$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa File: bf80667c-5655-3355-a79e-cb6b3750f3f8.roa (raw, json) Hash identifier: 6HBNmn74aPjByRXJW1WqcGYfxPGWKufdJ4SpjtxFboo= Subject key identifier: E5:A3:1B:09:5A:E0:74:68:82:5C:3C:73:15:87:CE:DF:F5:0A:DE:D4 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F43285849ED19664E079CE1CD39FD9080 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa Signing time: Wed 21 May 2025 11:11:35 +0000 ROA not before: Wed 21 May 2025 11:11:35 +0000 ROA not after: Tue 19 Aug 2025 11:11:35 +0000 asID: 6363 IP address blocks: 134.141.0.0/22 maxlen: 24 134.141.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:19:66:4e:07:9c:e1:cd:39:fd:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: May 21 11:11:35 2025 GMT Not After : Aug 19 11:11:35 2025 GMT Subject: CN=4a45d66f-09ac-4292-ad13-43473860d791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:5b:e8:43:53:ff:83:39:ba:9a:81:71:b8: b1:ef:92:5e:a7:da:91:e0:d4:af:34:cc:a0:a1:cf: 4d:43:3f:26:3c:fd:cc:d7:58:c1:8e:70:dc:5e:58: 29:09:df:6f:c9:12:10:b8:ca:33:11:8e:82:de:dc: df:8b:0e:9c:17:9e:86:7d:38:f8:31:3d:49:de:c1: 60:db:66:72:57:8e:3d:81:4c:bb:6f:67:3d:89:bd: 21:a7:5a:16:b8:42:31:cc:a5:14:1f:8f:fa:b4:4c: ab:a5:30:14:5b:0c:3a:d8:4f:6c:37:c6:8b:57:ed: 9f:7a:8a:f6:01:4a:53:d0:a0:b9:77:70:36:8a:7a: 1e:ce:ed:01:c7:4a:e6:0e:ed:73:16:7a:6e:c4:db: 0c:46:e3:9b:84:af:32:63:60:2e:85:87:79:42:94: d1:62:51:ea:cb:f7:12:a6:70:57:f1:e8:23:91:1d: ec:ad:81:5f:3b:38:28:f6:7a:65:d2:b0:50:e0:d7: b1:43:4c:43:7c:c1:2c:26:be:02:ea:36:49:79:95: 01:3c:87:91:12:2b:fb:21:32:1c:0b:23:f5:57:af: 52:ca:3a:a1:2c:96:af:d1:73:bf:51:6d:3b:86:8d: 42:f5:e0:68:9e:62:c1:7d:ee:77:31:83:5f:e4:f2: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A3:1B:09:5A:E0:74:68:82:5C:3C:73:15:87:CE:DF:F5:0A:DE:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv4: 134.141.0.0-134.141.4.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:35:ea:e7:ad:e4:13:73:90:a4:92:5d:a9:66:17:60:7b:64: 45:9d:fb:2d:0b:2d:d3:98:a4:62:a2:1b:ee:32:73:5b:d7:44: b9:37:9a:1e:b9:95:90:0d:f2:17:8a:97:fb:bb:51:7c:f7:a7: 5e:bb:11:f9:88:83:19:e7:a0:21:b6:57:15:b1:1b:ba:03:6b: d0:ab:60:34:2d:61:74:31:bc:18:73:0b:14:e1:f7:93:01:82: 14:57:80:e6:f5:82:ae:d3:8a:92:8b:75:92:f6:0b:fc:b4:97: d3:79:2d:13:40:60:14:40:e1:7a:e0:cb:6f:57:15:cb:22:ff: dc:89:c8:97:8c:cf:90:62:54:e6:9d:4d:13:cb:99:8f:81:7f: c8:44:9f:61:0e:76:61:06:54:e9:ca:02:29:69:43:60:f5:24: 46:29:02:2a:09:54:78:9f:27:f6:35:f7:eb:46:8e:d4:bf:63: d4:29:80:90:e9:87:26:af:f2:4c:4d:e7:08:47:af:95:e0:b3: 84:94:3c:b2:02:b9:d6:6e:5b:f8:41:75:f3:ad:73:f2:81:ec: 92:b5:c4:f8:ac:f5:a4:82:10:c4:71:ff:ee:8a:c8:b8:89:33: 89:f1:6f:7c:da:49:23:23:8b:f8:81:9b:d8:f3:e0:dd:90:f6: 4d:94:36:78 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEntGWZOB5zhzTn9kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MDUyMTExMTEzNVoXDTI1MDgxOTExMTEzNVowLzEtMCsGA1UEAxMk NGE0NWQ2NmYtMDlhYy00MjkyLWFkMTMtNDM0NzM4NjBkNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscRb6ENT/4M5upqBcbix75Jep9qR4NSvNMyg oc9NQz8mPP3M11jBjnDcXlgpCd9vyRIQuMozEY6C3tzfiw6cF56GfTj4MT1J3sFg 22ZyV449gUy7b2c9ib0hp1oWuEIxzKUUH4/6tEyrpTAUWww62E9sN8aLV+2feor2 AUpT0KC5d3A2inoezu0Bx0rmDu1zFnpuxNsMRuObhK8yY2AuhYd5QpTRYlHqy/cS pnBX8egjkR3srYFfOzgo9npl0rBQ4NexQ0xDfMEsJr4C6jZJeZUBPIeREiv7ITIc CyP1V69SyjqhLJav0XO/UW07ho1C9eBonmLBfe53MYNf5PJhswIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFOWjGwla4HRoglw8cxWHzt/1Ct7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvYmY4MDY2N2MtNTY1NS0z MzU1LWE3OWUtY2I2YjM3NTBmM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwCGjQME AIaNBDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAsNernreQTc5Ckkl2pZhdge2RFnfstCy3TmKRiohvuMnNb 10S5N5oeuZWQDfIXipf7u1F896deuxH5iIMZ56AhtlcVsRu6A2vQq2A0LWF0MbwY cwsU4feTAYIUV4Dm9YKu04qSi3WS9gv8tJfTeS0TQGAUQOF64MtvVxXLIv/ciciX jM+QYlTmnU0Ty5mPgX/IRJ9hDnZhBlTpygIpaUNg9SRGKQIqCVR4nyf2NffrRo7U v2PUKYCQ6Ycmr/JMTecIR6+V4LOElDyyArnWblv4QXXzrXPygeyStcT4rPWkghDE cf/uisi4iTOJ8W982kkjI4v4gZvY8+DdkPZNlDZ4 -----END CERTIFICATE-----Generated at Sun Jun 15 15:16:11 2025 by rpki-client