$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa File: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (raw, json) Hash identifier: fOYzqhkRBiOUKvRCdI+/P/0VXM9H5XqF20zG+g6wLjg= Subject key identifier: 47:AD:77:90:E5:94:C6:73:06:B0:05:D5:CD:52:11:98:AA:F4:CA:BE Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584A4F05C14BC31F772FB04E2AA0 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 40867 IP address blocks: 74.114.72.0/21 maxlen: 21 172.86.240.0/21 maxlen: 21 208.90.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:c1:4b:c3:1f:77:2f:b0:4e:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=17caadf8-b451-48f9-92d6-8dd56a658218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:aa:80:31:40:2a:23:69:36:61:15:11:f0:02: 9d:7b:05:af:e0:48:23:b1:8e:38:2e:5c:fa:66:31: 94:78:09:b5:7c:24:dc:09:eb:a4:f8:b2:9e:e1:14: 09:d5:9c:f6:83:05:33:7c:8b:f2:23:4f:c5:15:be: c7:35:a2:a1:25:46:02:78:b2:39:72:4d:07:e0:e2: 38:47:a2:0b:3e:78:42:36:3e:9b:81:4d:65:d1:4b: ea:7c:a8:27:d3:03:fa:c2:a0:30:56:31:8b:67:69: 72:d3:1f:9f:55:94:55:5d:f4:77:ee:03:50:0c:c7: ac:1c:08:85:e2:f2:37:5a:ec:20:7c:7e:32:65:b2: c4:b4:52:0a:21:0f:92:9d:7c:e8:a7:38:c3:47:19: 28:ae:37:58:30:66:99:c7:ce:7f:02:42:76:3f:4d: 81:6f:4e:61:7f:5f:61:28:d4:18:0c:33:49:87:92: 67:ba:5b:a9:9a:97:f7:4b:0c:4a:e5:14:9a:25:bb: c5:cd:46:11:f2:6b:3d:5f:4e:a3:a4:41:f0:3f:ec: 61:e9:85:e2:fc:03:fa:4a:49:36:31:d8:be:72:fd: d6:8c:62:bc:3e:e8:ee:4d:bf:55:9a:5f:a1:05:03: f8:cc:3e:40:c6:53:06:a6:e5:a7:0c:28:d7:3f:6d: 72:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AD:77:90:E5:94:C6:73:06:B0:05:D5:CD:52:11:98:AA:F4:CA:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: 74.114.72.0/21 172.86.240.0/21 208.90.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:07:c5:5f:c6:fd:cf:18:ca:23:c2:ab:66:38:d5:76:a8:b5: a7:9b:b8:0c:f3:58:bd:fd:a7:9b:93:0f:0c:c8:2f:a1:03:ea: 94:d7:0e:98:26:e7:24:dd:85:18:9a:43:b3:85:4e:06:0e:06: 72:92:61:98:3b:c4:4c:49:59:6b:5e:5e:a9:84:eb:5c:6f:d5: 39:32:ad:ca:85:6f:e6:5f:19:f0:81:ae:d2:27:4d:25:c7:21: 24:9d:b5:00:b4:32:89:15:1e:d5:b0:c9:6a:5c:c9:46:e2:b3: 54:9c:dd:bd:f1:aa:13:4d:b0:b0:ed:01:c7:60:ce:9c:a3:d8: 5f:20:49:a4:48:16:b8:a0:3c:67:0e:27:6e:ea:03:07:c6:05: cf:6e:eb:16:cc:fc:43:f0:42:4d:f3:26:f4:3d:e7:3c:7c:04: 93:f0:9e:06:e7:ea:ff:43:49:81:90:08:aa:d0:bc:c5:1a:1c: 3c:04:fb:6c:71:1c:d1:ba:5e:4b:d4:2b:2c:bd:ed:e3:96:b8: 0c:e6:ed:e7:99:88:9b:e2:91:8f:e7:ab:c9:a9:e3:b7:e7:70: 89:a6:20:f5:23:71:77:19:57:3f:83:19:f7:fe:14:23:22:50: 9c:d9:e4:97:cf:c4:46:be:be:e7:15:c7:18:d2:f2:06:ab:10: 5c:68:21:d6 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEpPBcFLwx93L7BOKqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MTdjYWFkZjgtYjQ1MS00OGY5LTkyZDYtOGRkNTZhNjU4MjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKqAMUAqI2k2YRUR8AKdewWv4EgjsY44Llz6 ZjGUeAm1fCTcCeuk+LKe4RQJ1Zz2gwUzfIvyI0/FFb7HNaKhJUYCeLI5ck0H4OI4 R6ILPnhCNj6bgU1l0UvqfKgn0wP6wqAwVjGLZ2ly0x+fVZRVXfR37gNQDMesHAiF 4vI3WuwgfH4yZbLEtFIKIQ+SnXzopzjDRxkorjdYMGaZx85/AkJ2P02Bb05hf19h KNQYDDNJh5Jnulupmpf3SwxK5RSaJbvFzUYR8ms9X06jpEHwP+xh6YXi/AP6Skk2 Mdi+cv3WjGK8PujuTb9Vml+hBQP4zD5AxlMGpuWnDCjXP21yRwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEetd5DllMZzBrAF1c1SEZiq9Mq+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvOGI1YjNmNjAtZDk0ZC0z Yjk2LWJkNTEtN2VjZWY5MTlhMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDSnJIAwQD rFbwAwQD0FpgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAG4HxV/G/c8YyiPCq2Y41XaotaebuAzzWL39p5uT DwzIL6ED6pTXDpgm5yTdhRiaQ7OFTgYOBnKSYZg7xExJWWteXqmE61xv1TkyrcqF b+ZfGfCBrtInTSXHISSdtQC0MokVHtWwyWpcyUbis1Sc3b3xqhNNsLDtAcdgzpyj 2F8gSaRIFrigPGcOJ27qAwfGBc9u6xbM/EPwQk3zJvQ95zx8BJPwngbn6v9DSYGQ CKrQvMUaHDwE+2xxHNG6XkvUKyy97eOWuAzm7eeZiJvikY/nq8mp47fncImmIPUj cXcZVz+DGff+FCMiUJzZ5JfPxEa+vucVxxjS8garEFxoIdY= -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:16 2025 by rpki-client