$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf4300f4-578f-32dc-9eff-c1e110a58d24.roa File: bf4300f4-578f-32dc-9eff-c1e110a58d24.roa (raw, json) Hash identifier: 5q5YzVbbFAm5xZy7TAoa/N4Qz/fYePjaqvCzUBEXIkg= Subject key identifier: 8C:F3:F5:6B:34:E8:F0:52:2B:78:7D:0A:A9:69:05:5A:4A:80:5D:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584972799E4D4BABC4003E32F380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf4300f4-578f-32dc-9eff-c1e110a58d24.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 396982 IP address blocks: 34.13.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:9e:4d:4b:ab:c4:00:3e:32:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=95f8fbb9-1a44-4d48-8167-a0744d0e196c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:a6:c4:30:3d:51:50:98:8d:3c:49:39:c2: 23:1c:33:d6:fa:30:4b:32:33:1c:02:19:f9:a9:ec: ba:33:93:bf:9b:b0:b3:21:8e:5c:44:8d:99:59:61: d3:17:71:43:25:9a:63:49:98:59:3f:3a:b3:94:27: 7f:ab:c8:c6:c4:14:28:af:5a:56:f2:42:39:34:d8: 83:32:9d:33:e0:60:05:1e:40:8c:b0:89:81:bf:f2: dc:00:79:f1:75:fe:ac:a8:13:75:2e:a0:54:24:d2: 8e:c4:bc:ab:bc:c5:e5:1c:85:6d:ec:c9:fb:9d:85: 9b:ce:7c:50:5d:bc:8f:ba:bb:14:ad:23:96:3f:fc: 50:c5:3d:63:d4:28:c0:69:97:66:c8:33:43:f1:54: f3:0d:33:4f:1e:cf:20:eb:cd:6b:87:bd:d8:95:3d: d6:fa:cd:35:76:09:81:09:d4:b4:30:eb:65:e7:8c: f1:3d:f1:05:8e:04:7f:95:5c:65:41:f3:78:6e:66: cc:54:28:bc:7e:72:fe:cb:02:87:95:06:2e:da:e8: 29:6c:0c:cf:74:12:e8:c7:c3:e1:6a:76:b5:84:79: dc:09:f5:14:0c:d6:e0:56:50:63:ff:aa:da:93:49: 10:63:38:e2:77:9c:14:89:9c:8c:60:fc:a1:59:5d: bf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F3:F5:6B:34:E8:F0:52:2B:78:7D:0A:A9:69:05:5A:4A:80:5D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf4300f4-578f-32dc-9eff-c1e110a58d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c9:99:77:d8:2a:81:d0:bd:e6:35:6d:f8:92:11:a9:2a:8f: 55:be:0e:7e:20:b9:83:a0:ce:06:b9:b1:b5:3d:b6:5b:9c:3e: 24:9c:96:74:ec:ad:d7:e2:5c:48:31:ce:14:6c:9d:22:83:84: 82:15:7f:4e:36:31:1f:c4:d3:f8:6c:0e:ec:6d:f2:ac:b4:f9: 74:5d:c8:7b:03:fe:17:0c:bd:c6:44:b8:dd:8c:a6:45:34:4e: 57:c8:7a:56:3b:42:e4:df:c2:3b:fe:97:ac:a5:69:37:7c:38: e4:6b:85:c6:12:f0:d9:3b:e1:f7:9e:5a:81:52:98:a0:99:72: 4b:3a:11:de:36:41:13:5b:ee:aa:54:f6:ce:7d:8c:3a:b9:90: d5:ab:e2:7c:ff:1c:1a:77:fe:01:e4:b5:a1:69:5a:8b:a5:7b: a4:a7:22:63:d6:34:d6:a6:11:a3:e0:f2:6a:aa:08:40:73:64: c4:b1:9b:7c:67:1f:66:7d:67:96:40:13:5d:38:36:43:b5:bf: 03:15:90:a9:2e:fd:57:42:26:c4:bb:b2:56:c6:b5:90:b8:bd: 27:64:5a:92:07:e4:5f:13:69:18:24:38:4e:ba:c1:19:32:3e: 2b:9d:6e:e8:6f:b9:22:39:d0:a9:c3:08:cb:a6:75:d0:97:d9: 7d:ce:9a:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeZ5NS6vEAD4y84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk OTVmOGZiYjktMWE0NC00ZDQ4LTgxNjctYTA3NDRkMGUxOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFumxDA9UVCYjTxJOcIjHDPW+jBLMjMcAhn5 qey6M5O/m7CzIY5cRI2ZWWHTF3FDJZpjSZhZPzqzlCd/q8jGxBQor1pW8kI5NNiD Mp0z4GAFHkCMsImBv/LcAHnxdf6sqBN1LqBUJNKOxLyrvMXlHIVt7Mn7nYWbznxQ XbyPursUrSOWP/xQxT1j1CjAaZdmyDND8VTzDTNPHs8g681rh73YlT3W+s01dgmB CdS0MOtl54zxPfEFjgR/lVxlQfN4bmbMVCi8fnL+ywKHlQYu2ugpbAzPdBLox8Ph ana1hHncCfUUDNbgVlBj/6rak0kQYzjid5wUiZyMYPyhWV2/EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzz9Ws06PBSK3h9CqlpBVpKgF09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY0MzAwZjQtNTc4Zi0z MmRjLTllZmYtYzFlMTEwYTU4ZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIg1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDJmXfYKoHQveY1bfiSEakqj1W+Dn4guYOgzga5sbU9tlucPiSclnTs rdfiXEgxzhRsnSKDhIIVf042MR/E0/hsDuxt8qy0+XRdyHsD/hcMvcZEuN2MpkU0 TlfIelY7QuTfwjv+l6ylaTd8OORrhcYS8Nk74feeWoFSmKCZcks6Ed42QRNb7qpU 9s59jDq5kNWr4nz/HBp3/gHktaFpWoule6SnImPWNNamEaPg8mqqCEBzZMSxm3xn H2Z9Z5ZAE104NkO1vwMVkKku/VdCJsS7slbGtZC4vSdkWpIH5F8TaRgkOE66wRky PiudbuhvuSI50KnDCMumddCX2X3OmvQ= -----END CERTIFICATE-----Generated at Wed Apr 9 20:35:32 2025 by rpki-client