$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1420da40-f5ad-3dca-9e74-2967059640ba.roa File: 1420da40-f5ad-3dca-9e74-2967059640ba.roa (raw, json) Hash identifier: PY9dJ7XCkcOL7uL01d6rKktTv7Fz+0IcnYvYTgCo40A= Subject key identifier: 5C:6B:7D:EC:91:65:2F:93:6B:97:A1:22:E2:94:AB:0D:59:4E:52:EA Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F432858499F24A026B6BAD87A28CCBB80 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1420da40-f5ad-3dca-9e74-2967059640ba.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 155.226.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a0:26:b6:ba:d8:7a:28:cc:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=f1d580f6-1852-41cb-b811-88918c6e149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:cb:08:03:09:55:a6:5f:eb:47:17:9b:75: ce:25:41:cd:0f:8e:c7:7e:3e:ab:ea:c0:c3:fa:14: b1:f3:46:12:04:5e:5b:d6:32:a8:f4:22:eb:d2:d0: 15:92:46:f9:0a:da:f2:f7:50:8d:8d:9d:12:23:66: 09:83:cd:4c:56:07:20:9a:e0:ff:dc:22:76:3e:3b: 6c:b4:52:20:e1:44:81:04:f4:c2:91:4a:91:66:ef: 59:ce:97:f1:2d:15:d9:3a:4d:69:f7:b3:dd:7a:84: 4c:d9:96:ee:b6:78:68:ff:02:48:8c:4d:3f:a5:2c: d6:c0:3a:47:bf:a4:17:99:2d:18:07:e3:0e:45:8b: 49:87:b4:5b:08:eb:e6:3b:5f:68:b8:fe:ee:f8:96: 9b:11:a1:2b:6a:d9:70:5d:e5:45:95:3f:6f:d3:e8: d4:f2:ce:28:10:fb:1e:32:03:83:57:03:d9:8b:5b: fd:16:d1:03:8d:ba:09:9a:4d:99:d7:22:88:9a:8f: ad:a2:87:a7:f4:a1:42:d7:84:84:d0:39:a3:8f:e1: f3:0e:66:63:a2:72:9c:e9:9b:36:b1:9d:0a:b3:1b: fa:36:34:9f:4a:02:cd:f5:8f:90:16:a4:54:f8:15: 89:b3:59:84:00:ad:95:09:f9:60:d0:1f:44:44:b3: 00:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6B:7D:EC:91:65:2F:93:6B:97:A1:22:E2:94:AB:0D:59:4E:52:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1420da40-f5ad-3dca-9e74-2967059640ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 155.226.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:61:c2:ed:0e:c8:dd:28:ac:df:7d:da:7c:f1:94:79:3a:a3: b9:27:6e:2e:5f:af:52:7b:bb:2c:38:90:aa:3b:83:5c:59:b6: 2d:6f:45:10:e0:50:e0:90:2b:27:5d:48:64:93:a3:9c:ff:9d: 3d:c6:1a:b2:3d:55:40:11:8b:d4:77:03:da:49:83:14:6c:8d: 21:b1:e9:95:c7:28:38:8f:be:42:32:c0:be:c4:35:59:63:92: 33:00:2b:2b:d8:9a:31:ce:1f:a1:51:3a:04:5f:1a:25:09:d6: 77:8b:18:c3:cc:6d:30:ec:27:77:a5:c2:40:55:40:6c:fb:30: 4f:6b:2c:18:1b:ad:07:d0:fd:54:0e:06:0c:a9:5d:6e:c7:01: 37:e9:c8:36:6a:80:36:3a:2b:eb:3e:23:e0:c6:dc:24:cc:c1: b4:7b:c1:25:ba:9b:4a:87:e4:12:dc:76:88:1a:8f:c3:0c:0e: fc:9d:81:77:bb:ff:5e:16:46:8a:85:26:32:c7:5e:15:4b:dc: cd:7b:57:f8:21:0f:65:24:e2:ae:fc:33:33:e9:bf:6d:b9:57: 1b:d0:4a:03:71:c9:29:3c:c9:51:b1:b1:01:b6:c1:f1:32:57: ce:9c:83:01:61:36:29:f7:ff:b7:c7:f6:25:eb:ed:b2:bf:bf: 3a:ae:81:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKAmtrrYeijMu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZjFkNTgwZjYtMTg1Mi00MWNiLWI4MTEtODg5MThjNmUxNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx3LCAMJVaZf60cXm3XOJUHND47Hfj6r6sDD +hSx80YSBF5b1jKo9CLr0tAVkkb5Ctry91CNjZ0SI2YJg81MVgcgmuD/3CJ2Pjts tFIg4USBBPTCkUqRZu9ZzpfxLRXZOk1p97PdeoRM2Zbutnho/wJIjE0/pSzWwDpH v6QXmS0YB+MORYtJh7RbCOvmO19ouP7u+JabEaEratlwXeVFlT9v0+jU8s4oEPse MgODVwPZi1v9FtEDjboJmk2Z1yKImo+tooen9KFC14SE0Dmjj+HzDmZjonKc6Zs2 sZ0Ksxv6NjSfSgLN9Y+QFqRU+BWJs1mEAK2VCflg0B9ERLMAlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxrfeyRZS+Ta5ehIuKUqw1ZTlLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMTQyMGRhNDAtZjVhZC0z ZGNhLTllNzQtMjk2NzA1OTY0MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm+IgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJhwu0OyN0orN992nzxlHk6o7knbi5fr1J7uyw4kKo7g1xZti1vRRDg UOCQKyddSGSTo5z/nT3GGrI9VUARi9R3A9pJgxRsjSGx6ZXHKDiPvkIywL7ENVlj kjMAKyvYmjHOH6FROgRfGiUJ1neLGMPMbTDsJ3elwkBVQGz7ME9rLBgbrQfQ/VQO BgypXW7HATfpyDZqgDY6K+s+I+DG3CTMwbR7wSW6m0qH5BLcdogaj8MMDvydgXe7 /14WRoqFJjLHXhVL3M17V/ghD2Uk4q78MzPpv225VxvQSgNxySk8yVGxsQG2wfEy V86cgwFhNin3/7fH9iXr7bK/vzqugX4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:55:17 2025 by rpki-client