$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/724dc0f1-bd37-3d30-9266-695afd24f575.roa File: 724dc0f1-bd37-3d30-9266-695afd24f575.roa (raw, json) Hash identifier: +VcEoJSasJ/Bz6gqQ9Vb7wCnjTcM5pQvPdYIzfJZKdU= Subject key identifier: A8:A5:93:F1:F9:7D:22:C6:2B:96:2C:A9:97:0C:EA:32:B5:33:17:C5 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F43285849EC01185D70FCCDAF90A77F00 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/724dc0f1-bd37-3d30-9266-695afd24f575.roa Signing time: Wed 21 May 2025 01:46:48 +0000 ROA not before: Wed 21 May 2025 01:46:48 +0000 ROA not after: Tue 19 Aug 2025 01:46:48 +0000 asID: 14618 IP address blocks: 13.111.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ec:01:18:5d:70:fc:cd:af:90:a7:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: May 21 01:46:48 2025 GMT Not After : Aug 19 01:46:48 2025 GMT Subject: CN=84b108c9-0efc-4987-b3d4-10781a16ac55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:d6:c2:a1:f9:8f:15:0c:a1:34:13:ce:a9: 2c:ff:99:7c:eb:b7:f8:af:9d:7d:20:98:0e:ad:19: c3:24:e9:ea:3a:23:59:d1:46:a8:7c:1c:fa:a6:0d: 32:99:17:c8:21:fc:7b:bd:45:78:1b:de:69:8b:01: 19:3d:f5:32:cb:f6:f5:c5:fe:1a:f0:c1:09:b1:45: 03:d6:7d:9e:32:54:0a:87:75:5d:d8:45:25:21:7c: d3:fe:c5:f7:f4:88:dd:db:ee:bc:5a:10:27:25:ea: 80:29:a8:80:17:85:5f:a7:d6:06:dc:a7:37:4e:17: e8:aa:72:bf:8c:ea:6a:24:8e:d1:38:40:1d:64:8b: f2:f5:80:a2:e9:b4:a7:88:59:b4:35:08:46:05:eb: 68:a9:7c:6e:09:49:2e:40:f2:26:81:e8:4e:a3:77: 5a:5b:82:4f:6e:ba:28:f0:dc:96:7a:92:37:f4:96: 60:cd:1b:28:5e:24:b2:b0:86:e4:d3:dc:11:55:0e: 76:d3:70:72:20:e2:51:ca:b1:34:7c:6a:f0:37:a4: 15:53:33:33:4a:a1:10:f5:db:60:48:5e:20:88:12: 6b:8b:fd:fb:fa:7d:1d:af:4e:2d:97:99:c1:ab:d1: 8b:4c:46:b9:9a:80:f8:84:4b:28:06:fe:e7:38:3f: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A5:93:F1:F9:7D:22:C6:2B:96:2C:A9:97:0C:EA:32:B5:33:17:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/724dc0f1-bd37-3d30-9266-695afd24f575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 13.111.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:96:3f:eb:ef:32:3a:25:f3:65:80:31:2a:c3:1a:36:90:b0: 73:a3:9c:e2:46:87:99:81:f7:25:d0:93:31:6c:95:a3:80:42: 62:0f:11:57:19:23:b1:6d:60:c7:56:8e:4c:2d:4c:e7:29:d8: 05:ed:bc:8f:b6:85:03:fd:a6:f8:25:cf:09:0f:01:6b:32:bd: 64:bf:ae:a3:8e:bd:1b:69:d4:c7:c7:af:90:72:53:30:f0:06: 43:a7:77:e0:90:b7:08:58:89:87:11:02:76:7d:21:9c:4d:c8: ea:57:d6:b2:33:aa:49:a1:8c:52:ed:bf:10:34:7f:eb:8a:06: bb:01:ff:17:3f:82:f3:98:b7:dd:bf:90:22:40:6c:86:30:ef: 6e:d2:6f:43:39:05:94:f6:86:0c:4f:2f:d7:40:3b:3d:08:2d: 68:5a:40:4e:ec:0b:89:8a:aa:48:db:54:f1:55:bc:ee:22:9e: 42:2e:f6:13:bf:84:da:aa:75:84:56:8d:30:2c:60:34:e1:63: 28:14:89:2a:e3:0b:9c:ae:e5:4e:dd:8e:ce:1e:76:33:f4:7d: 65:79:66:c0:60:51:fa:ee:0f:6d:75:5e:2c:5a:97:6e:38:23: 3e:ff:14:0f:8f:21:6d:62:0b:b9:9b:31:98:e8:ed:0a:cc:5c: 6a:6c:92:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnsARhdcPzNr5CnfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDUyMTAxNDY0OFoXDTI1MDgxOTAxNDY0OFowLzEtMCsGA1UEAxMk ODRiMTA4YzktMGVmYy00OTg3LWIzZDQtMTA3ODFhMTZhYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGbWwqH5jxUMoTQTzqks/5l867f4r519IJgO rRnDJOnqOiNZ0UaofBz6pg0ymRfIIfx7vUV4G95piwEZPfUyy/b1xf4a8MEJsUUD 1n2eMlQKh3Vd2EUlIXzT/sX39Ijd2+68WhAnJeqAKaiAF4Vfp9YG3Kc3ThfoqnK/ jOpqJI7ROEAdZIvy9YCi6bSniFm0NQhGBetoqXxuCUkuQPImgehOo3daW4JPbroo 8NyWepI39JZgzRsoXiSysIbk09wRVQ5203ByIOJRyrE0fGrwN6QVUzMzSqEQ9dtg SF4giBJri/37+n0dr04tl5nBq9GLTEa5moD4hEsoBv7nOD+ykwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKilk/H5fSLGK5YsqZcM6jK1MxfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNzI0ZGMwZjEtYmQzNy0z ZDMwLTkyNjYtNjk1YWZkMjRmNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADW/BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSWP+vvMjol82WAMSrDGjaQsHOjnOJGh5mB9yXQkzFslaOAQmIPEVcZ I7FtYMdWjkwtTOcp2AXtvI+2hQP9pvglzwkPAWsyvWS/rqOOvRtp1MfHr5ByUzDw BkOnd+CQtwhYiYcRAnZ9IZxNyOpX1rIzqkmhjFLtvxA0f+uKBrsB/xc/gvOYt92/ kCJAbIYw727Sb0M5BZT2hgxPL9dAOz0ILWhaQE7sC4mKqkjbVPFVvO4inkIu9hO/ hNqqdYRWjTAsYDThYygUiSrjC5yu5U7djs4edjP0fWV5ZsBgUfruD211Xixal244 Iz7/FA+PIW1iC7mbMZjo7QrMXGpskq8= -----END CERTIFICATE-----Generated at Tue Jul 1 00:50:01 2025 by rpki-client