$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa File: 5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa (raw, json) Hash identifier: tXxEoJmDIjZFwQQySl644P9suQGhix7fKeCIKDV8nlU= Subject key identifier: CE:D4:76:10:3E:29:CC:E6:F3:40:F1:D4:B1:2A:7D:B6:90:3A:49:C1 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F432858499EFDE838F195FBECC6065D60 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa Signing time: Wed 23 Apr 2025 11:43:08 +0000 ROA not before: Wed 23 Apr 2025 11:43:08 +0000 ROA not after: Tue 22 Jul 2025 11:43:08 +0000 asID: 14618 IP address blocks: 129.77.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9e:fd:e8:38:f1:95:fb:ec:c6:06:5d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Apr 23 11:43:08 2025 GMT Not After : Jul 22 11:43:08 2025 GMT Subject: CN=c927d7e9-a1a5-4674-a36f-871eac25f08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:33:07:81:db:c1:e7:05:9b:f4:f8:0d:b6:b8: d5:8c:51:19:29:7a:26:c0:e5:52:7d:92:7a:ca:c1: 3b:46:c3:f9:13:a1:0e:1f:57:e9:cc:10:a3:ad:51: fe:88:5e:fa:ad:7e:61:29:8a:0c:06:92:c0:96:b2: ad:69:fd:70:54:1e:cb:fd:6a:c4:1c:43:38:ce:81: e6:e4:24:3d:41:15:63:7f:fd:59:13:93:d1:d6:39: 8d:69:27:b4:28:84:32:1b:b9:a5:89:0b:ed:ca:5a: b9:ba:b1:8a:0a:1d:43:c0:d3:71:57:fc:aa:9e:a8: dd:d8:c1:fe:52:55:4f:52:e2:4b:50:61:24:ca:c9: 9a:ef:24:af:ee:58:fe:c4:a3:6d:d2:a3:c0:7d:88: f4:24:a5:76:1f:92:15:20:2e:e5:77:fb:66:a3:1d: b7:54:77:8f:5f:dd:9b:f0:0c:c4:3c:75:11:e0:c4: 98:3a:c6:eb:ed:b6:75:1a:1f:a7:52:df:fa:90:d7: 08:1c:2b:9d:74:46:8e:db:25:68:6c:1d:54:56:ee: 3f:71:bb:39:2e:67:1e:1b:c5:bd:8c:6d:e8:ca:a0: 96:2b:9b:08:f0:a4:28:46:cc:90:5c:08:25:4a:95: b0:c4:bd:8b:40:94:e4:bf:0b:4e:3c:f8:1b:ff:6d: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D4:76:10:3E:29:CC:E6:F3:40:F1:D4:B1:2A:7D:B6:90:3A:49:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 129.77.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b5:a0:f3:92:66:06:be:3b:e7:bf:d2:b9:22:e5:a4:72:bb: d7:81:e6:ec:8b:bc:a9:0a:ac:9f:40:35:1b:48:ad:f5:04:95: a1:4c:5c:db:08:1f:6d:db:05:19:f9:d6:34:f4:6a:87:1d:37: 69:9f:c5:3d:30:20:71:8d:c8:36:a0:b2:e9:7b:83:62:45:b9: 7c:7e:3e:a3:9f:48:be:9b:37:10:0a:af:6f:44:6a:7d:de:5b: a7:7b:70:dc:42:f8:8e:bb:df:75:7f:7d:84:e2:9b:70:6a:22: 4f:9e:24:59:cd:67:c5:73:cd:c1:48:69:ce:aa:a5:cc:5c:03: 9d:8c:49:26:4d:7a:40:f9:e4:49:1a:7d:9a:dd:0f:49:43:b4: 4e:72:8b:c8:cb:3d:03:a5:ca:78:7f:03:17:a2:86:fe:86:9d: 8b:a5:48:22:43:5b:3c:2d:ed:93:4c:d0:ee:0e:db:d9:a2:61: 60:bc:ba:ae:28:aa:e6:58:38:d9:32:01:d2:40:1b:97:71:57: 38:0a:d2:87:44:cd:38:df:d2:0c:c2:a4:dd:d0:3a:98:40:10: fd:e6:ca:7f:9b:75:13:a4:a8:51:1c:e2:b3:22:d5:7d:dc:fd: da:91:c5:81:6d:70:34:75:de:c5:a3:6c:08:3b:ea:7b:c9:39: 6d:0d:4b:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEme/eg48ZX77MYGXWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDQyMzExNDMwOFoXDTI1MDcyMjExNDMwOFowLzEtMCsGA1UEAxMk YzkyN2Q3ZTktYTFhNS00Njc0LWEzNmYtODcxZWFjMjVmMDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzMHgdvB5wWb9PgNtrjVjFEZKXomwOVSfZJ6 ysE7RsP5E6EOH1fpzBCjrVH+iF76rX5hKYoMBpLAlrKtaf1wVB7L/WrEHEM4zoHm 5CQ9QRVjf/1ZE5PR1jmNaSe0KIQyG7mliQvtylq5urGKCh1DwNNxV/yqnqjd2MH+ UlVPUuJLUGEkysma7ySv7lj+xKNt0qPAfYj0JKV2H5IVIC7ld/tmox23VHePX92b 8AzEPHUR4MSYOsbr7bZ1Gh+nUt/6kNcIHCuddEaO2yVobB1UVu4/cbs5LmceG8W9 jG3oyqCWK5sI8KQoRsyQXAglSpWwxL2LQJTkvwtOPPgb/22iRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7UdhA+Kczm80Dx1LEqfbaQOknBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNWI1NDFkZjctYzIyNy0z YzFhLThhN2QtMGNlNGU5MmU0ZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgU0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK1oPOSZga+O+e/0rki5aRyu9eB5uyLvKkKrJ9ANRtIrfUElaFMXNsI H23bBRn51jT0aocdN2mfxT0wIHGNyDagsul7g2JFuXx+PqOfSL6bNxAKr29Ean3e W6d7cNxC+I6733V/fYTim3BqIk+eJFnNZ8VzzcFIac6qpcxcA52MSSZNekD55Eka fZrdD0lDtE5yi8jLPQOlynh/Axeihv6GnYulSCJDWzwt7ZNM0O4O29miYWC8uq4o quZYONkyAdJAG5dxVzgK0odEzTjf0gzCpN3QOphAEP3myn+bdROkqFEc4rMi1X3c /dqRxYFtcDR13sWjbAg76nvJOW0NSwU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:30 2025 by rpki-client