$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa File: bf6f3051-38bc-3abf-a853-242b9b807f71.roa (raw, json) Hash identifier: HzaEPCrTKJkNcDfgCsTxaTrV7D81Vm1X4wGRD9iT0F0= Subject key identifier: 90:E9:98:3B:3B:F2:1B:C0:09:5E:A1:9A:4A:04:F1:66:79:C8:52:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785404179588F5439164B10 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.171.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:40:41:79:58:8f:54:39:16:4b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8cd1a33a-be43-4f8d-95c1-34ac91be53e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:ca:6b:cc:b1:84:ad:32:9e:fa:39:6d:fb: 69:85:8e:62:27:57:f8:75:cc:43:42:2c:bb:c3:21: 38:9a:8d:b1:a4:26:39:b9:33:a4:ea:b0:b5:2c:81: ce:41:c0:dd:db:8f:47:65:e5:d7:af:fe:84:3b:b2: 4a:12:cb:b9:b0:9b:57:82:68:0e:4c:5f:d4:7c:db: 62:eb:b5:12:f8:05:3e:f6:bf:02:9d:0b:de:07:1d: 98:2b:fb:ab:ed:79:4b:3b:19:a1:77:98:5f:72:4b: 89:c2:d4:ba:66:26:ec:7d:a8:0b:ca:55:93:95:59: 48:a5:f1:2e:15:ec:9a:8f:67:1b:5d:7a:88:37:7d: ea:b7:d2:50:2d:0e:dc:34:13:58:ac:b0:5a:75:a6: a5:d4:0e:28:5d:2d:9d:ac:1a:d4:e1:9d:8f:e7:3c: 1a:82:57:2f:e3:81:5c:ef:f1:08:e2:37:01:f6:a3: 3f:25:41:31:4a:9a:3c:bf:80:06:80:48:71:ee:e5: 99:ed:ef:6f:9e:02:c6:93:73:e6:a7:9f:c4:f7:8d: 19:83:2d:7d:6b:df:b5:c7:90:ff:32:83:9f:1d:4d: de:d3:87:9d:08:c2:d0:71:d4:d0:65:71:d1:63:a4: 0d:a5:96:94:ca:ae:30:7e:4e:51:61:e3:23:bf:22: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E9:98:3B:3B:F2:1B:C0:09:5E:A1:9A:4A:04:F1:66:79:C8:52:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.171.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:6f:9a:bd:11:52:e1:95:72:90:fa:06:ad:7e:be:e1:9a:28: 8f:e9:bb:a3:57:92:d4:4b:c9:e1:42:c8:dc:82:45:f1:c1:6c: 9b:6b:9a:ae:1f:b0:44:ec:4d:dc:46:18:0a:de:92:aa:5a:ab: 7a:07:6e:a9:ce:da:66:40:93:03:51:19:e2:5f:3d:1a:2b:28: 17:90:6b:4b:53:67:61:59:00:52:72:63:bd:2d:1a:ae:dc:d5: eb:72:df:49:3b:f5:d4:a8:80:cd:ff:d4:65:a6:fe:3c:9c:38: ff:7f:81:a3:ed:ff:90:5c:d8:89:25:d2:14:6d:53:ab:ec:ed: 31:73:19:86:fa:89:40:d2:34:e7:2d:2c:16:3c:10:c9:2b:81: 3a:c6:89:65:9c:32:21:d4:a6:6f:8e:66:4b:04:aa:80:59:f8: 9f:e1:12:e7:bc:ba:89:ec:c3:de:ca:c9:11:93:bd:58:63:ef: 04:4c:27:0c:8b:c1:98:06:ee:44:86:54:0d:f7:12:d7:af:9b: 07:3e:5f:bd:d3:2f:bc:ac:de:35:71:dc:e8:74:db:74:c0:cc: dc:86:e0:2e:3b:91:61:c6:5e:c3:08:3d:72:7d:0b:d8:14:d8: 16:ad:e7:5c:78:81:f9:b3:72:74:f5:b5:9a:59:37:28:83:5f: 5a:76:59:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhUBBeViPVDkWSxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGNkMWEzM2EtYmU0My00ZjhkLTk1YzEtMzRhYzkxYmU1M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmLKa8yxhK0ynvo5bftphY5iJ1f4dcxDQiy7 wyE4mo2xpCY5uTOk6rC1LIHOQcDd249HZeXXr/6EO7JKEsu5sJtXgmgOTF/UfNti 67US+AU+9r8CnQveBx2YK/ur7XlLOxmhd5hfckuJwtS6ZibsfagLylWTlVlIpfEu Feyaj2cbXXqIN33qt9JQLQ7cNBNYrLBadaal1A4oXS2drBrU4Z2P5zwaglcv44Fc 7/EI4jcB9qM/JUExSpo8v4AGgEhx7uWZ7e9vngLGk3Pmp5/E940Zgy19a9+1x5D/ MoOfHU3e04edCMLQcdTQZXHRY6QNpZaUyq4wfk5RYeMjvyJ5XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDpmDs78hvACV6hmkoE8WZ5yFKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY2ZjMwNTEtMzhiYy0z YWJmLWE4NTMtMjQyYjliODA3ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIquAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBvmr0RUuGVcpD6Bq1+vuGaKI/pu6NXktRLyeFCyNyCRfHBbJtrmq4f sETsTdxGGArekqpaq3oHbqnO2mZAkwNRGeJfPRorKBeQa0tTZ2FZAFJyY70tGq7c 1ety30k79dSogM3/1GWm/jycOP9/gaPt/5Bc2Ikl0hRtU6vs7TFzGYb6iUDSNOct LBY8EMkrgTrGiWWcMiHUpm+OZksEqoBZ+J/hEue8uonsw97KyRGTvVhj7wRMJwyL wZgG7kSGVA33Etevmwc+X73TL7ys3jVx3Oh023TAzNyG4C47kWHGXsMIPXJ9C9gU 2Bat51x4gfmzcnT1tZpZNyiDX1p2WTI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:31 2025 by rpki-client