$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17206db4-cacd-30d8-9030-e85396583467.roa File: 17206db4-cacd-30d8-9030-e85396583467.roa (raw, json) Hash identifier: ptz19QmKES4VZbCM0zA8cGnHAx2omwL+MhsSmstW14o= Subject key identifier: 51:06:E4:74:F1:35:F9:DD:00:D9:29:0E:2F:69:12:8A:13:2A:D2:30 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD385DE0A0F99C620F580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17206db4-cacd-30d8-9030-e85396583467.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.3.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d3:85:de:0a:0f:99:c6:20:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1f0fa0e2-b8b4-4370-be9e-c1826df4de76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:e5:a8:ff:94:da:c1:9a:b0:61:5b:44:f4: 30:75:89:29:08:10:80:25:54:25:03:36:15:04:9b: b9:b0:5c:6c:43:e7:c6:01:cf:09:c5:13:47:d5:73: c7:d2:09:c9:58:c9:cb:92:3e:72:99:e8:ee:84:37: 26:88:5f:aa:0d:c3:c7:11:2b:07:64:7a:8b:21:99: e7:3a:98:fb:bf:1e:cf:f3:61:cc:c8:b9:01:82:c2: bd:8a:33:00:03:4c:c6:60:7d:49:80:af:70:a3:1a: 97:f7:b9:87:0f:97:85:64:7b:00:8e:c3:32:a4:d9: 92:6d:f4:a9:58:3c:ed:a4:20:b5:70:2c:ad:0e:cb: e1:20:24:7f:b5:fa:41:87:18:e3:99:59:fa:4e:83: 00:ed:90:83:77:71:c4:87:13:65:ad:bf:76:21:f2: fb:ab:db:e6:d9:cc:56:26:93:67:2d:50:c2:ec:be: 39:4e:2e:de:03:da:e8:6e:bc:9a:42:0f:39:d7:95: 32:1c:e5:97:9a:d5:d8:4e:b8:86:f4:9b:0a:32:82: 80:0a:2c:c9:b0:ee:a0:97:bd:9e:a3:2e:23:57:86: 01:2a:bb:88:80:7a:c2:89:ad:0c:05:7e:a0:cc:75: 7b:b2:05:2c:b0:3b:57:23:4c:b9:fc:22:30:4c:83: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:06:E4:74:F1:35:F9:DD:00:D9:29:0E:2F:69:12:8A:13:2A:D2:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17206db4-cacd-30d8-9030-e85396583467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5b:88:9e:f6:1d:66:0b:18:44:2b:a8:78:c0:77:8c:ca:ce: a3:b8:3f:0a:2d:fa:db:27:0f:04:04:d7:c7:08:ea:86:0b:9e: 5b:16:cb:7c:11:79:fc:f3:f4:a2:88:87:e4:71:04:68:00:06: c3:8e:fe:cd:23:2a:1f:16:45:53:d2:cc:ad:db:b7:e0:4e:1b: 5a:98:2f:8d:32:94:80:a4:0e:af:e4:c0:20:15:3d:41:6c:94: fb:59:9e:70:2c:69:35:d2:c1:70:53:c4:6b:25:2c:f6:d6:01: 08:32:9e:3f:0a:ac:48:e3:76:25:a5:d3:e1:23:95:b9:1c:a9: 66:89:d4:6c:8c:4a:56:8b:3b:0c:07:9d:7c:6c:27:91:94:80: a3:b3:7e:20:25:85:6b:4d:01:2f:3d:ec:63:44:6d:93:cd:bf: dd:2d:3f:6a:4a:3a:a8:f3:40:cb:1f:01:e2:28:f8:6e:ba:83: f7:7b:89:be:98:4c:f2:96:2d:e8:e7:6b:bf:31:7a:2f:df:da: 14:34:b4:68:02:d1:e7:4c:d7:81:c6:c5:6b:10:25:ee:33:5a: de:9f:5a:2c:ff:c6:ab:a3:70:eb:a3:df:99:be:51:27:67:50: a3:16:c1:d4:6d:eb:58:0c:ce:50:0e:63:e4:e6:ef:40:a6:53: 13:40:cc:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29OF3goPmcYg9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MWYwZmEwZTItYjhiNC00MzcwLWJlOWUtYzE4MjZkZjRkZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuTlqP+U2sGasGFbRPQwdYkpCBCAJVQlAzYV BJu5sFxsQ+fGAc8JxRNH1XPH0gnJWMnLkj5ymejuhDcmiF+qDcPHESsHZHqLIZnn Opj7vx7P82HMyLkBgsK9ijMAA0zGYH1JgK9woxqX97mHD5eFZHsAjsMypNmSbfSp WDztpCC1cCytDsvhICR/tfpBhxjjmVn6ToMA7ZCDd3HEhxNlrb92IfL7q9vm2cxW JpNnLVDC7L45Ti7eA9robryaQg8515UyHOWXmtXYTriG9JsKMoKACizJsO6gl72e oy4jV4YBKruIgHrCia0MBX6gzHV7sgUssDtXI0y5/CIwTIPveQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEG5HTxNfndANkpDi9pEooTKtIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTcyMDZkYjQtY2FjZC0z MGQ4LTkwMzAtZTg1Mzk2NTgzNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVbiJ72HWYLGEQrqHjAd4zKzqO4Pwot+tsnDwQE18cI6oYLnlsWy3wR efzz9KKIh+RxBGgABsOO/s0jKh8WRVPSzK3bt+BOG1qYL40ylICkDq/kwCAVPUFs lPtZnnAsaTXSwXBTxGslLPbWAQgynj8KrEjjdiWl0+EjlbkcqWaJ1GyMSlaLOwwH nXxsJ5GUgKOzfiAlhWtNAS897GNEbZPNv90tP2pKOqjzQMsfAeIo+G66g/d7ib6Y TPKWLejna78xei/f2hQ0tGgC0edM14HGxWsQJe4zWt6fWiz/xqujcOuj35m+USdn UKMWwdRt61gMzlAOY+Tm70CmUxNAzMg= -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:37 2025 by rpki-client