$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa File: f4eee786-dbd9-307a-9a11-b190b93526d8.roa (raw, json) Hash identifier: kHT3F/3gyS6gfgWPm5caGlEOpj1z1+cxzup5Cl9rQo4= Subject key identifier: 69:92:DF:21:7D:4A:4E:B9:B5:12:27:56:4B:C7:13:34:97:95:00:53 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584908816AF053914E794A054470 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 14340 IP address blocks: 128.17.0.0/16 maxlen: 24 128.245.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6a:f0:53:91:4e:79:4a:05:44:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=6e263fd5-b9af-49cb-8889-706d46ab9523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:5b:78:1e:da:69:37:7c:04:f8:b6:ee:98: a9:c1:d0:25:29:85:32:48:7d:eb:08:11:74:a9:9b: 65:3a:16:b8:26:a1:86:fe:ac:43:99:c1:af:8e:11: 40:e2:12:39:a0:c2:9b:4d:95:61:73:e3:37:d4:bb: 3a:67:2b:14:ec:86:7f:90:6f:a2:8e:48:e1:9a:41: 31:0c:cf:0c:92:bb:5a:4f:c1:82:29:72:89:6b:3d: 75:96:30:f3:de:e9:50:fb:f3:89:29:09:5c:82:fc: 2a:05:eb:31:c5:d5:6c:8e:3e:70:94:c3:d1:f3:f9: fc:27:d3:2e:2a:a0:d8:e9:af:11:78:0b:8a:b5:c9: d1:3a:37:62:c6:ee:e2:4f:ea:4b:1b:21:3c:d5:dc: ae:f4:4a:dc:aa:7b:7a:f3:c1:c5:b2:59:ba:7c:e8: 7f:88:0f:d2:62:29:a4:ec:1b:ce:3f:f2:cc:5b:19: 6b:94:2c:c9:60:d7:6d:b6:eb:14:75:81:84:6a:3c: ec:43:8e:8b:8b:4f:9b:19:77:c8:65:62:d7:77:11: 6a:4a:b7:7a:87:2b:5a:32:57:00:c6:ea:f8:0c:0b: 79:d4:bd:ce:c5:a2:40:14:0a:12:10:2f:46:7e:1b: c9:2f:47:c4:17:89:9c:af:c8:a9:20:bd:d6:d1:7e: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:92:DF:21:7D:4A:4E:B9:B5:12:27:56:4B:C7:13:34:97:95:00:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 128.17.0.0/16 128.245.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c6:dd:1a:de:c5:3a:17:4c:1d:5a:01:be:f9:38:76:09:a6: 23:f7:c6:e9:27:e4:e9:cd:9c:83:46:7f:c6:0b:2f:2d:b8:d2: 78:8a:7d:2d:d4:22:1b:b0:64:a9:5c:71:d9:87:49:81:f3:4e: cb:28:b3:38:fe:8b:42:79:3d:27:46:be:66:80:fc:5d:a6:f6: 01:f8:d5:57:57:7b:9c:3e:00:75:ce:3a:61:7e:65:fe:1d:79: 51:de:d6:83:4b:c9:3e:62:83:2c:bb:ab:10:40:ce:4b:f5:bf: 20:23:a2:75:16:32:87:2d:8c:30:57:d2:3c:45:d0:7b:71:b3: 98:8b:5d:34:86:56:c0:c6:47:46:79:0b:5f:ed:ad:50:7c:3e: e7:8f:f9:6e:bf:4b:68:71:b3:2c:4b:71:7f:13:ac:ca:a1:d3: fd:ef:5f:82:bf:e6:33:c8:d4:41:e1:8d:4a:47:d2:0f:fc:c2: 7d:99:e8:02:69:53:41:f3:21:ed:ca:8c:61:f2:b6:27:22:a5: 77:c1:4e:95:11:9d:1e:7e:03:51:01:be:f7:b5:50:e7:f2:a8: 38:c9:a6:dd:77:f7:72:c1:fb:57:10:06:66:d8:3e:c2:14:67: 44:71:fb:d6:35:bb:f2:3b:9d:41:3b:59:68:a0:67:74:35:fe: 25:51:b7:2b -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEkIgWrwU5FOeUoFRHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NmUyNjNmZDUtYjlhZi00OWNiLTg4ODktNzA2ZDQ2YWI5NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf1beB7aaTd8BPi27pipwdAlKYUySH3rCBF0 qZtlOha4JqGG/qxDmcGvjhFA4hI5oMKbTZVhc+M31Ls6ZysU7IZ/kG+ijkjhmkEx DM8MkrtaT8GCKXKJaz11ljDz3ulQ+/OJKQlcgvwqBesxxdVsjj5wlMPR8/n8J9Mu KqDY6a8ReAuKtcnROjdixu7iT+pLGyE81dyu9Ercqnt688HFslm6fOh/iA/SYimk 7BvOP/LMWxlrlCzJYNdttusUdYGEajzsQ46Li0+bGXfIZWLXdxFqSrd6hytaMlcA xur4DAt51L3OxaJAFAoSEC9GfhvJL0fEF4mcr8ipIL3W0X5dgwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFGmS3yF9Sk65tRInVkvHEzSXlQBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZjRlZWU3ODYtZGJkOS0z MDdhLTlhMTEtYjE5MGI5MzUyNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgBEDAwCA 9TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBwxt0a3sU6F0wdWgG++Th2CaYj98bpJ+TpzZyDRn/GCy8tuNJ4 in0t1CIbsGSpXHHZh0mB807LKLM4/otCeT0nRr5mgPxdpvYB+NVXV3ucPgB1zjph fmX+HXlR3taDS8k+YoMsu6sQQM5L9b8gI6J1FjKHLYwwV9I8RdB7cbOYi100hlbA xkdGeQtf7a1QfD7nj/luv0tocbMsS3F/E6zKodP971+Cv+YzyNRB4Y1KR9IP/MJ9 megCaVNB8yHtyoxh8rYnIqV3wU6VEZ0efgNRAb73tVDn8qg4yabdd/dywftXEAZm 2D7CFGdEcfvWNbvyO51BO1looGd0Nf4lUbcr -----END CERTIFICATE-----Generated at Sun Apr 27 16:02:27 2025 by rpki-client