$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa File: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (raw, json) Hash identifier: uUovSan9qxg4hiGxUFkidBlN0HmJ5aopvx3QrmVVWpc= Subject key identifier: 59:F6:FD:76:AC:BE:61:09:53:DE:72:75:3D:7E:3E:D4:DB:21:CC:81 Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F432858496FAF08C8EA1EA5C9A57BD940 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 40867 IP address blocks: 74.114.72.0/21 maxlen: 21 172.86.240.0/21 maxlen: 21 208.90.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:08:c8:ea:1e:a5:c9:a5:7b:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=fb64ea1c-de8e-4544-87d2-4f248450fdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1f:2a:d1:84:da:77:48:ea:2e:46:59:d8:e1: c8:19:70:ca:48:fb:c6:b4:05:a5:64:dd:df:e2:d5: 7e:66:ae:4a:8c:23:ec:ac:80:ab:af:b1:00:b8:db: e5:e6:24:63:a6:51:2e:36:b8:43:d4:e3:d1:d6:33: ea:07:62:47:f7:e3:fe:ff:51:4b:e8:0c:39:34:f3: ac:83:c8:9d:b8:c1:dd:a4:65:dc:94:f9:97:4c:24: f4:7e:ea:69:73:83:db:4c:c4:7b:da:cb:16:dd:06: d2:04:73:8a:6c:11:13:8d:d7:84:9d:ff:c4:47:6a: f2:16:73:be:98:5a:0c:70:b5:6a:53:02:26:06:74: 7b:ca:7f:9d:cc:5c:4a:51:3e:98:51:6f:82:4e:fa: 7a:f2:d1:b9:cd:95:df:a8:b6:51:6e:65:1d:76:5e: 0f:f3:9f:77:d2:76:b7:2f:81:47:74:06:73:c0:bf: 87:6e:1c:32:41:d2:19:08:f0:bc:07:05:4c:ad:96: de:f9:f2:66:3d:84:9e:38:c3:c7:2c:4d:31:ac:7c: 08:60:33:99:eb:6c:88:a0:96:6a:97:b7:39:76:d2: fa:49:2b:34:99:3e:2b:b9:e4:2b:f1:67:00:3b:c6: b4:4c:1b:a2:7c:c8:83:09:c3:76:e9:e5:ac:0e:f9: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F6:FD:76:AC:BE:61:09:53:DE:72:75:3D:7E:3E:D4:DB:21:CC:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: 74.114.72.0/21 172.86.240.0/21 208.90.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:0a:d2:9e:5d:54:b6:61:14:5c:fb:5c:12:d3:e9:23:97:da: e8:66:32:83:6b:03:ec:7b:ad:fc:21:14:11:f2:bd:65:be:4a: 76:da:7c:6a:77:05:ab:89:9c:fc:7a:36:fd:71:9e:5d:77:e6: 4e:bd:1c:a9:08:ad:9f:1e:44:83:ed:f4:09:9c:83:9d:6c:3c: eb:c8:ac:54:d8:85:c9:bf:fe:a1:35:16:a6:fc:1a:c1:7a:c0: 67:b3:f4:42:a8:44:bc:5e:94:00:f2:de:03:63:84:ce:aa:8d: 02:d6:28:8f:55:86:33:0c:18:df:d5:33:96:48:c9:1f:92:7d: c7:c7:2b:71:ce:81:e8:1e:31:be:0d:c8:67:81:e0:67:c6:07: de:13:76:38:32:f9:a6:22:a9:30:e2:42:c6:88:60:f7:b4:b7: e3:18:0e:33:38:de:9d:b9:2e:af:36:3e:d5:13:ad:6f:7e:d5: ae:1f:6d:7f:8d:fd:9f:b2:a9:ed:76:12:db:2b:5e:55:75:97: b7:ce:e0:15:ef:13:f7:2b:59:57:cd:9c:00:c1:94:b2:48:16: 52:22:77:ff:db:f9:35:02:8d:b0:f1:e8:c9:ab:91:65:a0:f3: 26:70:2c:f5:a3:55:77:8e:ab:e7:6d:11:99:3e:eb:de:51:58: 28:1c:2a:a3 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWElvrwjI6h6lyaV72UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmI2NGVhMWMtZGU4ZS00NTQ0LTg3ZDItNGYyNDg0NTBmZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh8q0YTad0jqLkZZ2OHIGXDKSPvGtAWlZN3f 4tV+Zq5KjCPsrICrr7EAuNvl5iRjplEuNrhD1OPR1jPqB2JH9+P+/1FL6Aw5NPOs g8iduMHdpGXclPmXTCT0fuppc4PbTMR72ssW3QbSBHOKbBETjdeEnf/ER2ryFnO+ mFoMcLVqUwImBnR7yn+dzFxKUT6YUW+CTvp68tG5zZXfqLZRbmUddl4P85930na3 L4FHdAZzwL+HbhwyQdIZCPC8BwVMrZbe+fJmPYSeOMPHLE0xrHwIYDOZ62yIoJZq l7c5dtL6SSs0mT4rueQr8WcAO8a0TBuifMiDCcN26eWsDvnYLwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFn2/XasvmEJU95ydT1+PtTbIcyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvOGI1YjNmNjAtZDk0ZC0z Yjk2LWJkNTEtN2VjZWY5MTlhMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDSnJIAwQD rFbwAwQD0FpgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAD8K0p5dVLZhFFz7XBLT6SOX2uhmMoNrA+x7rfwh FBHyvWW+SnbafGp3BauJnPx6Nv1xnl135k69HKkIrZ8eRIPt9Amcg51sPOvIrFTY hcm//qE1Fqb8GsF6wGez9EKoRLxelADy3gNjhM6qjQLWKI9VhjMMGN/VM5ZIyR+S fcfHK3HOgegeMb4NyGeB4GfGB94Tdjgy+aYiqTDiQsaIYPe0t+MYDjM43p25Lq82 PtUTrW9+1a4fbX+N/Z+yqe12EtsrXlV1l7fO4BXvE/crWVfNnADBlLJIFlIid//b +TUCjbDx6MmrkWWg8yZwLPWjVXeOq+dtEZk+695RWCgcKqM= -----END CERTIFICATE-----Generated at Fri Apr 11 22:27:00 2025 by rpki-client