$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8bf07673-76a8-3cf6-bd5b-6ecec413829c.roa File: 8bf07673-76a8-3cf6-bd5b-6ecec413829c.roa (raw, json) Hash identifier: J/IFfmeKZ0oYLrC/u+ouBdaeyMZiDWFqtmocp6j7Ek8= Subject key identifier: 10:F2:49:1B:02:E6:28:63:13:10:0E:F3:F1:5B:C4:32:5A:8D:DD:F2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B17B3F903F449500335A5200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8bf07673-76a8-3cf6-bd5b-6ecec413829c.roa Signing time: Wed 30 Apr 2025 02:40:14 +0000 ROA not before: Wed 30 Apr 2025 02:40:14 +0000 ROA not after: Tue 29 Jul 2025 02:40:14 +0000 asID: 396982 IP address blocks: 173.255.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:7b:3f:90:3f:44:95:00:33:5a:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:40:14 2025 GMT Not After : Jul 29 02:40:14 2025 GMT Subject: CN=d9b1ac25-20c9-4aaf-8bd1-50a384ebae43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:f6:7a:90:32:7b:07:76:94:bb:e8:e9:16: 98:07:56:59:51:10:e5:6b:5d:de:a3:bc:bb:24:21: c9:69:ed:d9:e8:9c:d2:21:af:a5:f2:8c:6f:79:60: 23:8d:27:d2:56:ae:8f:29:b4:e7:fd:77:64:9c:64: 92:aa:ab:7d:69:5d:b1:16:27:22:9a:7d:e7:a6:4c: a8:d5:06:6b:f7:3f:b3:d9:e4:b2:fe:ad:d3:1d:54: a2:d3:8e:05:de:74:fd:f3:6c:c1:7c:7f:4f:e0:f4: b8:10:54:75:06:01:5d:bb:65:a3:31:a3:98:ab:9a: c3:33:5c:07:8f:84:41:bd:47:71:c8:8b:46:cb:e9: aa:59:c0:ff:d0:2b:9e:11:a2:51:54:b5:12:c1:1f: 38:a6:17:fa:0d:6d:43:b7:21:23:3c:6c:41:68:56: 6c:61:d2:4e:b9:3e:7c:ba:b2:cc:f7:38:4a:77:82: 50:1c:54:e7:37:57:06:b0:1c:19:5a:00:b3:3a:57: 67:49:0e:d7:34:75:d8:f4:1a:29:60:b8:be:16:17: b3:ab:5b:e0:39:03:09:d8:b3:af:10:ba:71:ee:7f: c1:37:de:65:e5:39:11:27:58:60:72:ed:42:bf:a2: c5:45:5c:36:8d:d0:55:78:39:49:66:75:8d:52:ff: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F2:49:1B:02:E6:28:63:13:10:0E:F3:F1:5B:C4:32:5A:8D:DD:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8bf07673-76a8-3cf6-bd5b-6ecec413829c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 173.255.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:65:56:0f:eb:25:2d:c8:b4:1d:d6:8b:a2:ee:f3:78:cb:74: c9:c4:75:e5:8a:42:ec:70:31:2a:c8:03:99:ed:d4:66:f3:35: 9e:2c:db:74:57:88:f7:ba:74:18:5b:58:10:98:f4:bf:03:fe: 6b:d5:49:64:e5:93:d5:3a:39:13:e2:e9:e4:86:41:e0:c7:87: e3:12:96:34:05:f6:cc:8b:ed:fa:07:5c:ca:b1:39:c0:d4:26: 29:e7:4b:22:b8:e8:c8:a0:db:64:c0:57:72:97:29:29:34:21: fb:aa:9b:96:51:7a:e3:86:9a:7a:60:85:73:0b:b9:c6:6b:72: 2a:28:42:45:c7:43:0f:c2:1a:a2:76:52:0c:a8:5b:87:7b:68: e1:36:e8:b3:0a:f6:9f:4f:92:65:73:38:66:42:88:dc:45:67: c2:11:aa:0f:47:2c:38:90:37:3c:9d:90:14:c5:1a:8b:e3:99: b6:46:52:35:c0:e7:09:3d:9f:4a:4a:a0:6e:87:c8:e2:3f:71: a6:2e:68:85:cb:16:76:f5:77:ea:c0:12:57:32:ef:ed:86:5b: a6:98:93:92:63:81:1e:1f:33:f1:28:37:36:fc:aa:b5:53:cf: 72:1c:70:61:71:52:1b:26:90:76:fe:24:76:62:0c:f5:fd:6a: 01:a8:12:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxez+QP0SVADNaUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyNDAxNFoXDTI1MDcyOTAyNDAxNFowLzEtMCsGA1UEAxMk ZDliMWFjMjUtMjBjOS00YWFmLThiZDEtNTBhMzg0ZWJhZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfv2epAyewd2lLvo6RaYB1ZZURDla13eo7y7 JCHJae3Z6JzSIa+l8oxveWAjjSfSVq6PKbTn/XdknGSSqqt9aV2xFicimn3npkyo 1QZr9z+z2eSy/q3THVSi044F3nT982zBfH9P4PS4EFR1BgFdu2WjMaOYq5rDM1wH j4RBvUdxyItGy+mqWcD/0CueEaJRVLUSwR84phf6DW1DtyEjPGxBaFZsYdJOuT58 urLM9zhKd4JQHFTnN1cGsBwZWgCzOldnSQ7XNHXY9BopYLi+Fhezq1vgOQMJ2LOv ELpx7n/BN95l5TkRJ1hgcu1Cv6LFRVw2jdBVeDlJZnWNUv9P9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDySRsC5ihjExAO8/FbxDJajd3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGJmMDc2NzMtNzZhOC0z Y2Y2LWJkNWItNmVjZWM0MTM4MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErf9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtlVg/rJS3ItB3Wi6Lu83jLdMnEdeWKQuxwMSrIA5nt1GbzNZ4s23RX iPe6dBhbWBCY9L8D/mvVSWTlk9U6ORPi6eSGQeDHh+MSljQF9syL7foHXMqxOcDU JinnSyK46Mig22TAV3KXKSk0Ifuqm5ZReuOGmnpghXMLucZrciooQkXHQw/CGqJ2 UgyoW4d7aOE26LMK9p9PkmVzOGZCiNxFZ8IRqg9HLDiQNzydkBTFGovjmbZGUjXA 5wk9n0pKoG6HyOI/caYuaIXLFnb1d+rAElcy7+2GW6aYk5JjgR4fM/EoNzb8qrVT z3IccGFxUhsmkHb+JHZiDPX9agGoEjg= -----END CERTIFICATE-----Generated at Sun May 4 19:18:08 2025 by rpki-client