$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa File: bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa (raw, json) Hash identifier: dArtX1tc9gDzolyL97KL5Y0E6cWeG1KILxLiMbAD1Z4= Subject key identifier: 2F:55:46:A4:FB:01:78:0D:20:09:60:A3:6A:B4:D3:41:83:CB:43:AD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849E65509CE80FFE22C0E318780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 396982 IP address blocks: 34.53.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:09:ce:80:ff:e2:2c:0e:31:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=7980abc9-098b-487a-b314-6a7d182d723b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:94:88:19:a6:ec:f2:39:19:cb:92:e6:3a: 85:3e:ff:e3:cf:a5:de:17:e4:25:08:d9:48:81:84: 3b:5c:dd:d4:66:83:5b:a0:3b:59:b6:3c:1d:77:87: 06:58:52:fd:84:29:c7:c4:f7:58:82:23:69:a6:3d: 6d:1f:f4:62:45:39:4e:01:d2:b9:41:d9:f2:b1:89: 8d:36:76:5e:df:ae:cb:bf:60:83:ab:70:ee:5a:73: 5d:e3:e2:e3:7a:2d:64:56:e2:0c:92:08:4c:70:7a: e5:73:cf:6a:5e:90:ab:f4:7b:d4:20:cb:8f:d3:a1: 00:f0:2c:4b:de:4b:fe:2d:04:09:a7:16:8c:1c:a2: c0:93:a1:f4:50:e8:a2:f4:6a:02:a7:f9:44:a6:75: 92:e7:6b:5c:2f:9f:80:9e:3e:e2:fd:b8:b4:0a:95: b4:d0:d3:13:1b:f5:df:cd:72:ca:22:dd:ee:80:d1: d4:93:e4:1b:eb:3d:7a:d5:38:ff:f5:db:17:d7:1b: cf:16:1b:e1:57:12:ed:4c:56:c4:99:01:2e:14:32: cd:2e:c1:f9:a8:21:2b:5a:3b:59:c3:6d:3f:dc:5e: 7f:d7:84:c7:9e:6a:4d:6f:31:61:09:f2:c0:fc:5a: 56:52:42:f4:af:64:6b:dc:cb:ce:c9:6e:d9:b9:b7: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:55:46:A4:FB:01:78:0D:20:09:60:A3:6A:B4:D3:41:83:CB:43:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.53.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:df:80:ab:50:50:14:ca:03:c4:68:90:43:26:05:8f:e4:a6: 22:d1:b1:0f:59:3b:94:ce:e4:4f:eb:94:a5:4f:e2:4e:82:2e: b3:40:5b:e7:d9:ff:51:f5:70:fb:1c:a5:84:3a:c1:18:d2:38: 5e:72:bb:df:cf:8d:28:34:56:f7:41:60:1e:b3:1a:e9:d8:7a: e3:9d:cc:fd:2e:34:bc:7f:35:5a:86:24:5d:0d:65:58:76:ea: 2c:5c:9e:3a:af:86:d3:d0:95:fc:44:00:56:42:e0:e3:a5:98: cb:bd:17:49:21:93:3e:4f:05:79:f4:d0:44:3d:ca:c8:ba:3d: dc:e5:27:cf:be:32:42:84:97:5a:c0:9e:76:ad:8d:03:42:28: 16:af:ac:29:9d:7e:9d:75:b0:4f:2e:cb:49:f5:09:b9:55:89: e2:05:03:56:ed:29:45:45:01:b6:78:24:2f:a2:a0:86:45:f8: 2f:ce:23:89:df:df:17:f7:50:c2:cb:fc:22:32:8c:bd:27:cb: 55:f1:a1:31:fa:1f:86:d7:09:5c:02:2e:4e:64:8b:57:14:a5: b5:20:8d:79:c0:8c:a3:97:f6:14:65:4e:bd:c7:ef:1c:71:0c: 28:08:67:5a:86:43:62:6d:da:24:31:1e:59:61:d9:34:81:a1: 02:e3:c8:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQnOgP/iLA4xh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk Nzk4MGFiYzktMDk4Yi00ODdhLWIzMTQtNmE3ZDE4MmQ3MjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdOUiBmm7PI5GcuS5jqFPv/jz6XeF+QlCNlI gYQ7XN3UZoNboDtZtjwdd4cGWFL9hCnHxPdYgiNppj1tH/RiRTlOAdK5QdnysYmN NnZe367Lv2CDq3DuWnNd4+Ljei1kVuIMkghMcHrlc89qXpCr9HvUIMuP06EA8CxL 3kv+LQQJpxaMHKLAk6H0UOii9GoCp/lEpnWS52tcL5+Anj7i/bi0CpW00NMTG/Xf zXLKIt3ugNHUk+Qb6z161Tj/9dsX1xvPFhvhVxLtTFbEmQEuFDLNLsH5qCErWjtZ w20/3F5/14THnmpNbzFhCfLA/FpWUkL0r2Rr3MvOyW7ZubfBiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9VRqT7AXgNIAlgo2q000GDy0OtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYzNGMzOGEtMWYzMi0z NmY3LThhMDYtMTBiNWZlMDgwM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIjWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXfgKtQUBTKA8RokEMmBY/kpiLRsQ9ZO5TO5E/rlKVP4k6CLrNAW+fZ /1H1cPscpYQ6wRjSOF5yu9/PjSg0VvdBYB6zGunYeuOdzP0uNLx/NVqGJF0NZVh2 6ixcnjqvhtPQlfxEAFZC4OOlmMu9F0khkz5PBXn00EQ9ysi6PdzlJ8++MkKEl1rA nnatjQNCKBavrCmdfp11sE8uy0n1CblVieIFA1btKUVFAbZ4JC+ioIZF+C/OI4nf 3xf3UMLL/CIyjL0ny1XxoTH6H4bXCVwCLk5ki1cUpbUgjXnAjKOX9hRlTr3H7xxx DCgIZ1qGQ2Jt2iQxHllh2TSBoQLjyFs= -----END CERTIFICATE-----Generated at Sun Jun 15 04:55:34 2025 by rpki-client