$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bfa20d88-e643-3754-85a9-587efd05c1bb.roa File: bfa20d88-e643-3754-85a9-587efd05c1bb.roa (raw, json) Hash identifier: 9XBHgiZNCX0OP7GrnM2z/Gsivl3aXVNegEs6k7DVNEw= Subject key identifier: 42:7F:B9:3E:E7:BC:DF:12:04:5E:79:61:5C:29:D5:C6:44:12:B5:F9 Certificate issuer: /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd Certificate serial: 010D0C9F43285849A1EF6DB1FF3B1F40F6286800 Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bfa20d88-e643-3754-85a9-587efd05c1bb.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 11272 IP address blocks: 199.33.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6d:b1:ff:3b:1f:40:f6:28:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=b7af538d-76dc-4aea-af5f-df0436d89ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:9b:f8:5d:b1:1f:6f:d8:57:f7:69:08:0d: 98:1e:1d:e8:42:57:77:c9:ee:25:1f:2e:10:29:05: b0:27:ed:5d:0c:e9:b9:1f:85:47:42:e2:e4:af:0e: d2:f1:42:db:8e:7c:c6:d5:89:3e:9f:5f:e0:f1:30: c6:99:84:e2:10:e3:92:10:2a:c9:84:f0:9d:5c:e4: 0a:36:46:5e:8e:4d:e8:c5:63:30:c6:88:af:62:66: 22:cb:a9:a2:2a:12:da:ac:8d:b1:ab:59:a8:1a:44: 18:0b:23:94:78:53:cf:2b:ea:a2:1a:f7:2a:55:42: a9:db:c5:88:cd:16:54:9b:2f:c3:a7:42:86:4c:f0: 74:21:71:d1:75:ac:63:f3:7f:5c:c3:3a:48:a3:55: e9:51:13:8e:43:84:b1:dd:44:79:9d:4c:0c:5b:4c: 05:2b:a2:5b:78:0d:3c:19:a0:85:22:0c:b4:82:85: 9b:50:8d:b8:8b:13:42:15:e9:ce:96:dc:bc:e7:ba: f7:dd:26:77:3a:d3:45:8b:d9:39:04:f0:20:bb:00: 68:b4:88:58:4a:f9:95:ad:e1:c6:25:28:53:b4:c9: c7:71:50:46:78:9b:a4:1a:42:e7:09:bc:66:a6:1c: 4f:f6:ab:69:08:e5:1d:6a:b9:8c:ae:c6:f1:03:65: 14:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:B9:3E:E7:BC:DF:12:04:5E:79:61:5C:29:D5:C6:44:12:B5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bfa20d88-e643-3754-85a9-587efd05c1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl X509v3 Authority Key Identifier: keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer sbgp-ipAddrBlock: critical IPv4: 199.33.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:2b:88:83:fb:1f:24:56:39:e7:97:d0:55:c6:3e:67:ff:96: 45:5d:55:20:0f:2e:3e:08:91:f1:90:eb:16:47:25:31:9f:c9: a5:9e:4d:54:05:ac:11:43:0b:3f:75:25:70:7d:62:3c:b5:9e: 8b:13:60:20:8e:65:8b:cd:5d:cf:6d:b5:df:fe:8d:a4:52:f6: 16:81:3a:6b:55:d2:da:e0:f8:11:c1:c8:68:0b:38:c3:89:d6: 8e:11:d1:39:9e:fd:ec:7c:59:3f:13:fa:61:34:0f:29:f6:e8: b1:c4:b9:db:7f:92:c8:52:31:74:f1:df:7b:98:dc:53:48:64: 3b:16:ec:dd:c6:63:04:b2:4d:94:bd:31:9b:a1:ea:fe:fc:03: 43:12:e8:2e:57:03:16:79:d2:41:71:46:0a:68:de:d7:ca:fe: d7:bd:5c:48:48:13:88:31:74:ef:d8:a9:93:d4:ad:69:55:74: 82:31:fb:54:8a:a9:b4:29:ed:c7:67:70:d5:42:c1:2a:68:4b: 02:7f:20:95:2e:30:79:2a:f9:c2:08:35:fd:5c:a5:8f:93:15: e1:10:28:a6:f4:ab:7a:10:83:3b:49:56:b0:99:d9:aa:81:18: e4:05:fd:51:a1:fc:bb:70:47:d4:42:fb:4c:ad:47:53:19:be: b3:6c:42:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh722x/zsfQPYoaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTVmZWVhZjUtYWJmZC00ZjljLTk3MDctOTIzNmNlNTM5 N2JkMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk YjdhZjUzOGQtNzZkYy00YWVhLWFmNWYtZGYwNDM2ZDg5ZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Gb+F2xH2/YV/dpCA2YHh3oQld3ye4lHy4Q KQWwJ+1dDOm5H4VHQuLkrw7S8ULbjnzG1Yk+n1/g8TDGmYTiEOOSECrJhPCdXOQK NkZejk3oxWMwxoivYmYiy6miKhLarI2xq1moGkQYCyOUeFPPK+qiGvcqVUKp28WI zRZUmy/Dp0KGTPB0IXHRdaxj839cwzpIo1XpUROOQ4Sx3UR5nUwMW0wFK6JbeA08 GaCFIgy0goWbUI24ixNCFenOlty857r33SZ3OtNFi9k5BPAguwBotIhYSvmVreHG JShTtMnHcVBGeJukGkLnCbxmphxP9qtpCOUdarmMrsbxA2UUfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ/uT7nvN8SBF55YVwp1cZEErX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NWZl ZWFmNS1hYmZkLTRmOWMtOTcwNy05MjM2Y2U1Mzk3YmQvYmZhMjBkODgtZTY0My0z NzU0LTg1YTktNTg3ZWZkMDVjMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTVmZWVhZjUtYWJmZC00ZjljLTk3 MDctOTIzNmNlNTM5N2JkLzU1ZmVlYWY1LWFiZmQtNGY5Yy05NzA3LTkyMzZjZTUz OTdiZC5jcmwwHwYDVR0jBBgwFoAUye9LATMCXDRmU4YBpwWsA0gFmrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NWZlZWFmNS1hYmZkLTRmOWMtOTcwNy05MjM2 Y2U1Mzk3YmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyFaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4riIP7HyRWOeeX0FXGPmf/lkVdVSAPLj4IkfGQ6xZHJTGfyaWeTVQF rBFDCz91JXB9Yjy1nosTYCCOZYvNXc9ttd/+jaRS9haBOmtV0trg+BHByGgLOMOJ 1o4R0Tme/ex8WT8T+mE0Dyn26LHEudt/kshSMXTx33uY3FNIZDsW7N3GYwSyTZS9 MZuh6v78A0MS6C5XAxZ50kFxRgpo3tfK/te9XEhIE4gxdO/YqZPUrWlVdIIx+1SK qbQp7cdncNVCwSpoSwJ/IJUuMHkq+cIINf1cpY+TFeEQKKb0q3oQgztJVrCZ2aqB GOQF/VGh/LtwR9RC+0ytR1MZvrNsQpM= -----END CERTIFICATE-----Generated at Mon Apr 28 04:38:51 2025 by rpki-client