$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa File: a4302370-01cb-38d0-a7bd-f931561466c3.roa (raw, json) Hash identifier: Np9+c2yhjEAdquoIkrfzBJ/19/mDrI0n28hVUtVx6Is= Subject key identifier: 20:EF:44:A7:5E:92:0D:68:5D:0E:CC:12:31:2B:BC:0C:3C:1F:80:65 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858493C0930FE2789AEB7D4FD4AA0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 4213 IP address blocks: 173.214.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:30:fe:27:89:ae:b7:d4:fd:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=bc858ce8-231a-4813-82a8-19e948f6b2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:58:05:23:2c:31:da:f3:1b:0c:e2:a8:6d:64: 03:08:8d:26:e2:af:fe:d9:95:d4:b7:94:89:9e:53: ef:4b:75:9b:41:a6:0c:fd:76:4f:94:a7:dc:5e:55: 94:7b:0b:81:63:9a:41:b5:4d:2e:37:40:39:57:67: 04:60:35:89:c8:84:34:4e:23:b9:32:28:15:39:68: 30:cb:78:98:ff:98:a4:6a:fd:a0:72:42:ae:f6:f9: f5:1c:1a:93:f3:76:82:ed:31:da:b0:22:82:dc:db: 0b:97:2d:6c:a9:e6:f1:e7:19:f6:6d:9d:ee:08:e7: eb:24:ab:81:db:18:0f:f8:82:6b:d6:f3:d0:26:c5: 72:df:55:17:0d:f5:01:84:15:8e:48:9b:e3:43:68: c5:fc:29:b7:22:4c:a0:20:1f:4a:dd:6e:d8:8b:de: e7:e6:d4:a1:09:ab:24:e1:01:7e:fb:c4:ea:b1:bc: 80:b2:1f:81:9d:a2:ad:67:f0:33:7c:75:55:7a:ec: 04:3d:8c:e0:3a:57:95:27:46:32:b9:ab:ed:4e:70: de:34:37:f7:cf:91:1e:57:e8:41:29:d2:a5:8a:97: 09:46:1c:06:b1:2d:fd:5a:99:66:7e:0f:dd:2e:f1: 7f:f0:4b:8a:6a:75:0d:5d:ac:91:97:3f:e8:51:70: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EF:44:A7:5E:92:0D:68:5D:0E:CC:12:31:2B:BC:0C:3C:1F:80:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 173.214.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:15:0f:61:0e:fa:e8:93:20:f5:31:7b:2d:ca:c1:c8:b7:54: 95:42:5b:90:40:8f:e8:c6:4d:a8:b5:a0:a2:7d:3c:d2:c4:a9: a0:ad:11:3c:cd:ea:b9:d8:6c:78:6f:fd:31:c2:fa:cb:99:0b: c7:74:d0:14:26:ef:7e:ff:f4:38:84:eb:3c:59:1b:8d:a9:34: fa:d3:b0:51:d0:a1:c2:9c:6a:24:91:bd:33:ad:26:3b:90:6d: 51:04:b8:ff:2f:3d:17:23:d3:8d:5b:6a:8b:75:ca:1e:ed:fb: a5:5c:c6:7a:05:19:1e:b1:5f:42:a9:2b:9e:5d:86:e4:d0:ab: 32:13:ad:18:5f:7c:f8:5e:9b:02:e4:3d:e8:95:e3:c3:a4:4f: ce:a2:21:79:81:17:72:eb:e8:36:61:93:d4:82:92:ac:10:f3: 1b:53:ac:96:64:7d:6b:2c:23:56:b2:f3:fc:d1:06:7e:c2:d7: b2:c4:63:fd:0f:a2:dc:85:96:bd:45:cf:b9:c9:9d:33:85:1f: c8:24:e1:96:be:65:6b:44:b7:2a:51:5d:ba:24:9a:c2:88:0a: 52:07:80:9b:09:db:dd:62:be:73:62:e6:00:9e:c9:3f:b8:23: 21:09:df:d1:db:7e:88:f1:aa:ed:06:de:07:96:f6:aa:d8:1c: fa:17:5d:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTD+J4mut9T9SqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YmM4NThjZTgtMjMxYS00ODEzLTgyYTgtMTllOTQ4ZjZiMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFgFIywx2vMbDOKobWQDCI0m4q/+2ZXUt5SJ nlPvS3WbQaYM/XZPlKfcXlWUewuBY5pBtU0uN0A5V2cEYDWJyIQ0TiO5MigVOWgw y3iY/5ikav2gckKu9vn1HBqT83aC7THasCKC3NsLly1sqebx5xn2bZ3uCOfrJKuB 2xgP+IJr1vPQJsVy31UXDfUBhBWOSJvjQ2jF/Cm3IkygIB9K3W7Yi97n5tShCask 4QF++8TqsbyAsh+BnaKtZ/AzfHVVeuwEPYzgOleVJ0YyuavtTnDeNDf3z5EeV+hB KdKlipcJRhwGsS39Wplmfg/dLvF/8EuKanUNXayRlz/oUXDpaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDvRKdekg1oXQ7MEjErvAw8H4BlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYTQzMDIzNzAtMDFjYi0z OGQwLWE3YmQtZjkzMTU2MTQ2NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoVD2EO+uiTIPUxey3Kwci3VJVCW5BAj+jGTai1oKJ9PNLEqaCtETzN 6rnYbHhv/THC+suZC8d00BQm737/9DiE6zxZG42pNPrTsFHQocKcaiSRvTOtJjuQ bVEEuP8vPRcj041baot1yh7t+6VcxnoFGR6xX0KpK55dhuTQqzITrRhffPhemwLk PeiV48OkT86iIXmBF3Lr6DZhk9SCkqwQ8xtTrJZkfWssI1ay8/zRBn7C17LEY/0P otyFlr1Fz7nJnTOFH8gk4Za+ZWtEtypRXbokmsKIClIHgJsJ291ivnNi5gCeyT+4 IyEJ39Hbfojxqu0G3geW9qrYHPoXXag= -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:40 2025 by rpki-client