$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa File: bfbbd772-9e31-38b1-a655-e7c84ef58361.roa (raw, json) Hash identifier: 98nmKyIUp5Bn5k7R+I+2OKgkErOvtijhpLI3XbE1bdM= Subject key identifier: 27:3D:C0:27:CC:E4:AA:7E:CB:B1:AA:38:CD:26:22:AC:98:E3:45:7E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CC42448FC3948D8E2AE0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.135.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cc:42:44:8f:c3:94:8d:8e:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e96cc0ee-b72d-4e6f-ab1a-ccac6ae8cd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:f7:d7:c1:9f:c8:b7:db:c8:95:da:cd:f6: dc:1d:83:87:ef:f3:8f:2b:56:6a:99:1f:36:cb:1f: b4:6a:ca:99:88:a4:97:56:08:88:10:d9:ae:be:ff: 94:bf:46:3d:aa:55:50:51:99:16:39:c3:5b:e2:93: 0c:a7:74:ef:f0:bc:64:18:59:49:fb:2d:ae:90:25: b7:7d:c1:ce:9f:74:09:5e:92:d1:6d:9c:bc:cd:20: c6:02:5a:36:cf:d2:86:15:fb:25:82:db:1d:5c:f1: f5:e6:15:fa:86:a4:07:ff:4b:55:b0:16:15:f4:80: 74:bc:38:7e:b9:10:4a:4a:59:ad:da:26:60:f2:9c: 9a:59:30:a8:d7:20:f0:f7:00:28:78:52:e8:c2:17: 38:79:48:4f:ad:96:8c:27:4e:f0:fd:5a:95:a3:69: a9:5e:fd:e4:66:8e:56:36:dc:a4:f9:66:49:d2:3f: e5:cc:53:44:6f:b2:67:4d:6b:0a:54:59:19:a2:63: a2:b2:e4:f8:d7:09:aa:c9:a9:fb:95:e6:1c:a1:b1: 03:f6:d4:d7:c1:a3:fc:6f:20:54:88:5a:bc:77:4f: ef:84:ef:70:eb:36:a7:e0:2e:b4:c7:a2:2f:bb:19: c9:3c:b0:b9:07:ba:3c:8e:28:7a:36:59:d3:f0:b3: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3D:C0:27:CC:E4:AA:7E:CB:B1:AA:38:CD:26:22:AC:98:E3:45:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:ab:b5:47:7f:4c:4b:77:e7:5c:36:5c:c6:a8:2e:bb:3a:a5: 48:39:c3:47:66:b9:26:ff:91:62:c8:f4:de:4e:a8:cf:8b:22: c8:03:79:27:f0:32:15:ee:09:06:ce:8c:5f:0b:85:f2:d9:1c: f0:72:2d:e3:c4:b9:f7:80:d5:02:fa:0a:08:c2:c1:b4:96:88: e8:ea:f1:e7:67:79:29:3e:ac:23:ad:a6:18:8c:23:c5:28:f2: e1:a9:d0:9a:c8:57:d2:6f:8b:53:0e:9e:3d:fe:4b:e5:99:18: b6:12:42:c7:d3:fc:eb:11:6e:40:e1:f0:a9:74:aa:33:6b:59: e9:45:41:19:ae:11:d0:df:5a:9d:94:12:4c:9d:d4:95:70:e0: ed:15:5d:3b:2a:8c:87:45:04:ea:9d:82:da:76:84:92:8c:fb: 23:94:e8:a0:d6:e3:cc:7f:27:f2:0f:08:70:c3:aa:07:bd:85: 8e:dd:6d:18:e3:fb:c3:ea:17:8b:68:7c:3d:13:9c:73:b1:a9: 89:99:23:af:4f:b3:f6:35:ac:7b:6e:ac:f7:06:be:85:72:37: 5b:a4:ca:a0:7c:f3:1c:ba:8e:b5:b5:7d:62:c3:50:8c:7c:4c: 29:a5:1f:2c:22:d2:dd:6d:6e:57:98:00:17:46:5a:36:a0:08: 27:92:d2:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMxCRI/DlI2OKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTk2Y2MwZWUtYjcyZC00ZTZmLWFiMWEtY2NhYzZhZThjZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1/318GfyLfbyJXazfbcHYOH7/OPK1ZqmR82 yx+0asqZiKSXVgiIENmuvv+Uv0Y9qlVQUZkWOcNb4pMMp3Tv8LxkGFlJ+y2ukCW3 fcHOn3QJXpLRbZy8zSDGAlo2z9KGFfslgtsdXPH15hX6hqQH/0tVsBYV9IB0vDh+ uRBKSlmt2iZg8pyaWTCo1yDw9wAoeFLowhc4eUhPrZaMJ07w/VqVo2mpXv3kZo5W Ntyk+WZJ0j/lzFNEb7JnTWsKVFkZomOisuT41wmqyan7leYcobED9tTXwaP8byBU iFq8d0/vhO9w6zan4C60x6IvuxnJPLC5B7o8jih6NlnT8LPQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc9wCfM5Kp+y7GqOM0mIqyY40V+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZiYmQ3NzItOWUzMS0z OGIxLWE2NTUtZTdjODRlZjU4MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIofwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqrtUd/TEt351w2XMaoLrs6pUg5w0dmuSb/kWLI9N5OqM+LIsgDeSfw MhXuCQbOjF8LhfLZHPByLePEufeA1QL6CgjCwbSWiOjq8edneSk+rCOtphiMI8Uo 8uGp0JrIV9Jvi1MOnj3+S+WZGLYSQsfT/OsRbkDh8Kl0qjNrWelFQRmuEdDfWp2U Ekyd1JVw4O0VXTsqjIdFBOqdgtp2hJKM+yOU6KDW48x/J/IPCHDDqge9hY7dbRjj +8PqF4tofD0TnHOxqYmZI69Ps/Y1rHturPcGvoVyN1ukyqB88xy6jrW1fWLDUIx8 TCmlHywi0t1tbleYABdGWjagCCeS0hE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:36 2025 by rpki-client