$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa File: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (raw, json) Hash identifier: mAwzoyhNF4lGTvJ2NAyLDixLul6hrf8mgFZZgagVQy4= Subject key identifier: E2:E5:82:BA:9E:99:2A:AF:32:4E:B7:9B:D8:7A:8D:6F:B2:AB:77:53 Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F43285849BF3F603C64CAA8504CDBFC80 Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 54334 IP address blocks: 52.119.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:60:3c:64:ca:a8:50:4c:db:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=a5b1d23d-667c-4ec1-b1e1-f029ba190200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:b2:a6:21:90:db:0c:47:87:61:4d:5d:49: 21:a9:07:10:eb:c6:69:d9:87:97:90:0a:49:26:02: dd:59:5b:29:bc:77:78:51:c2:36:03:af:9f:f6:5f: 13:d7:fc:8a:19:5d:9d:bb:70:1e:be:17:f0:30:6b: b7:51:f2:3b:d5:21:c4:0e:b4:40:5b:5e:33:60:7a: dc:5a:e5:4e:ed:d8:a0:f4:33:65:f3:90:ba:4b:d1: 22:1d:41:59:94:6c:17:68:bf:b9:85:09:26:3f:2a: f5:92:31:93:c0:1f:f1:1f:4b:6f:36:7b:d0:26:b0: d3:3f:ca:b6:dc:08:3c:1a:18:d7:40:7c:d9:7c:f1: 93:b4:d9:5f:19:94:1d:03:30:20:3a:95:66:05:e5: 83:9f:22:a8:d9:14:44:79:0f:9d:af:ef:a6:05:6f: ee:54:a7:ba:7d:01:20:4c:df:fa:4b:70:69:b4:56: 2f:9f:9d:b4:13:e1:f8:55:a0:b2:fa:43:3e:e8:8d: 3a:0d:1d:fc:12:0c:0e:f6:30:30:f0:55:26:62:52: 58:2b:d5:96:85:0c:42:cf:3f:bd:de:ce:ca:bb:c7: 3d:07:01:c5:6a:2f:79:8b:cb:f6:8d:33:26:58:cd: 18:9b:1a:a2:0e:c9:bf:c2:9b:97:09:24:9d:8b:2c: 5e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E5:82:BA:9E:99:2A:AF:32:4E:B7:9B:D8:7A:8D:6F:B2:AB:77:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: 52.119.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b7:67:97:b5:c8:ca:a2:64:b5:37:68:69:22:96:25:a0:88: f7:18:22:92:a2:10:78:54:6e:b6:32:5d:4e:cc:40:4f:12:c8: 83:6a:0e:6d:1e:b2:8a:d0:c3:6b:85:4b:a3:41:dc:0a:29:98: 09:6e:ee:d1:2f:93:b8:f2:12:10:7d:a9:47:5a:1e:8c:7b:e8: 06:f5:e7:2b:cc:5f:9b:1e:e8:a3:b6:da:9a:23:92:c9:29:b6: 18:8c:82:50:40:71:3b:1b:04:46:df:a2:24:37:88:92:1c:44: 47:45:91:7d:46:0b:2f:3e:96:44:3a:53:62:e3:d1:a6:f0:ee: 51:e0:55:d1:93:08:8a:3a:ec:a8:ab:77:fd:e1:be:a9:8a:b7: 97:d1:64:3c:3e:cf:fc:d2:4c:10:3a:88:6f:10:e0:55:ff:98: 31:23:bf:ce:58:bd:5a:88:55:c9:44:2e:e7:17:81:6c:1f:11: c2:d0:8c:a9:70:c2:ad:57:27:cd:12:e0:4f:b7:86:e7:47:5b: d4:c8:e7:98:76:4b:2e:4b:67:64:18:da:14:7b:90:d5:2a:6f: 82:6f:1c:fd:33:65:14:b6:fd:a1:cc:d1:46:74:4a:8e:13:2f: 96:bf:bf:4b:60:7b:b6:09:36:ef:0a:5c:ca:54:4b:0e:c4:22: fb:c6:dc:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2A8ZMqoUEzb/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YTViMWQyM2QtNjY3Yy00ZWMxLWIxZTEtZjAyOWJhMTkwMjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopSypiGQ2wxHh2FNXUkhqQcQ68Zp2YeXkApJ JgLdWVspvHd4UcI2A6+f9l8T1/yKGV2du3AevhfwMGu3UfI71SHEDrRAW14zYHrc WuVO7dig9DNl85C6S9EiHUFZlGwXaL+5hQkmPyr1kjGTwB/xH0tvNnvQJrDTP8q2 3Ag8GhjXQHzZfPGTtNlfGZQdAzAgOpVmBeWDnyKo2RREeQ+dr++mBW/uVKe6fQEg TN/6S3BptFYvn520E+H4VaCy+kM+6I06DR38EgwO9jAw8FUmYlJYK9WWhQxCzz+9 3s7Ku8c9BwHFai95i8v2jTMmWM0YmxqiDsm/wpuXCSSdiyxeMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLlgrqemSqvMk63m9h6jW+yq3dTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvYmY5YThlMTctOGE4Zi0z ODlhLTgwYjQtOGFiZjgyYTg1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK3Z5e1yMqiZLU3aGkiliWgiPcYIpKiEHhUbrYyXU7MQE8SyINqDm0e sorQw2uFS6NB3AopmAlu7tEvk7jyEhB9qUdaHox76Ab15yvMX5se6KO22pojkskp thiMglBAcTsbBEbfoiQ3iJIcREdFkX1GCy8+lkQ6U2Lj0abw7lHgVdGTCIo67Kir d/3hvqmKt5fRZDw+z/zSTBA6iG8Q4FX/mDEjv85YvVqIVclELucXgWwfEcLQjKlw wq1XJ80S4E+3hudHW9TI55h2Sy5LZ2QY2hR7kNUqb4JvHP0zZRS2/aHM0UZ0So4T L5a/v0tge7YJNu8KXMpUSw7EIvvG3P4= -----END CERTIFICATE-----Generated at Tue May 6 07:38:25 2025 by rpki-client