$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa File: bfad2657-6c63-37ab-8995-4f4f371014c2.roa (raw, json) Hash identifier: 4H14480jE7rVeAJt95Th7BLD3RwJHcLxndIjJbi4STI= Subject key identifier: 08:60:71:26:58:A5:D2:C5:16:47:D5:A5:F2:3C:52:A0:44:41:B3:2B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D96D11F6390E39A80600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.72.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d9:6d:11:f6:39:0e:39:a8:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1853721a-4b11-486a-b7d4-5464638f3ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:54:08:2f:ff:cb:a4:c3:37:57:c2:25:c3: 79:c7:4e:93:b5:fc:d1:8b:06:97:0d:5b:b4:3f:82: db:c0:2d:18:d6:05:42:60:75:cb:6a:f2:fc:1d:4f: 5b:4f:16:5e:67:12:8f:2b:3f:14:3f:bb:91:cf:96: 4a:c1:2e:51:6f:2a:c7:27:2f:bf:74:fd:e4:ac:79: 30:ed:34:71:b3:db:0b:51:a0:ce:d3:18:fd:d7:fa: 5c:97:a3:6a:2c:f0:c8:65:18:bb:9c:c0:47:c4:2b: 96:1b:a7:f4:f5:41:ae:f4:26:2b:6d:81:bb:90:fb: d9:64:03:92:fe:d1:61:f2:60:0d:9f:2b:da:5e:ba: ed:dd:32:69:45:0b:e6:fc:06:ff:b1:f7:06:1b:fb: 31:70:bb:43:07:88:5d:a2:ba:19:1f:dd:a4:0d:af: e8:bd:0f:2e:cd:10:39:a8:a2:ca:20:0e:e6:1f:e7: 71:13:23:b3:73:e5:48:8a:5f:48:a6:3c:d5:58:fb: 67:eb:52:83:28:84:96:b7:5b:30:60:8c:a4:e5:2a: 25:3a:ec:11:79:16:b3:65:cc:29:7e:68:ff:ec:30: 3c:79:54:5e:e2:47:38:17:e4:67:2a:ed:5f:d2:4b: 43:b0:e8:a8:50:f5:6e:8f:e1:cc:0b:96:f7:51:b7: 3f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:60:71:26:58:A5:D2:C5:16:47:D5:A5:F2:3C:52:A0:44:41:B3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5b:2b:fd:ad:ec:2e:8b:4b:6c:5c:d7:c6:55:0b:00:b7:0f: 79:2e:97:45:14:c0:85:e8:6f:11:9e:0d:41:0b:b2:b3:1b:2f: 4d:63:c2:06:75:7e:36:82:d6:da:2d:99:00:a2:d1:43:c0:93: 7d:aa:0b:c6:28:d0:22:b9:13:11:dd:9e:88:94:0a:08:2d:f3: 94:30:26:1f:5b:3f:b7:a9:02:24:0c:8a:55:43:34:17:21:20: 3b:f9:b9:bb:42:21:22:80:88:fc:72:4e:90:ba:6e:f6:91:69: 85:09:31:c1:03:5d:e9:34:d5:13:d7:34:36:92:94:9e:48:19: 91:f8:e7:7e:76:66:6e:7a:89:48:1b:16:60:bc:07:f0:93:13: 52:b6:34:11:7c:e6:e5:c1:55:c5:83:ed:d3:35:23:10:1a:48: bf:ef:74:92:d4:59:e9:2c:c7:34:17:27:0b:c2:ef:56:76:4f: 3c:a7:cd:03:ab:d2:77:9e:23:c3:10:0a:28:59:99:f8:f9:36: 16:1c:e3:bc:c5:bc:61:9b:24:f3:e9:33:ce:72:71:63:e2:1a: 62:ed:cd:b4:6d:5e:bb:11:fd:da:1b:2e:02:b8:32:78:ad:91: 17:3e:2c:16:01:8a:67:66:3a:bd:5d:63:1a:19:88:10:22:07: a5:7e:0d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNltEfY5DjmoBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTg1MzcyMWEtNGIxMS00ODZhLWI3ZDQtNTQ2NDYzOGYzZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnipUCC//y6TDN1fCJcN5x06TtfzRiwaXDVu0 P4LbwC0Y1gVCYHXLavL8HU9bTxZeZxKPKz8UP7uRz5ZKwS5RbyrHJy+/dP3krHkw 7TRxs9sLUaDO0xj91/pcl6NqLPDIZRi7nMBHxCuWG6f09UGu9CYrbYG7kPvZZAOS /tFh8mANnyvaXrrt3TJpRQvm/Ab/sfcGG/sxcLtDB4hdoroZH92kDa/ovQ8uzRA5 qKLKIA7mH+dxEyOzc+VIil9IpjzVWPtn61KDKISWt1swYIyk5SolOuwReRazZcwp fmj/7DA8eVRe4kc4F+RnKu1f0ktDsOioUPVuj+HMC5b3Ubc/twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhgcSZYpdLFFkfVpfI8UqBEQbMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZhZDI2NTctNmM2My0z N2FiLTg5OTUtNGY0ZjM3MTAxNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZbK/2t7C6LS2xc18ZVCwC3D3kul0UUwIXobxGeDUELsrMbL01jwgZ1 fjaC1totmQCi0UPAk32qC8Yo0CK5ExHdnoiUCggt85QwJh9bP7epAiQMilVDNBch IDv5ubtCISKAiPxyTpC6bvaRaYUJMcEDXek01RPXNDaSlJ5IGZH45352Zm56iUgb FmC8B/CTE1K2NBF85uXBVcWD7dM1IxAaSL/vdJLUWeksxzQXJwvC71Z2TzynzQOr 0neeI8MQCihZmfj5NhYc47zFvGGbJPPpM85ycWPiGmLtzbRtXrsR/dobLgK4Mnit kRc+LBYBimdmOr1dYxoZiBAiB6V+DSE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:24 2025 by rpki-client