$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa File: dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa (raw, json) Hash identifier: 71Ln4nPXZQ3b9MsCNuhM1idxelTDWmzIHbmZY/7JadI= Subject key identifier: 55:EB:A5:75:5A:B7:AC:AB:97:D8:44:FB:07:4C:32:4E:17:87:1E:66 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F43285849B6DF4FCE14535C5AD6967580 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 32870 IP address blocks: 136.147.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4f:ce:14:53:5c:5a:d6:96:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=c72711a1-9466-457f-8fc4-0d2e62b7efb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:52:50:4a:98:ae:7d:c8:41:1b:b6:f8:9c: 5b:bd:d9:06:de:eb:3e:87:76:87:9e:fa:5d:f8:31: 01:91:d0:de:1b:b0:98:74:93:03:a8:43:7b:2e:81: 62:23:94:91:c3:c5:1b:00:62:15:f2:a9:e2:eb:0c: df:66:34:65:81:4d:74:22:18:64:cf:93:89:ca:20: d9:67:10:d4:57:74:0b:19:0e:75:54:15:6e:50:05: 18:fa:97:55:9e:44:ea:a7:de:ae:fe:63:b8:e7:ec: a4:59:b0:5e:81:d8:e9:48:38:20:2e:5a:f5:49:dd: 54:4c:a7:d3:2e:64:66:8b:17:d4:2b:ae:79:d8:b8: 4f:0e:88:4a:ea:14:a4:97:c7:c8:eb:fe:84:c9:dc: 48:7e:27:32:aa:c6:6d:9a:e6:3c:69:d1:32:a0:3b: 84:b7:e7:0c:58:e4:ae:51:82:7d:be:54:36:5d:ec: 06:d1:c1:31:4e:c5:f4:7a:2f:c8:7b:99:ca:d0:ed: 32:26:4a:95:be:1f:89:ab:cc:82:9d:1d:80:18:7d: 3e:20:c7:aa:6a:30:7b:cb:e5:d3:91:89:e8:f0:fb: b3:2f:01:01:36:48:5f:c4:49:3e:36:fb:16:7d:3d: 13:c3:e6:46:40:a4:cf:af:51:04:ca:38:9a:7f:13: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EB:A5:75:5A:B7:AC:AB:97:D8:44:FB:07:4C:32:4E:17:87:1E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d4:0a:32:0e:8a:1b:47:39:2a:da:c2:ba:33:49:1f:31:ee: 42:05:ef:0c:7c:80:ff:08:19:a8:a5:cc:ec:09:bf:10:43:35: 19:b3:8e:9e:cb:68:52:5d:8f:e9:2e:17:cf:cc:f7:eb:de:c4: dc:ef:bf:f7:0f:22:f8:16:e6:8b:ab:51:71:92:79:c1:55:f6: e8:55:be:96:aa:cc:aa:06:a5:a2:9f:c4:fc:00:71:31:27:0a: 2e:08:3a:38:9a:49:fa:1f:14:39:b5:5d:22:31:3c:96:9f:cf: 88:5f:15:03:f4:ff:a9:21:a6:19:b3:0c:59:ca:e8:8b:3b:08: c5:e8:0c:7d:be:1b:97:c5:80:d0:88:b8:17:6e:9e:9a:b7:a2: 19:16:4d:a0:0d:f9:e5:eb:4a:a1:9c:16:62:d6:24:4d:00:81: 5e:33:e2:5e:61:25:89:a9:87:51:11:7c:67:cd:a9:3a:c6:97: 84:03:ad:a0:74:08:0c:d2:ec:ba:f3:64:a6:35:24:a4:cd:8c: f9:c3:a3:c9:13:5e:c6:a5:e2:eb:c3:8f:c0:c5:86:f7:df:e4: b0:dd:5a:83:c1:f1:03:44:e8:73:ea:80:5f:4d:69:cd:06:dd: 3e:2d:b8:8e:85:64:86:a5:46:03:db:eb:d1:14:a0:d9:a4:0a: aa:90:cc:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230/OFFNcWtaWdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk YzcyNzExYTEtOTQ2Ni00NTdmLThmYzQtMGQyZTYyYjdlZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSBSUEqYrn3IQRu2+JxbvdkG3us+h3aHnvpd +DEBkdDeG7CYdJMDqEN7LoFiI5SRw8UbAGIV8qni6wzfZjRlgU10Ihhkz5OJyiDZ ZxDUV3QLGQ51VBVuUAUY+pdVnkTqp96u/mO45+ykWbBegdjpSDggLlr1Sd1UTKfT LmRmixfUK6552LhPDohK6hSkl8fI6/6EydxIficyqsZtmuY8adEyoDuEt+cMWOSu UYJ9vlQ2XewG0cExTsX0ei/Ie5nK0O0yJkqVvh+Jq8yCnR2AGH0+IMeqajB7y+XT kYno8PuzLwEBNkhfxEk+NvsWfT0Tw+ZGQKTPr1EEyjiafxMmawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXrpXVat6yrl9hE+wdMMk4Xhx5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZGQzNDAxZGMtMDBkOS0z MWMzLWFlYTgtNDE1MGE4N2YxZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiJOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLUCjIOihtHOSrawrozSR8x7kIF7wx8gP8IGailzOwJvxBDNRmzjp7L aFJdj+kuF8/M9+vexNzvv/cPIvgW5ourUXGSecFV9uhVvpaqzKoGpaKfxPwAcTEn Ci4IOjiaSfofFDm1XSIxPJafz4hfFQP0/6khphmzDFnK6Is7CMXoDH2+G5fFgNCI uBdunpq3ohkWTaAN+eXrSqGcFmLWJE0AgV4z4l5hJYmph1ERfGfNqTrGl4QDraB0 CAzS7LrzZKY1JKTNjPnDo8kTXsal4uvDj8DFhvff5LDdWoPB8QNE6HPqgF9Nac0G 3T4tuI6FZIalRgPb69EUoNmkCqqQzEA= -----END CERTIFICATE-----Generated at Mon May 5 03:10:35 2025 by rpki-client