$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dc71cf42-d9bf-3345-8821-8e7e97d671e2.roa File: dc71cf42-d9bf-3345-8821-8e7e97d671e2.roa (raw, json) Hash identifier: ahzzTlJ7c9i6Ustz7mhLuZZSwnC9x6m8kK5qIp6PT54= Subject key identifier: 21:B3:05:EA:A5:EB:7A:8D:C2:00:4B:69:99:79:F5:B9:8B:8D:0D:AA Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F43285849EC008467BC7C1DDC7BBB7500 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dc71cf42-d9bf-3345-8821-8e7e97d671e2.roa Signing time: Wed 21 May 2025 01:45:38 +0000 ROA not before: Wed 21 May 2025 01:45:38 +0000 ROA not after: Tue 19 Aug 2025 01:45:38 +0000 asID: 14618 IP address blocks: 13.111.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ec:00:84:67:bc:7c:1d:dc:7b:bb:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: May 21 01:45:38 2025 GMT Not After : Aug 19 01:45:38 2025 GMT Subject: CN=94b5d02b-390b-40fe-b4da-422d63135f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:da:ff:c2:c3:6e:25:32:b7:33:67:2c:54:23: 80:c4:d8:37:ad:c4:36:16:f9:65:25:b0:34:c2:a8: d7:7b:19:98:18:a8:e2:df:22:2d:d9:0b:7b:72:cf: ec:c2:3a:46:c3:4e:59:e5:6d:b0:50:6a:a7:fc:bf: 06:bd:f5:74:9f:55:e6:24:c1:8e:0c:cb:6d:d2:5c: 62:13:1d:97:b6:e2:95:fe:60:86:b8:30:87:e8:f0: 75:6c:e2:12:4e:66:5a:88:70:d4:6b:19:aa:3d:06: b5:0b:67:89:ce:3e:42:ce:4e:21:d9:61:fa:65:31: 57:32:ac:e0:c9:16:cc:75:c8:08:e0:a7:fb:70:4c: 98:34:e0:ba:5e:b8:f8:98:8c:14:bc:11:3f:e3:f6: db:17:03:ab:30:4a:50:96:9b:78:75:2c:88:bf:52: 9a:ef:b6:b4:38:26:a1:e3:fa:37:98:5d:7e:31:7f: 2a:dc:55:1b:ce:11:73:9f:fb:5b:41:3c:fc:30:39: d5:cf:b8:62:8b:66:59:cc:b9:85:6b:31:84:cf:30: 6f:2e:e0:7c:58:05:6d:21:06:89:46:8f:eb:ee:ab: 06:df:88:54:02:fa:ea:90:63:28:09:48:36:4e:27: da:4b:c1:c3:4c:04:c3:02:a3:46:e0:4b:c3:d4:8d: 29:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B3:05:EA:A5:EB:7A:8D:C2:00:4B:69:99:79:F5:B9:8B:8D:0D:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dc71cf42-d9bf-3345-8821-8e7e97d671e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 13.111.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:06:bd:95:00:f8:6f:6a:f1:6c:53:94:0f:0b:de:61:42:04: e3:35:8e:a8:0f:82:8f:00:13:c8:0d:1b:3c:2c:be:0e:d4:e5: f3:67:7f:fc:96:e5:7d:1f:11:7c:33:f4:cc:fe:91:ca:b4:5c: d6:d6:9b:13:5f:42:36:3a:63:b0:63:fb:ea:41:fd:02:2a:cd: e0:1d:41:0d:2d:e4:d1:2d:b2:49:5e:21:6f:8c:6e:a5:41:39: 65:a7:b5:a3:a0:37:77:16:91:fa:06:32:bc:e3:78:ad:8e:1e: e3:c3:bb:51:aa:7a:55:c5:2c:21:13:bf:54:5b:ca:c3:48:03: 09:c3:aa:8c:33:98:03:59:e9:39:ae:f7:90:00:24:22:f0:6a: 49:ca:63:22:bc:bb:0e:ac:b0:80:e2:da:b8:26:18:f3:29:26: df:03:a7:db:f8:07:32:c8:eb:40:4c:4b:70:a8:6b:fc:8b:11: 4a:e9:e5:52:2e:f2:b5:13:70:58:b2:f4:39:b9:90:df:77:4e: fb:71:50:fe:1f:07:bd:d5:86:bc:7f:99:21:12:b0:6d:8c:ed: ca:c4:86:e5:b0:1f:a5:19:e7:48:e8:10:e2:7a:96:ea:e5:0d: d6:da:46:a7:7b:70:6a:9f:0a:f7:7c:73:0b:ee:20:77:42:d3: f8:3a:32:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnsAIRnvHwd3Hu7dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDUyMTAxNDUzOFoXDTI1MDgxOTAxNDUzOFowLzEtMCsGA1UEAxMk OTRiNWQwMmItMzkwYi00MGZlLWI0ZGEtNDIyZDYzMTM1ZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tr/wsNuJTK3M2csVCOAxNg3rcQ2FvllJbA0 wqjXexmYGKji3yIt2Qt7cs/swjpGw05Z5W2wUGqn/L8GvfV0n1XmJMGODMtt0lxi Ex2XtuKV/mCGuDCH6PB1bOISTmZaiHDUaxmqPQa1C2eJzj5Czk4h2WH6ZTFXMqzg yRbMdcgI4Kf7cEyYNOC6Xrj4mIwUvBE/4/bbFwOrMEpQlpt4dSyIv1Ka77a0OCah 4/o3mF1+MX8q3FUbzhFzn/tbQTz8MDnVz7hii2ZZzLmFazGEzzBvLuB8WAVtIQaJ Ro/r7qsG34hUAvrqkGMoCUg2TifaS8HDTATDAqNG4EvD1I0pewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGzBeql63qNwgBLaZl59bmLjQ2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZGM3MWNmNDItZDliZi0z MzQ1LTg4MjEtOGU3ZTk3ZDY3MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADW/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwGvZUA+G9q8WxTlA8L3mFCBOM1jqgPgo8AE8gNGzwsvg7U5fNnf/yW 5X0fEXwz9Mz+kcq0XNbWmxNfQjY6Y7Bj++pB/QIqzeAdQQ0t5NEtskleIW+MbqVB OWWntaOgN3cWkfoGMrzjeK2OHuPDu1GqelXFLCETv1RbysNIAwnDqowzmANZ6Tmu 95AAJCLwaknKYyK8uw6ssIDi2rgmGPMpJt8Dp9v4BzLI60BMS3Coa/yLEUrp5VIu 8rUTcFiy9Dm5kN93TvtxUP4fB73Vhrx/mSESsG2M7crEhuWwH6UZ50joEOJ6lurl DdbaRqd7cGqfCvd8cwvuIHdC0/g6Msc= -----END CERTIFICATE-----Generated at Thu Jun 19 11:23:40 2025 by rpki-client