$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c1eb98c-06f7-30cf-a6a8-5e7df79cc751.roa File: 7c1eb98c-06f7-30cf-a6a8-5e7df79cc751.roa (raw, json) Hash identifier: tZnxp0OOg5BBk2Jj/MHCeYL7ctvIQhNQOLqyn4TmyXs= Subject key identifier: BC:58:7E:21:F6:95:93:71:CD:B3:B1:71:C5:6A:04:09:E6:22:A2:7B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84118C63E9C0392EC779D380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c1eb98c-06f7-30cf-a6a8-5e7df79cc751.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 34.1.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8c:63:e9:c0:39:2e:c7:79:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f8fbdbe4-f069-45d6-ae3d-5c7d2667a3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:28:e5:a0:10:48:bd:7a:8b:ca:99:63:5b: bb:e3:9a:da:e8:f0:ff:44:80:6f:e5:19:a6:c4:46: 17:b2:b5:85:03:ea:b3:90:ab:4f:28:23:a8:84:8f: 9e:9a:6b:da:2d:41:99:1f:77:44:44:7c:3d:7d:b7: a4:b9:82:42:25:f0:78:74:bf:4c:2b:a1:18:a6:79: 1e:c7:4b:27:96:5a:0a:a3:49:c8:67:bf:b8:3d:77: d1:81:00:0a:ff:93:1e:cc:86:67:88:7e:5d:0f:4f: d4:4e:33:40:c0:07:0b:aa:3d:47:11:4b:4c:13:d7: 99:33:e6:fd:1e:9b:d6:49:92:4a:46:b4:b2:07:a4: 2c:6f:f5:97:d0:7a:76:45:d4:47:39:b7:2b:74:00: 41:a9:8a:21:4b:07:8f:8c:76:c3:b5:82:ff:e6:46: c3:1c:be:9a:64:e4:1c:b5:26:20:7e:f3:81:f4:6b: bd:32:34:25:46:e4:33:d3:f6:8b:4f:ef:b4:c1:7b: f5:b9:97:1e:55:18:b4:c3:8e:31:8b:36:9d:ae:aa: 1c:8a:96:4f:90:b0:45:83:c4:b0:dd:5b:98:6c:13: fd:3f:43:bd:c1:c9:4b:30:fb:23:b2:7f:6f:b1:42: 4a:e1:1a:cb:95:c6:4a:e7:bb:3e:d7:0a:7c:8c:c0: 10:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:58:7E:21:F6:95:93:71:CD:B3:B1:71:C5:6A:04:09:E6:22:A2:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c1eb98c-06f7-30cf-a6a8-5e7df79cc751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:32:b5:f7:fb:02:68:44:39:7b:f7:48:e1:e7:aa:87:27:69: 03:e8:c5:f3:15:ee:04:60:df:bb:df:28:45:4f:d6:1e:6c:89: e1:8b:1a:c3:d1:76:05:1a:e9:ae:c7:86:c2:d3:d3:9c:8c:80: c6:84:6d:8a:32:9a:ac:fa:bf:cd:58:df:28:47:ec:0e:47:ec: a4:7a:f2:2f:00:b6:9f:ee:9b:84:50:da:f4:5a:96:3d:f0:87: 9c:f8:3d:59:a3:87:2d:f3:84:23:07:25:b0:75:4a:a8:31:b6: 28:f7:24:6a:b1:d3:4b:2b:30:e4:5c:4e:e8:53:8c:1a:10:00: a0:42:2b:94:e2:5b:36:54:27:fb:99:a9:01:77:a5:bf:32:c0: b0:33:af:e9:89:93:e3:b4:aa:c8:00:22:27:37:3a:f5:ce:4c: a6:ef:58:56:5c:2b:6f:76:a1:6f:4a:d9:2a:eb:24:48:73:f9: ee:a5:3e:40:d7:ce:8d:7f:7f:c3:d6:94:b0:24:c3:93:29:a3: ac:c6:b3:1d:67:de:56:02:11:34:b5:17:66:e3:04:12:b4:65: 62:a0:83:92:36:93:67:04:1a:86:4c:46:ba:40:b9:0a:68:01: 69:b9:92:f0:13:8a:07:1d:0b:b3:b2:6d:bd:22:8b:ea:5c:ac: 35:f2:09:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYxj6cA5Lsd504AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjhmYmRiZTQtZjA2OS00NWQ2LWFlM2QtNWM3ZDI2NjdhM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuoo5aAQSL16i8qZY1u745ra6PD/RIBv5Rmm xEYXsrWFA+qzkKtPKCOohI+emmvaLUGZH3dERHw9fbekuYJCJfB4dL9MK6EYpnke x0snlloKo0nIZ7+4PXfRgQAK/5MezIZniH5dD0/UTjNAwAcLqj1HEUtME9eZM+b9 HpvWSZJKRrSyB6Qsb/WX0Hp2RdRHObcrdABBqYohSwePjHbDtYL/5kbDHL6aZOQc tSYgfvOB9Gu9MjQlRuQz0/aLT++0wXv1uZceVRi0w44xizadrqocipZPkLBFg8Sw 3VuYbBP9P0O9wclLMPsjsn9vsUJK4RrLlcZK57s+1wp8jMAQOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxYfiH2lZNxzbOxccVqBAnmIqJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2MxZWI5OGMtMDZmNy0z MGNmLWE2YTgtNWU3ZGY3OWNjNzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMytff7AmhEOXv3SOHnqocnaQPoxfMV7gRg37vfKEVP1h5sieGLGsPR dgUa6a7HhsLT05yMgMaEbYoymqz6v81Y3yhH7A5H7KR68i8Atp/um4RQ2vRalj3w h5z4PVmjhy3zhCMHJbB1Sqgxtij3JGqx00srMORcTuhTjBoQAKBCK5TiWzZUJ/uZ qQF3pb8ywLAzr+mJk+O0qsgAIic3OvXOTKbvWFZcK292oW9K2SrrJEhz+e6lPkDX zo1/f8PWlLAkw5Mpo6zGsx1n3lYCETS1F2bjBBK0ZWKgg5I2k2cEGoZMRrpAuQpo AWm5kvATigcdC7Oybb0ii+pcrDXyCYQ= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:15 2025 by rpki-client