$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/55a98cb1-5eea-3533-bf72-72797bf95b64.roa File: 55a98cb1-5eea-3533-bf72-72797bf95b64.roa (raw, json) Hash identifier: gGadrxbz6bA/5x8u8ozzIVbtogFDMxNG9MuXlJAwwF4= Subject key identifier: D3:E4:69:D8:79:99:9D:66:AF:0F:A0:F2:A6:B7:7B:E1:AB:08:BB:FB Certificate issuer: /CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186 Certificate serial: 010D0C9F432858499FB9C88D0C0BDC8C63F1C700 Authority key identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/55a98cb1-5eea-3533-bf72-72797bf95b64.roa Signing time: Wed 23 Apr 2025 18:01:41 +0000 ROA not before: Wed 23 Apr 2025 18:01:41 +0000 ROA not after: Tue 22 Jul 2025 18:01:41 +0000 asID: 400633 IP address blocks: 64.119.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:b9:c8:8d:0c:0b:dc:8c:63:f1:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186 Validity Not Before: Apr 23 18:01:41 2025 GMT Not After : Jul 22 18:01:41 2025 GMT Subject: CN=7ead89bc-712a-4673-8e52-f6105b0c2ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:b3:c1:5c:21:3c:49:5f:4d:6c:60:c1:d8: 40:29:ef:e9:bf:67:30:4d:63:72:74:79:c6:2b:aa: 5e:28:7e:6a:49:79:f6:7f:b8:77:87:c4:aa:e8:84: e1:43:66:a4:c1:61:d6:b9:db:af:6d:48:5a:db:f6: 59:1f:9c:e0:e0:95:e5:0f:42:12:e4:7a:e1:7b:d0: 82:75:9c:c0:72:87:93:0a:e1:3c:8c:15:4b:46:dc: 13:dc:44:7d:05:8a:cd:89:d4:38:bc:40:4c:8a:10: e9:4c:20:a6:26:7c:8b:0b:02:93:18:3d:d8:42:1c: dd:04:f6:75:ac:fb:6b:fa:0c:43:9e:dc:c6:21:ac: c4:e2:e6:73:8e:e1:79:25:50:d6:ea:9d:c7:90:4c: 50:ca:d8:95:8b:2c:c1:5b:3b:83:da:3d:df:d1:de: a2:7a:fa:87:67:d9:14:c4:92:ec:3f:ef:7c:86:e3: 30:ac:48:67:77:1d:43:55:9c:96:60:29:f3:2b:f2: f5:0e:1a:52:90:a7:92:e7:da:17:2b:c2:52:06:07: 00:53:04:00:a6:d6:12:66:e0:72:46:5f:e8:8b:15: c0:e1:98:5b:b7:52:43:38:9f:9e:32:e6:81:f8:66: 90:59:1c:e1:19:eb:95:3c:80:86:f3:bd:ab:1b:b9: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E4:69:D8:79:99:9D:66:AF:0F:A0:F2:A6:B7:7B:E1:AB:08:BB:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/55a98cb1-5eea-3533-bf72-72797bf95b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl X509v3 Authority Key Identifier: keyid:9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer sbgp-ipAddrBlock: critical IPv4: 64.119.