN/jPX3Nm1hlSBmi0BKxKh0jJ5znPx38O4GlVagN lvGhBOMa+cNoYaEvCuiCClPslw4/lzLaNI6W561qznG2vWsh1aI+aVBX3YIwGlGO IZCuc8VvImy+0zM0OMXsGkUScNCRkFuwz3rVXfwdddFwiU4G71AOTfi3FsRgooXK vhNK5hLsE/KS5QvugR5hEirJFiElcqVzwLwOkYHVpVdhqqgtRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi3zAkjk+jwTLewfW8f3ZSMLDSnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvYmY5YThlMTctOGE4Zi0z ODlhLTgwYjQtOGFiZjgyYTg1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgaiepUtpuZq3Y6lRbfAcSEytCnjsrC6NzLfdg7uTG+kEyCXqhzciMC TKzYpAfsghuqeDyqPuKg5osGp9ZFeAb+GzRtd/LFiouhLh+g68F3A2dS0ZXeTtks lx8oCVw0ZFDAA4PcWhMAsATkIJJaWzndH7FFn9E4nE1yKXLQXgGeJ2cyswL41q3c znO7967lrS5vosh+ARxcWAwXMXWeP7YxSwLISnXkBjetI4KcthQRVf8Z5MnqnUCP R+H+zOzcNFmtMY63Y6QaNHa1jeRxNkeLUNhVXEsLDdvPQjB5d8AHEOOQR+fkh6Ab hV2jYw8TIX0WwOReLLq5ytrVuL5rSlM= -----END CERTIFICATE-----Generated at Tue Apr 8 18:13:57 2025 by rpki-client