$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa File: bfb03a9d-6724-3257-b89f-a663facf63ac.roa (raw, json) Hash identifier: PYKpYjG3BA0wYPrpLsTeeg9WHAvNxmnI9n/eSMSqKus= Subject key identifier: BE:36:B7:6A:8E:03:C9:D4:B0:34:87:75:31:B1:93:60:BF:F2:46:20 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F432858499C59E2AA249FC467B5802240 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 50304 IP address blocks: 172.84.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e2:aa:24:9f:c4:67:b5:80:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=aef0767e-5f3b-4424-9ecc-58b176517d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:6f:6d:ac:78:c3:a5:64:13:f1:8f:ff:ac: df:62:60:33:f1:52:29:84:f6:81:4e:4d:e1:36:b7: 59:3a:59:ab:c7:6a:2d:e3:f1:b0:b2:cd:a2:e8:1a: 98:e8:b6:cd:1f:9b:c1:ab:5d:20:d0:39:0a:87:eb: 4c:34:b7:6a:64:be:c7:67:7c:fa:c7:2e:6d:c8:73: 7b:10:ca:c7:27:42:fb:76:1b:46:bf:23:ab:0e:59: a5:1f:6c:ac:5a:5d:92:43:5f:cc:c1:67:bc:44:5c: 1c:29:82:e6:96:4d:d0:6c:1c:61:1b:8c:9f:36:ea: bf:16:55:dc:e7:13:36:82:83:45:08:56:f8:24:27: 08:b4:3e:de:be:e7:87:b2:79:79:56:60:8c:e6:82: 5a:a6:52:b8:70:f8:e8:4d:84:43:51:2f:fb:97:d8: ee:80:e6:c4:2c:0f:47:19:fe:90:19:5b:8b:6d:7a: c4:2c:55:7e:b1:3c:a3:71:6a:fc:9f:05:e4:ec:d6: 38:bd:ed:69:cd:96:7b:0c:2b:85:d8:e5:4d:f9:47: 5a:59:62:4e:91:e4:96:e0:8d:38:a0:ba:a1:82:9b: 0b:fe:17:e9:52:d2:0c:2a:7e:21:6d:b0:fd:43:76: 84:17:d7:c5:db:a1:8a:29:4e:f4:3f:b1:49:b2:13: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:36:B7:6A:8E:03:C9:D4:B0:34:87:75:31:B1:93:60:BF:F2:46:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:8d:2a:65:76:1e:c1:8c:f2:82:12:13:9a:6f:ce:c8:6c:da: f0:0e:15:18:63:df:db:b6:ea:66:81:49:e6:e0:c2:17:f4:9c: 4b:16:a3:1e:c0:93:af:77:d5:1b:b2:02:bd:fd:6d:76:32:ce: 6d:bc:94:11:9c:f8:f9:25:c5:22:1d:33:7e:2f:49:1b:75:2c: 83:f5:75:f6:bd:1b:81:82:7c:63:a6:40:33:b2:3d:da:43:3a: 1f:5b:18:a1:22:75:5e:98:7f:98:89:cb:99:be:78:de:71:38: 02:26:b0:fd:83:06:a9:53:b0:a6:78:b8:b7:bb:92:5d:46:63: d3:07:10:7e:fa:05:74:10:75:d6:d7:ea:af:4f:68:e1:df:2b: cc:f3:43:c2:6e:69:33:28:a8:ac:17:53:f2:41:bc:a4:6f:65: 9a:7d:e7:9f:19:e1:87:a8:82:4e:2f:bb:ca:a5:10:4f:54:c5: 1c:b4:ac:e5:a3:e3:d4:aa:31:43:3f:1d:42:cd:4d:28:82:7e: 55:35:42:b2:a2:29:e4:28:f6:f7:87:d4:83:0b:bf:16:c1:86: e7:bb:d2:87:c5:49:bb:56:a4:4a:9f:8e:35:2c:ca:27:ca:e9: a7:ab:6a:8d:57:4d:d9:f9:6e:62:4b:75:c5:4d:0d:02:ad:00: e8:43:1b:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWeKqJJ/EZ7WAIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YWVmMDc2N2UtNWYzYi00NDI0LTllY2MtNThiMTc2NTE3ZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1hvbax4w6VkE/GP/6zfYmAz8VIphPaBTk3h NrdZOlmrx2ot4/Gwss2i6BqY6LbNH5vBq10g0DkKh+tMNLdqZL7HZ3z6xy5tyHN7 EMrHJ0L7dhtGvyOrDlmlH2ysWl2SQ1/MwWe8RFwcKYLmlk3QbBxhG4yfNuq/FlXc 5xM2goNFCFb4JCcItD7evueHsnl5VmCM5oJaplK4cPjoTYRDUS/7l9jugObELA9H Gf6QGVuLbXrELFV+sTyjcWr8nwXk7NY4ve1pzZZ7DCuF2OVN+UdaWWJOkeSW4I04 oLqhgpsL/hfpUtIMKn4hbbD9Q3aEF9fF26GKKU70P7FJshOifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL42t2qOA8nUsDSHdTGxk2C/8kYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYmZiMDNhOWQtNjcyNC0z MjU3LWI4OWYtYTY2M2ZhY2Y2M2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFS2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKNKmV2HsGM8oISE5pvzshs2vAOFRhj39u26maBSebgwhf0nEsWox7A k6931RuyAr39bXYyzm28lBGc+PklxSIdM34vSRt1LIP1dfa9G4GCfGOmQDOyPdpD Oh9bGKEidV6Yf5iJy5m+eN5xOAImsP2DBqlTsKZ4uLe7kl1GY9MHEH76BXQQddbX 6q9PaOHfK8zzQ8JuaTMoqKwXU/JBvKRvZZp9558Z4Yeogk4vu8qlEE9UxRy0rOWj 49SqMUM/HULNTSiCflU1QrKiKeQo9veH1IMLvxbBhue70ofFSbtWpEqfjjUsyifK 6aerao1XTdn5bmJLdcVNDQKtAOhDG2I= -----END CERTIFICATE-----Generated at Wed Apr 30 04:52:45 2025 by rpki-client