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7d:6d:92:aa:bf:aa:46:74:9b:ad:aa:d6:b2:87:86:94:db: 92:56:79:91:bb:a9:8e:8a:eb:bf:78:56:68:56:16:1e:d9:aa: 09:c8:74:30:53:17:84:5c:b1:ba:68:2a:9e:de:1e:03:b4:af: 0c:65:77:86:0b:c8:98:b8:80:b1:43:4f:3e:16:f2:c9:16:26: 25:5d:f2:1a:0d:35:6c:a3:35:16:bc:5a:6a:01:33:40:b3:27: 06:48:3b:01:5a:2a:54:b5:64:9a:87:42:68:dd:12:c6:82:dd: d8:fd:06:f5:26:a0:21:90:90:d9:84:81:25:e0:e8:53:5f:d9: 43:56:99:b0:5c:ee:e5:28:13:34:b8:34:0f:e5:43:b7:2b:a9: 1e:b3:a9:99:79:c4:c2:df:8b:8b:46:de:4d:9a:25:55:ac:6a: e5:7d:dc:0e:f9:f1:42:46:7f:1f:19:66:ff:bb:54:2a:f4:79: e2:da:ef:63:51:52:d8:7b:c0:11:ba:9a:c1:57:2a:a5:7f:48: 8a:01:b0:81:e2:e8:fc:b7:f1:de:e4:35:60:3a:7f:7a:24:c1: 18:04:7a:f5:4e:59:79:5b:5c:4c:1f:a2:83:6d:21:4b:87:60: 8d:87:bc:e6:36:4e:06:7f:6e:b3:a4:68:76:c6:43:c3:ac:bd: 66:ca:28:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfuciNDAvcjGPxxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY1Zjc3NDItOThmNy00MWNhLTljNTctNWI5MDJiYzRi MTg2MB4XDTI1MDQyMzE4MDE0MVoXDTI1MDcyMjE4MDE0MVowLzEtMCsGA1UEAxMk N2VhZDg5YmMtNzEyYS00NjczLThlNTItZjYxMDViMGMyZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFuzwVwhPElfTWxgwdhAKe/pv2cwTWNydHnG K6peKH5qSXn2f7h3h8Sq6IThQ2akwWHWuduvbUha2/ZZH5zg4JXlD0IS5Hrhe9CC dZzAcoeTCuE8jBVLRtwT3ER9BYrNidQ4vEBMihDpTCCmJnyLCwKTGD3YQhzdBPZ1 rPtr+gxDntzGIazE4uZzjuF5JVDW6p3HkExQytiViyzBWzuD2j3f0d6ievqHZ9kU xJLsP+98huMwrEhndx1DVZyWYCnzK/L1DhpSkKeS59oXK8JSBgcAUwQAptYSZuBy Rl/oixXA4Zhbt1JDOJ+eMuaB+GaQWRzhGeuVPICG872rG7mJDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPkadh5mZ1mrw+g8qa3e+GrCLv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZjVm Nzc0Mi05OGY3LTQxY2EtOWM1Ny01YjkwMmJjNGIxODYvNTVhOThjYjEtNWVlYS0z NTMzLWJmNzItNzI3OTdiZjk1YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmY1Zjc3NDItOThmNy00MWNhLTlj NTctNWI5MDJiYzRiMTg2L2JmNWY3NzQyLTk4ZjctNDFjYS05YzU3LTViOTAyYmM0 YjE4Ni5jcmwwHwYDVR0jBBgwFoAUnXppW5JWwGHhkQNScKNQYZA2d2IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZjVmNzc0Mi05OGY3LTQxY2EtOWM1Ny01Yjkw MmJjNGIxODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQHcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ9bZKqv6pGdJutqtayh4aU25JWeZG7qY6K6794VmhWFh7ZqgnIdDBT F4RcsbpoKp7eHgO0rwxld4YLyJi4gLFDTz4W8skWJiVd8hoNNWyjNRa8WmoBM0Cz JwZIOwFaKlS1ZJqHQmjdEsaC3dj9BvUmoCGQkNmEgSXg6FNf2UNWmbBc7uUoEzS4 NA/lQ7crqR6zqZl5xMLfi4tG3k2aJVWsauV93A758UJGfx8ZZv+7VCr0eeLa72NR Uth7wBG6msFXKqV/SIoBsIHi6Py38d7kNWA6f3okwRgEevVOWXlbXEwfooNtIUuH YI2HvOY2TgZ/brOkaHbGQ8OsvWbKKNc= -----END CERTIFICATE-----Generated at Tue Apr 29 01:54:15 2025 by rpki-client