$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa File: 3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa (raw, json) Hash identifier: 3wpYCNqkrR5lrHe0mLxnzRDHT+eUaXS7DCXJwXyIgCE= Subject key identifier: DE:1E:A6:89:E0:C6:1F:AC:BD:62:0F:C5:FA:3A:A3:19:1F:9C:40:BA Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584988CF237FFCDA72AB64D48F00 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 14340 IP address blocks: 140.190.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:23:7f:fc:da:72:ab:64:d4:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=2c8b2a3b-2b88-41d7-881c-6cff1aa7c89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c5:44:b4:d2:a3:0e:27:ad:08:67:84:93:f3: 09:36:e3:6c:47:85:38:a1:ef:6f:0a:4f:a8:01:2f: e8:49:b2:7a:65:93:42:aa:69:d0:1c:89:f5:f0:23: 70:fd:61:8f:9b:de:8c:d0:9e:d6:e9:d2:ee:7c:a4: a1:71:fd:ed:42:6b:97:98:dc:0d:a8:c1:23:16:d2: 86:2f:5a:e4:96:1b:ff:cf:a3:7b:93:19:32:50:8b: e5:bd:32:d8:cd:cc:c1:78:08:96:e2:64:aa:ce:ee: 77:e7:42:be:0b:ce:a4:c3:ec:b4:04:d7:ac:35:d7: c5:37:80:be:94:7b:5a:3e:fc:21:d3:90:07:10:d4: ae:d9:6d:c1:84:db:98:55:f5:b8:57:02:97:ca:f2: 0f:f1:06:82:80:ab:ac:9a:3c:99:f6:49:e6:dc:28: 3a:33:c8:fa:dc:5b:81:49:b3:8a:fd:05:4d:7e:2a: 68:65:a5:3a:9c:24:2a:88:98:99:9b:f3:36:a2:f8: eb:6f:d5:5e:6b:9d:9a:62:78:c3:c1:3b:9d:f2:3f: 03:e0:5b:d4:c1:5c:4d:eb:70:a7:f1:cb:4e:fa:16: 03:51:0e:b3:63:c4:2c:d0:3d:b6:2a:05:a8:88:34: a4:35:c2:46:30:1a:e5:f7:04:5e:3c:f6:6e:78:52: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1E:A6:89:E0:C6:1F:AC:BD:62:0F:C5:FA:3A:A3:19:1F:9C:40:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e3:78:d6:3a:30:c3:7d:88:f2:3c:49:4a:f3:1d:2c:b6:f5: bd:0b:07:78:90:bd:72:cb:79:af:09:29:c7:de:a6:9a:b4:87: c1:88:8f:64:ce:a1:b9:cd:de:e5:ef:ac:9e:ae:b8:16:82:7a: e6:e9:46:9d:c3:80:7c:67:78:ed:b4:5d:93:d8:e5:5a:5e:df: 77:32:31:f8:2a:0c:63:27:22:b1:9e:d3:72:65:a6:9c:99:85: 1b:9e:fd:e3:80:d2:74:90:08:ed:14:d3:d4:9f:8b:13:29:b8: 46:87:92:ee:29:8f:d0:fd:47:46:46:a7:73:13:8f:64:71:66: b2:86:22:a7:82:3c:ea:58:1b:4a:a9:0b:4b:30:92:eb:2b:06: 4c:79:57:73:6e:63:61:77:a9:15:fb:e2:c3:97:3b:db:6d:d3: 12:15:b3:b3:f8:e2:23:d4:5f:2f:6a:87:46:f1:27:5b:fc:af: 8c:d3:fa:01:c3:f3:0c:c7:e1:8f:97:9b:2b:bb:c7:cf:a6:41: a6:c3:58:94:ae:d9:28:5d:c6:ff:f1:27:fb:32:0e:71:7d:bb: 3f:47:f1:96:22:1e:99:fb:f1:db:8b:7e:c0:52:da:80:47:01: 63:77:a4:99:50:ab:33:28:5c:96:0e:e7:b2:5d:d3:fe:c5:1d: 49:a7:60:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyN//Npyq2TUjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MmM4YjJhM2ItMmI4OC00MWQ3LTg4MWMtNmNmZjFhYTdjODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18VEtNKjDietCGeEk/MJNuNsR4U4oe9vCk+o AS/oSbJ6ZZNCqmnQHIn18CNw/WGPm96M0J7W6dLufKShcf3tQmuXmNwNqMEjFtKG L1rklhv/z6N7kxkyUIvlvTLYzczBeAiW4mSqzu5350K+C86kw+y0BNesNdfFN4C+ lHtaPvwh05AHENSu2W3BhNuYVfW4VwKXyvIP8QaCgKusmjyZ9knm3Cg6M8j63FuB SbOK/QVNfipoZaU6nCQqiJiZm/M2ovjrb9Vea52aYnjDwTud8j8D4FvUwVxN63Cn 8ctO+hYDUQ6zY8Qs0D22KgWoiDSkNcJGMBrl9wRePPZueFJAjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4epongxh+svWIPxfo6oxkfnEC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvM2M2MTcxYjUtZjIwMC0z OTAyLTk1MDQtNmI1ZjllYjRmYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjL7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjjeNY6MMN9iPI8SUrzHSy29b0LB3iQvXLLea8JKcfeppq0h8GIj2TO obnN3uXvrJ6uuBaCeubpRp3DgHxneO20XZPY5Vpe33cyMfgqDGMnIrGe03JlppyZ hRue/eOA0nSQCO0U09SfixMpuEaHku4pj9D9R0ZGp3MTj2RxZrKGIqeCPOpYG0qp C0swkusrBkx5V3NuY2F3qRX74sOXO9tt0xIVs7P44iPUXy9qh0bxJ1v8r4zT+gHD 8wzH4Y+Xmyu7x8+mQabDWJSu2Shdxv/xJ/syDnF9uz9H8ZYiHpn78duLfsBS2oBH AWN3pJlQqzMoXJYO57Jd0/7FHUmnYIo= -----END CERTIFICATE-----Generated at Tue Apr 29 00:36:07 2025 by rpki-client