$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa File: 8527687a-07fc-3f1c-a99c-a60850d64434.roa (raw, json) Hash identifier: 113CGfQlM8vWYgOrhqU+MYqKmKNgn759ZDOaiKl+WsQ= Subject key identifier: B7:CA:A5:BC:F7:0B:35:54:D8:61:B9:A4:B1:A2:59:2E:08:A5:0C:12 Certificate issuer: /CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1 Certificate serial: 010D0C9F43285849C4D4C7459B1B1001A33DC480 Authority key identifier: 07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 18451 IP address blocks: 174.34.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c7:45:9b:1b:10:01:a3:3d:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=e78d2322-7335-4038-a3e3-7052c676223f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:85:c8:c0:16:c2:26:ed:75:89:67:11:47: d3:ba:78:07:5a:91:f6:c8:cf:20:e7:98:93:cb:3f: 55:19:7e:dd:fd:3f:30:5f:4a:f3:02:81:b1:12:08: 97:34:39:f7:f6:29:25:25:2f:94:85:70:f1:4b:04: e5:8b:b5:1a:c2:27:24:3f:a5:5a:5e:1f:46:41:d5: bc:42:db:02:65:41:27:fb:c5:69:71:38:98:a4:5a: c7:77:b6:6b:9a:80:c8:50:57:fa:e3:96:9f:88:1e: a5:d6:a2:ae:98:e9:e3:c0:76:d6:8b:76:b6:a8:43: 21:5b:d6:b5:1a:9e:03:ec:5a:21:ba:2e:bf:f3:42: 0f:8c:79:d1:85:c7:7c:3d:1e:86:50:58:45:a5:80: 9b:de:c4:79:f2:8e:1d:90:cb:83:81:ec:a4:46:97: 82:22:ee:95:30:10:76:f7:c5:02:bb:c9:0f:da:04: 64:40:02:e4:83:fd:d5:0f:ac:c1:85:ff:39:7c:d0: da:b9:9f:f0:1d:16:11:8e:8e:4d:8c:2d:cc:5e:73: e4:c2:45:ac:09:84:4d:f5:9c:b3:92:24:02:7c:65: 0f:fa:40:71:ec:29:41:02:e0:64:9a:10:8e:a8:f2: 72:e4:95:98:8a:e9:d5:b3:b7:78:79:26:99:79:c6: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CA:A5:BC:F7:0B:35:54:D8:61:B9:A4:B1:A2:59:2E:08:A5:0C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl X509v3 Authority Key Identifier: keyid:07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer sbgp-ipAddrBlock: critical IPv4: 174.34.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e8:e4:0c:7a:db:89:a0:1c:dd:69:95:93:0b:2a:9d:cb:f3: 12:e7:16:16:ef:e0:b1:e6:3b:7b:c0:23:8f:14:50:a5:b0:29: 06:30:e4:3d:54:80:6e:77:52:4e:b9:ff:5a:06:04:f4:c9:97: 3c:e7:45:e6:df:6f:57:af:fe:20:97:da:25:b1:b0:a1:25:1f: 17:00:c8:23:a6:3a:65:32:23:82:a8:7f:fa:8b:c8:73:4b:5d: 57:d8:25:83:c3:b3:77:3f:05:b7:44:b3:be:15:20:d5:47:15: b7:35:5c:57:ff:32:79:05:a2:53:ca:ae:1d:15:1a:04:22:37: e8:6b:87:b6:a0:00:b2:80:ed:30:a9:de:ba:fd:8a:8f:82:db: f8:00:01:31:dd:5c:a1:bf:19:61:3a:a7:56:f7:ca:0c:23:99: d6:1b:19:4d:1a:c9:f6:69:c8:32:3b:9c:ca:d4:6b:fd:4b:fa: 13:01:a6:52:fd:69:77:8c:53:c6:07:92:66:3f:cd:1f:da:61: 98:fd:1b:9b:6b:99:00:49:37:b9:bb:fb:40:71:10:1c:9d:c3: a6:e5:63:75:a6:0c:3c:89:f4:18:e1:00:5b:78:6c:90:ef:0f: 48:62:bd:b8:da:95:22:86:80:ed:7d:24:64:38:c2:09:0c:35: 61:26:4b:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MdFmxsQAaM9xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI0M2RjMjEtZTFiMy00N2JiLWJmNDItNDRmZTU1ZTUy N2YxMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZTc4ZDIzMjItNzMzNS00MDM4LWEzZTMtNzA1MmM2NzYyMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX6FyMAWwibtdYlnEUfTungHWpH2yM8g55iT yz9VGX7d/T8wX0rzAoGxEgiXNDn39iklJS+UhXDxSwTli7UawickP6VaXh9GQdW8 QtsCZUEn+8VpcTiYpFrHd7ZrmoDIUFf645afiB6l1qKumOnjwHbWi3a2qEMhW9a1 Gp4D7Fohui6/80IPjHnRhcd8PR6GUFhFpYCb3sR58o4dkMuDgeykRpeCIu6VMBB2 98UCu8kP2gRkQALkg/3VD6zBhf85fNDauZ/wHRYRjo5NjC3MXnPkwkWsCYRN9Zyz kiQCfGUP+kBx7ClBAuBkmhCOqPJy5JWYiunVs7d4eSaZecb2TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfKpbz3CzVU2GG5pLGiWS4IpQwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82YjQz ZGMyMS1lMWIzLTQ3YmItYmY0Mi00NGZlNTVlNTI3ZjEvODUyNzY4N2EtMDdmYy0z ZjFjLWE5OWMtYTYwODUwZDY0NDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmI0M2RjMjEtZTFiMy00N2JiLWJm NDItNDRmZTU1ZTUyN2YxLzZiNDNkYzIxLWUxYjMtNDdiYi1iZjQyLTQ0ZmU1NWU1 MjdmMS5jcmwwHwYDVR0jBBgwFoAUB64YrfJryPrmWzLNhHyxbwenyaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82YjQzZGMyMS1lMWIzLTQ3YmItYmY0Mi00NGZl NTVlNTI3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfo5Ax624mgHN1plZMLKp3L8xLnFhbv4LHmO3vAI48UUKWwKQYw5D1U gG53Uk65/1oGBPTJlzznRebfb1ev/iCX2iWxsKElHxcAyCOmOmUyI4Kof/qLyHNL XVfYJYPDs3c/BbdEs74VINVHFbc1XFf/MnkFolPKrh0VGgQiN+hrh7agALKA7TCp 3rr9io+C2/gAATHdXKG/GWE6p1b3ygwjmdYbGU0ayfZpyDI7nMrUa/1L+hMBplL9 aXeMU8YHkmY/zR/aYZj9G5trmQBJN7m7+0BxEBydw6blY3WmDDyJ9BjhAFt4bJDv D0hivbjalSKGgO19JGQ4wgkMNWEmS3g= -----END CERTIFICATE-----Generated at Sun May 11 08:29:52 2025 by rpki-client