$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa File: bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa (raw, json) Hash identifier: L6Wtcm9mYfFRs86KCzw7ocRdvDXzE1zUenK4etjtZhU= Subject key identifier: 17:44:D1:49:AE:33:5D:BE:CE:69:C0:98:97:27:A3:E0:63:42:65:49 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849C507C1023F681D9B9711DA40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa Signing time: Wed 07 May 2025 02:43:42 +0000 ROA not before: Wed 07 May 2025 02:43:42 +0000 ROA not after: Tue 05 Aug 2025 02:43:42 +0000 asID: 15169 IP address blocks: 34.191.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c5:07:c1:02:3f:68:1d:9b:97:11:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 7 02:43:42 2025 GMT Not After : Aug 5 02:43:42 2025 GMT Subject: CN=a8fb0857-1ed7-496b-92a3-0308074a91d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8e:f1:fd:e8:29:34:b9:a0:8a:ba:42:fd:fa: e4:b6:f3:7a:bf:4e:f1:c3:7a:26:c4:30:1b:71:48: 0f:19:df:90:6b:fd:6e:70:45:69:9b:cb:e2:f4:50: 29:af:26:ea:68:4d:92:95:70:48:f3:9a:22:b3:8c: f6:6e:8f:34:77:fc:43:44:de:13:2f:a5:46:48:0c: d2:b0:ec:03:b7:90:4b:8e:b4:f9:d8:09:f3:a9:cc: 4a:21:17:43:82:c3:e1:7d:31:72:2f:d1:43:4c:9a: 4b:c0:12:c7:72:63:7f:63:d6:1a:4d:2d:59:59:21: 28:b8:34:90:61:cd:61:76:63:11:15:00:05:df:01: 3c:5e:d9:ad:c0:d5:42:aa:a7:1a:47:82:d6:a8:40: b4:f4:05:ee:8a:6d:45:a1:99:bd:e5:3e:26:02:6c: af:f4:36:72:3d:74:df:8c:6b:16:7d:56:ae:6e:4b: 0e:ec:97:98:36:a0:02:bb:ee:7d:34:ec:60:98:2c: 25:ec:81:bf:c7:00:54:48:ec:39:97:e8:05:f3:62: 4a:a2:01:79:f9:32:4b:b5:65:ca:02:35:e2:8f:4a: f2:fe:cf:85:90:d3:57:3c:e5:a0:41:19:5e:dc:31: 18:c0:83:43:47:a5:81:32:3b:42:4a:3b:03:42:ec: 4c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:44:D1:49:AE:33:5D:BE:CE:69:C0:98:97:27:A3:E0:63:42:65:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c7:b1:39:21:43:4e:03:54:14:79:c0:51:9e:4b:61:c4:3f: ef:b7:92:6c:6f:5c:e3:54:bc:82:29:db:2a:93:e9:3f:36:9f: c5:5a:ca:18:af:e6:38:ab:8b:75:4c:55:30:78:b0:d7:e3:d7: b2:cb:c6:f1:72:46:3c:83:08:11:34:a3:17:d2:a2:2c:31:f5: 47:ed:5f:c9:6f:87:cc:8c:16:00:37:b0:1a:65:15:07:42:4c: 6b:7a:04:bc:49:2d:f5:06:bc:f0:04:55:2b:0a:0c:27:87:df: 41:d2:d8:b6:a9:93:e6:6b:ba:39:d9:9b:b6:32:95:c3:1d:fd: 3a:86:5e:79:98:2e:5a:55:f9:36:e4:55:0d:f6:be:5b:0d:7c: 22:dd:08:54:6f:25:26:6d:f1:05:3c:b2:4f:cc:c0:ff:b7:9b: d4:44:a4:15:c1:4b:a0:2a:fb:33:26:f9:79:67:84:23:16:6f: 35:da:f3:11:72:69:55:d8:01:a8:11:d6:55:bc:da:8b:cc:75: 1b:ad:9f:1b:61:a5:03:15:21:e6:9b:3d:73:f9:49:a5:8d:e3: 57:f0:59:4e:66:22:37:92:81:33:6b:24:53:3f:52:ac:fe:71: 94:f9:8b:c0:08:d5:27:ad:f0:54:95:60:7f:99:c0:21:64:ef: 67:41:79:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnFB8ECP2gdm5cR2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUwNzAyNDM0MloXDTI1MDgwNTAyNDM0MlowLzEtMCsGA1UEAxMk YThmYjA4NTctMWVkNy00OTZiLTkyYTMtMDMwODA3NGE5MWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA647x/egpNLmgirpC/frktvN6v07xw3omxDAb cUgPGd+Qa/1ucEVpm8vi9FAprybqaE2SlXBI85ois4z2bo80d/xDRN4TL6VGSAzS sOwDt5BLjrT52AnzqcxKIRdDgsPhfTFyL9FDTJpLwBLHcmN/Y9YaTS1ZWSEouDSQ Yc1hdmMRFQAF3wE8XtmtwNVCqqcaR4LWqEC09AXuim1FoZm95T4mAmyv9DZyPXTf jGsWfVaubksO7JeYNqACu+59NOxgmCwl7IG/xwBUSOw5l+gF82JKogF5+TJLtWXK AjXij0ry/s+FkNNXPOWgQRle3DEYwINDR6WBMjtCSjsDQuxMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdE0UmuM12+zmnAmJcno+BjQmVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmNhMzliZGMtMmMxOS0z MzQzLTg1ZDgtZjVmNTk5MGMyNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHHsTkhQ04DVBR5wFGeS2HEP++3kmxvXONUvIIp2yqT6T82n8Vayhiv 5jiri3VMVTB4sNfj17LLxvFyRjyDCBE0oxfSoiwx9UftX8lvh8yMFgA3sBplFQdC TGt6BLxJLfUGvPAEVSsKDCeH30HS2Lapk+ZrujnZm7YylcMd/TqGXnmYLlpV+Tbk VQ32vlsNfCLdCFRvJSZt8QU8sk/MwP+3m9REpBXBS6Aq+zMm+XlnhCMWbzXa8xFy aVXYAagR1lW82ovMdRutnxthpQMVIeabPXP5SaWN41fwWU5mIjeSgTNrJFM/Uqz+ cZT5i8AI1Set8FSVYH+ZwCFk72dBec0= -----END CERTIFICATE-----Generated at Sat May 10 12:31:29 2025 by rpki-client