$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa File: e969eb6b-84bd-33ed-adf5-6a299076b70f.roa (raw, json) Hash identifier: xo8jU1fHCbZeRuObtsjNPsnsH/g6rs4sfFIDNhjkWco= Subject key identifier: 70:F5:22:47:8F:84:6E:69:54:14:08:8C:A9:81:46:B6:CF:E7:BC:80 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F43285849E7BA7A1E048745EF7CE1BCC0 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 32870 IP address blocks: 136.147.164.0/22 maxlen: 24 136.147.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:7a:1e:04:87:45:ef:7c:e1:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=8b1535ab-155a-4f5e-ab4a-857c8451b0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f0:d7:ec:2e:ad:06:6d:ba:79:1e:31:f3:95: 9d:e4:7c:20:60:85:1d:1e:86:4b:6a:3c:3c:6c:4a: 28:ee:70:28:fb:bd:f7:10:cc:12:aa:61:40:45:f6: b9:5e:11:97:2d:1d:1a:1e:aa:aa:7f:39:32:28:a7: 4a:53:3c:fe:9b:4f:46:19:fa:17:16:d4:6b:42:b2: b5:e2:a7:05:58:3c:2e:31:5f:da:41:20:54:a7:f3: e8:78:af:8c:76:a1:b5:75:94:19:a6:e1:08:6e:6b: dd:ac:a2:a6:7c:fa:86:45:2b:28:b6:a5:76:54:9e: 9e:85:5d:25:52:65:64:d4:21:0e:9a:c9:1c:7b:fe: 36:62:46:63:a3:ed:8e:29:b5:4f:35:f9:8d:d4:34: f9:a7:ca:72:83:cd:d1:b4:e0:0d:21:46:14:36:fb: 42:07:54:a6:61:39:e1:8d:0c:f0:18:94:a5:3a:4f: 05:b6:79:4c:60:7b:aa:2a:94:f9:e2:43:88:81:9e: eb:e8:d2:35:97:e5:5b:c6:22:f6:ba:d7:49:79:58: e4:5b:f4:f0:64:05:b5:4c:c8:52:de:7a:bb:da:81: 5a:69:56:99:20:74:9f:53:77:e6:20:58:e5:c5:20: 1d:58:3a:9c:7a:60:b4:27:ce:93:c5:be:4c:ed:7e: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F5:22:47:8F:84:6E:69:54:14:08:8C:A9:81:46:B6:CF:E7:BC:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.164.0/22 136.147.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:22:a5:8e:15:ef:93:dd:b5:30:3f:3b:96:78:80:51:98:92: 99:99:6f:55:62:8c:ec:43:31:08:f3:3d:15:a1:c1:02:f0:ba: 3c:50:a0:d0:c7:2c:ca:16:17:c0:0b:b3:14:e9:41:56:c6:4d: a5:f0:f3:a3:8a:6d:84:cf:c7:c4:eb:c6:ce:c3:84:d3:90:fa: b5:eb:34:05:35:8f:6d:02:4d:90:fc:d3:99:ea:32:a9:92:55: ab:96:59:6c:01:dc:15:af:cb:a7:42:4c:f4:6f:b7:9e:49:76: 02:63:90:f5:6f:0f:91:13:89:70:ee:5b:1d:a8:76:37:2b:1d: fe:da:ed:14:ea:9e:f8:df:a6:0a:c7:3b:fc:5f:b4:28:e5:8f: 90:6c:5d:d9:e0:64:1e:08:86:04:19:b0:80:9f:8e:9c:a4:81: 2b:21:f3:f6:fe:ce:17:5c:52:a8:51:c5:06:0a:b9:4e:5c:fd: 21:36:a3:0b:70:69:b9:7b:24:b2:2b:b4:63:66:d3:72:b6:83: 06:b9:96:76:97:c1:2a:28:be:35:79:49:99:32:69:2a:30:3a: 21:cd:c3:8f:35:7f:f3:02:d9:4b:d6:3b:58:cd:b0:1e:79:ef: 7c:a5:c5:b8:53:70:5c:26:bb:d7:62:97:f4:36:b8:bd:7b:7d: 47:a8:23:61 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnnunoeBIdF73zhvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk OGIxNTM1YWItMTU1YS00ZjVlLWFiNGEtODU3Yzg0NTFiMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvDX7C6tBm26eR4x85Wd5HwgYIUdHoZLajw8 bEoo7nAo+733EMwSqmFARfa5XhGXLR0aHqqqfzkyKKdKUzz+m09GGfoXFtRrQrK1 4qcFWDwuMV/aQSBUp/PoeK+MdqG1dZQZpuEIbmvdrKKmfPqGRSsotqV2VJ6ehV0l UmVk1CEOmskce/42YkZjo+2OKbVPNfmN1DT5p8pyg83RtOANIUYUNvtCB1SmYTnh jQzwGJSlOk8FtnlMYHuqKpT54kOIgZ7r6NI1l+VbxiL2utdJeVjkW/TwZAW1TMhS 3nq72oFaaVaZIHSfU3fmIFjlxSAdWDqcemC0J86Txb5M7X4LKQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHD1IkePhG5pVBQIjKmBRrbP57yAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZTk2OWViNmItODRiZC0z M2VkLWFkZjUtNmEyOTkwNzZiNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCiJOkAwQB iJOuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFsipY4V75PdtTA/O5Z4gFGYkpmZb1VijOxDMQjzPRWhwQLw ujxQoNDHLMoWF8ALsxTpQVbGTaXw86OKbYTPx8Trxs7DhNOQ+rXrNAU1j20CTZD8 05nqMqmSVauWWWwB3BWvy6dCTPRvt55JdgJjkPVvD5ETiXDuWx2odjcrHf7a7RTq nvjfpgrHO/xftCjlj5BsXdngZB4IhgQZsICfjpykgSsh8/b+zhdcUqhRxQYKuU5c /SE2owtwabl7JLIrtGNm03K2gwa5lnaXwSoovjV5SZkyaSowOiHNw481f/MC2UvW O1jNsB5573ylxbhTcFwmu9dil/Q2uL17fUeoI2E= -----END CERTIFICATE-----Generated at Sat Jul 5 07:59:16 2025 by rpki-client