$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa File: bf1bc49a-0d53-3332-893b-589cda28cf4e.roa (raw, json) Hash identifier: 08kG9UaL+MwdCS6d0L9BbVkvjKXRvU/ddySYcBsJets= Subject key identifier: C8:28:E6:51:7A:F0:6C:C8:19:D6:8A:BA:69:AF:65:00:5D:40:F8:BC Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858498CFF18A90D57D73FEED1F000 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 13536 IP address blocks: 68.70.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:18:a9:0d:57:d7:3f:ee:d1:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=db230591-88d0-4cfa-a47c-0947453d6108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b0:92:e6:58:68:32:1c:7d:ec:bc:79:f7:ec: 80:85:5b:ae:7d:42:7c:f4:24:1c:b9:86:6e:b9:f0: a7:e0:25:4d:11:80:a5:46:30:49:32:74:d7:c1:4e: d8:eb:77:db:b7:91:03:a2:a4:d7:83:e3:4c:07:79: d4:94:49:25:0c:ba:ad:4a:80:f6:d7:9d:c8:cb:a2: 5f:43:8f:fb:e4:b9:f8:42:44:4c:f8:1b:b6:94:e7: 8a:3c:78:8a:3e:78:25:2c:e5:a7:f5:72:0b:43:ef: e3:1a:14:f8:68:15:80:0a:d4:88:52:8a:b4:42:36: b6:91:9c:a5:03:22:af:46:5d:a8:7c:d2:7a:13:34: 04:f3:ee:fc:6f:1b:85:a6:7b:d6:2d:2c:35:13:89: db:7f:77:33:52:35:c7:8d:fe:18:cb:74:f1:fc:bb: d7:e0:14:e1:f4:f8:11:d1:80:b1:25:52:c9:82:76: d0:05:0c:bc:8d:dd:bf:28:59:6c:af:7e:92:bb:43: 88:95:58:54:a4:c1:98:fe:79:91:36:21:50:ca:1b: 21:9c:56:67:e4:95:89:91:f5:a5:01:69:ac:f2:17: 7b:be:0a:92:e9:6e:d9:15:e0:23:41:ac:c1:de:73: e0:c5:44:d2:48:b1:de:ae:bb:6c:b8:26:4b:bd:b8: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:28:E6:51:7A:F0:6C:C8:19:D6:8A:BA:69:AF:65:00:5D:40:F8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 68.70.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:00:a8:d4:a5:38:52:77:89:7d:91:e3:ff:1e:58:13:55:da: df:9a:6f:6e:1e:b1:78:5a:66:75:0b:8a:9e:c4:7d:e2:78:9d: 3a:2d:85:90:02:1d:cd:0d:c7:a6:3f:3e:9f:e7:68:1c:22:95: 70:17:5b:34:6c:d9:0b:e1:89:72:ff:b4:09:be:da:3b:40:7d: 7d:55:25:69:f3:23:2d:4e:61:72:18:ed:4a:81:0b:c7:c4:4d: 68:f0:ae:2c:cf:c1:32:74:02:ea:ce:92:aa:4d:d5:e9:f1:0b: 33:91:0c:83:4a:02:b2:8d:14:cd:d0:fb:5a:c5:5a:ce:20:c7: c9:2a:32:43:5a:b3:e6:54:18:9c:18:59:f1:f0:81:9c:dc:35: ca:41:53:d0:19:52:3f:26:96:45:6d:17:d0:1e:4e:ea:0f:d8: c8:84:a3:51:ef:f6:68:e4:31:01:c8:03:04:8d:ea:47:78:83: 07:8f:1d:34:42:cb:0e:63:c0:44:18:67:d8:6e:e0:70:6e:93: de:18:a0:66:76:7c:4b:c9:d2:c7:4f:cf:4a:1e:e1:82:52:0f: da:3d:b6:53:c4:8d:e3:06:ed:4d:85:44:f9:ad:ab:47:f6:65: 5c:31:0c:e9:0a:aa:85:34:46:c9:cc:c3:ff:3b:98:db:c5:43: 14:aa:3c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xipDVfXP+7R8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZGIyMzA1OTEtODhkMC00Y2ZhLWE0N2MtMDk0NzQ1M2Q2MTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrCS5lhoMhx97Lx59+yAhVuufUJ89CQcuYZu ufCn4CVNEYClRjBJMnTXwU7Y63fbt5EDoqTXg+NMB3nUlEklDLqtSoD2153Iy6Jf Q4/75Ln4QkRM+Bu2lOeKPHiKPnglLOWn9XILQ+/jGhT4aBWACtSIUoq0Qja2kZyl AyKvRl2ofNJ6EzQE8+78bxuFpnvWLSw1E4nbf3czUjXHjf4Yy3Tx/LvX4BTh9PgR 0YCxJVLJgnbQBQy8jd2/KFlsr36Su0OIlVhUpMGY/nmRNiFQyhshnFZn5JWJkfWl AWms8hd7vgqS6W7ZFeAjQazB3nPgxUTSSLHerrtsuCZLvbiD1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgo5lF68GzIGdaKummvZQBdQPi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYmYxYmM0OWEtMGQ1My0z MzMyLTg5M2ItNTg5Y2RhMjhjZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcAqNSlOFJ3iX2R4/8eWBNV2t+ab24esXhaZnULip7EfeJ4nTothZAC Hc0Nx6Y/Pp/naBwilXAXWzRs2QvhiXL/tAm+2jtAfX1VJWnzIy1OYXIY7UqBC8fE TWjwrizPwTJ0AurOkqpN1enxCzORDINKArKNFM3Q+1rFWs4gx8kqMkNas+ZUGJwY WfHwgZzcNcpBU9AZUj8mlkVtF9AeTuoP2MiEo1Hv9mjkMQHIAwSN6kd4gwePHTRC yw5jwEQYZ9hu4HBuk94YoGZ2fEvJ0sdPz0oe4YJSD9o9tlPEjeMG7U2FRPmtq0f2 ZVwxDOkKqoU0RsnMw/87mNvFQxSqPLQ= -----END CERTIFICATE-----Generated at Tue Apr 29 12:12:27 2025 by rpki-client