$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa File: a4302370-01cb-38d0-a7bd-f931561466c3.roa (raw, json) Hash identifier: Nz4YB8WtxwFSkLwGxYDKxBPwqpJLKhZA+lkXVCcB0oY= Subject key identifier: F0:3F:33:18:8F:EC:DC:D5:1E:65:4F:FC:AC:2C:3D:C0:46:52:4C:93 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584A1B600C8E6636038B9BE2E0E0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 4213 IP address blocks: 173.214.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:0c:8e:66:36:03:8b:9b:e2:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=30bcc70d-ac1b-4393-8e22-61b0202144bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8a:e8:f8:13:74:6a:97:47:55:c2:9d:e0:4e: d3:db:81:86:17:41:69:73:92:af:bd:01:d8:6f:41: fd:68:51:f8:74:c3:34:1c:3a:84:ad:c6:f0:4d:5f: be:d8:b8:bb:ad:c7:2f:37:24:7e:34:69:f7:f0:8a: c3:53:d6:f2:91:03:8e:d3:ea:b7:4d:cc:a6:80:fc: f4:10:e8:b9:6d:7e:4e:12:ff:d9:b0:4e:0a:95:39: ca:5e:94:4b:96:23:dd:79:e1:2c:00:6e:e7:e8:18: 48:3f:da:f2:70:f3:64:8f:a6:b9:18:18:70:0e:f2: 07:8d:02:f1:98:e5:fa:64:d3:8a:92:b3:57:10:ac: e6:76:b9:fc:67:3c:3e:a8:d1:f5:27:75:5f:e5:98: 05:bb:56:17:ad:e2:a6:2c:4a:c1:cb:13:2c:71:27: ee:43:b7:96:33:e2:bc:cd:95:b3:2c:83:fc:53:62: 5f:9a:32:61:46:25:bc:d4:b9:52:6e:60:f1:39:14: 32:7e:fd:fe:c4:8c:d4:4b:21:82:e6:a0:81:ab:ef: 37:71:02:17:5b:4b:d9:7b:3b:d9:1c:12:8f:9a:e4: 7d:a4:0f:fa:52:99:a3:46:a5:ce:3a:cd:7c:52:b0: 59:4c:3b:6d:e9:15:fe:ab:26:6a:8d:cf:86:b8:9a: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3F:33:18:8F:EC:DC:D5:1E:65:4F:FC:AC:2C:3D:C0:46:52:4C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 173.214.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ae:28:a4:ac:a0:0b:57:c4:f8:6f:4a:db:b8:be:39:20:81: b3:e9:01:27:6d:b2:e3:87:1f:0a:88:78:1d:8b:57:87:b6:f1: be:8d:b7:7c:75:11:74:f0:89:07:d4:dc:3f:d8:f0:5a:54:a7: d5:fc:27:b0:ae:6e:d5:fe:b3:e2:51:2e:a3:c9:48:43:51:45: 9f:9a:b9:92:d8:31:ac:67:0b:ab:fe:5f:cc:11:09:54:b4:4a: 3c:c1:2b:9b:5b:4a:37:a4:f3:e3:70:bb:a4:95:11:32:a9:3a: 79:d6:dc:b3:b2:d5:62:00:c6:5e:cb:3c:7e:a5:2a:ee:31:27: 3b:31:61:16:3b:ff:2b:72:47:31:58:0a:d7:04:10:42:71:1c: 9e:c5:89:eb:9a:6a:16:64:12:b0:ac:a9:35:de:5f:3d:11:35: d0:22:ed:07:9e:79:40:b4:dd:2c:58:cf:65:cb:75:d1:6e:41: e3:d5:f2:97:85:0f:46:f5:c6:0a:b3:03:b1:8e:3e:78:82:e4: 3a:5e:38:a8:24:90:a9:10:98:24:61:d5:13:e3:45:0a:d7:f3: 34:2b:70:f1:1b:97:04:c8:72:cd:9a:43:35:27:97:b3:8c:7d: 50:0b:47:bb:2c:5d:2c:43:8f:fb:d0:78:c5:c4:4a:62:e1:97: 3a:65:8d:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAyOZjYDi5vi4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MzBiY2M3MGQtYWMxYi00MzkzLThlMjItNjFiMDIwMjE0NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYro+BN0apdHVcKd4E7T24GGF0Fpc5KvvQHY b0H9aFH4dMM0HDqErcbwTV++2Li7rccvNyR+NGn38IrDU9bykQOO0+q3TcymgPz0 EOi5bX5OEv/ZsE4KlTnKXpRLliPdeeEsAG7n6BhIP9rycPNkj6a5GBhwDvIHjQLx mOX6ZNOKkrNXEKzmdrn8Zzw+qNH1J3Vf5ZgFu1YXreKmLErByxMscSfuQ7eWM+K8 zZWzLIP8U2JfmjJhRiW81LlSbmDxORQyfv3+xIzUSyGC5qCBq+83cQIXW0vZezvZ HBKPmuR9pA/6UpmjRqXOOs18UrBZTDtt6RX+qyZqjc+GuJp3uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA/MxiP7NzVHmVP/KwsPcBGUkyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYTQzMDIzNzAtMDFjYi0z OGQwLWE3YmQtZjkzMTU2MTQ2NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHauKKSsoAtXxPhvStu4vjkggbPpASdtsuOHHwqIeB2LV4e28b6Nt3x1 EXTwiQfU3D/Y8FpUp9X8J7CubtX+s+JRLqPJSENRRZ+auZLYMaxnC6v+X8wRCVS0 SjzBK5tbSjek8+Nwu6SVETKpOnnW3LOy1WIAxl7LPH6lKu4xJzsxYRY7/ytyRzFY CtcEEEJxHJ7FieuaahZkErCsqTXeXz0RNdAi7QeeeUC03SxYz2XLddFuQePV8peF D0b1xgqzA7GOPniC5DpeOKgkkKkQmCRh1RPjRQrX8zQrcPEblwTIcs2aQzUnl7OM fVALR7ssXSxDj/vQeMXESmLhlzpljbU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:51:46 2025 by rpki-client