$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa File: bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa (raw, json) Hash identifier: 27IvceBFoxJUczbPvSbsD6Qiwg9OKBnrZvTHfuyHNao= Subject key identifier: 90:97:55:F0:C6:2E:86:A0:5A:86:AD:4A:78:D7:4A:88:F7:F0:C8:01 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FEF7F96264FBF2B7B740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fe:f7:f9:62:64:fb:f2:b7:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=33a224f8-d411-4712-bb49-231831f50a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:71:22:2d:43:d9:06:9c:30:a4:94:8d:10: 15:94:06:aa:53:16:91:49:2e:44:75:34:2d:ff:42: 58:84:3f:48:f8:8d:6b:7b:ec:94:1f:7b:fe:24:e8: 09:9f:59:1a:30:8c:3a:ff:69:68:57:01:c3:0a:e8: 24:5f:bd:9f:99:2f:ae:c6:8c:24:04:aa:89:c7:ad: 64:f4:55:b7:9a:49:63:9d:d4:93:b1:86:5d:cd:e9: e2:0a:ce:95:08:eb:5f:7d:d3:7f:06:66:39:63:96: 96:e9:27:bd:39:e1:fd:e4:37:75:ea:38:c0:14:fd: bd:ea:c7:7b:31:a4:e6:7a:b9:e6:d9:95:a7:1f:6c: 5d:1a:14:2e:9a:1a:9f:bf:1b:0c:e0:31:50:e0:50: 0b:55:54:07:5e:d0:d7:c0:28:4e:bd:87:48:fc:86: fe:38:8d:5a:97:c2:93:da:b8:32:be:6d:7b:bc:0c: 26:16:57:9d:35:a3:45:f4:8b:dc:27:36:84:f6:f4: 37:57:70:6f:d0:6b:e5:c1:69:5d:bd:4d:53:e1:77: 77:c3:ef:cf:66:81:35:c4:75:b8:77:32:68:9a:40: 0e:b7:17:0b:71:ca:5c:b5:3b:86:45:14:c8:2f:b0: 82:e7:0a:ab:b5:c1:43:64:59:19:91:21:04:f5:db: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:97:55:F0:C6:2E:86:A0:5A:86:AD:4A:78:D7:4A:88:F7:F0:C8:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:21:4b:7f:e1:a2:9d:55:72:0c:7e:0d:ee:3b:74:fa:81:33: c2:0b:de:6f:83:dd:f5:2e:f7:82:b0:cb:67:61:ad:0c:2d:15: 2e:17:30:ab:05:46:c3:52:42:1e:2c:ba:24:76:67:78:ed:51: e2:6f:32:59:e8:3b:41:9b:8a:a8:d4:8d:18:5b:df:51:0a:21: 10:5c:f6:5e:c5:58:b1:09:04:46:05:bd:da:c1:78:87:65:ff: fc:df:f4:17:40:47:05:c1:97:ad:cd:5a:ce:ab:12:8b:6b:3a: 7f:21:aa:fa:7a:7c:83:f5:78:ee:f2:d6:1b:0a:f3:db:4b:bf: 63:52:d9:f1:e9:ba:65:22:10:86:51:60:4e:50:07:83:a0:04: 90:02:dc:6d:81:1b:e1:fc:34:09:66:fa:78:1c:ea:b4:b9:17: 2e:64:75:53:47:26:24:2d:7b:a1:20:37:64:38:1a:d7:c7:88: d6:2e:42:2b:3f:b3:7c:69:9e:05:61:33:78:99:a5:1d:8b:42: 16:6a:e4:ea:b5:b0:08:d9:19:64:60:b7:50:47:77:8b:9d:ce: c5:f8:99:ba:94:52:6c:56:8c:b9:19:87:a7:34:42:69:e6:eb: 91:49:a5:42:d4:31:f3:02:5a:01:fa:5e:c6:bf:34:1b:29:b2: 61:54:fe:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP73+WJk+/K3t0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzNhMjI0ZjgtZDQxMS00NzEyLWJiNDktMjMxODMxZjUwYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3JxIi1D2QacMKSUjRAVlAaqUxaRSS5EdTQt /0JYhD9I+I1re+yUH3v+JOgJn1kaMIw6/2loVwHDCugkX72fmS+uxowkBKqJx61k 9FW3mkljndSTsYZdzeniCs6VCOtffdN/BmY5Y5aW6Se9OeH95Dd16jjAFP296sd7 MaTmernm2ZWnH2xdGhQumhqfvxsM4DFQ4FALVVQHXtDXwChOvYdI/Ib+OI1al8KT 2rgyvm17vAwmFledNaNF9IvcJzaE9vQ3V3Bv0GvlwWldvU1T4Xd3w+/PZoE1xHW4 dzJomkAOtxcLccpctTuGRRTIL7CC5wqrtcFDZFkZkSEE9dtErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCXVfDGLoagWoatSnjXSoj38MgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZmYWY4ZmMtYjcyNy0z OGViLWFhMDgtNWU0YjA2NDBjYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGchS3/hop1Vcgx+De47dPqBM8IL3m+D3fUu94Kwy2dhrQwtFS4XMKsF RsNSQh4suiR2Z3jtUeJvMlnoO0GbiqjUjRhb31EKIRBc9l7FWLEJBEYFvdrBeIdl //zf9BdARwXBl63NWs6rEotrOn8hqvp6fIP1eO7y1hsK89tLv2NS2fHpumUiEIZR YE5QB4OgBJAC3G2BG+H8NAlm+ngc6rS5Fy5kdVNHJiQte6EgN2Q4GtfHiNYuQis/ s3xpngVhM3iZpR2LQhZq5Oq1sAjZGWRgt1BHd4udzsX4mbqUUmxWjLkZh6c0Qmnm 65FJpULUMfMCWgH6Xsa/NBspsmFU/mU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:03 2025 by rpki-client