$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f248fd6-4a47-37f2-8948-8da90d25ea82.roa File: 7f248fd6-4a47-37f2-8948-8da90d25ea82.roa (raw, json) Hash identifier: gu9K8yVr4f/fgMpUCaqDQiy3O31i6NywkDFB58kuw1g= Subject key identifier: 51:19:48:45:6C:CA:C9:D7:EB:43:91:73:84:EA:1C:49:AE:1E:80:A4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841227A6C4D2C5057136C680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f248fd6-4a47-37f2-8948-8da90d25ea82.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 34.1.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:27:a6:c4:d2:c5:05:71:36:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9bc21742-e9ae-443e-be32-22faef84cd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:89:73:12:03:6a:27:6c:56:77:0f:30:a0: bc:3f:c8:a8:7d:02:3e:44:21:0e:a7:b3:cc:aa:43: dd:fe:db:3e:34:6f:d4:b5:58:bf:a4:3d:2e:a6:cb: c5:d1:63:ff:20:02:ba:36:c2:3b:78:d0:6a:1d:a5: 53:36:ed:03:7b:6f:58:31:70:e5:4a:6f:10:3b:64: 4f:8c:ed:22:d7:4f:5a:a6:8b:e5:51:ca:cb:78:3c: f2:58:5f:5b:82:59:99:e4:e0:6a:3e:5d:a3:8c:1e: aa:48:44:3a:1c:45:be:99:04:0f:c0:a7:fd:88:ba: af:bc:f2:63:bd:e6:1a:72:7a:5a:5e:ae:32:44:fc: 4e:08:2e:64:c7:1c:da:60:de:df:81:b9:d4:17:42: ad:e9:51:fd:3b:4a:48:e4:9e:bf:16:c3:3c:73:69: fc:fb:f0:2b:e1:f4:3d:5d:fd:ee:56:bc:28:bc:eb: 1b:a9:3f:3b:3a:7a:3d:4e:d4:ad:9d:f6:16:ac:50: 1e:bd:85:d5:62:3a:5c:7a:41:77:9f:38:78:4f:59: 55:ee:b3:f3:80:78:26:7f:10:6e:5f:1a:5e:4c:5b: 4d:0e:6f:92:cb:f6:b9:db:24:67:f3:6a:4b:2b:94: 78:a6:2a:31:f1:9d:a3:bb:31:de:b1:bd:92:77:a6: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:48:45:6C:CA:C9:D7:EB:43:91:73:84:EA:1C:49:AE:1E:80:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f248fd6-4a47-37f2-8948-8da90d25ea82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:da:ea:a2:99:29:6c:f8:83:30:81:3b:9e:99:e1:47:b5:7f: a2:fa:79:f0:bb:5f:3d:e4:24:e2:1a:85:4b:66:84:28:42:51: dd:09:87:bc:25:08:ba:83:8a:d7:25:de:a1:5a:07:93:83:12: 1b:44:63:52:df:6e:ce:dc:93:7f:6c:2f:55:c7:a8:2c:ac:41: 9f:56:bc:7c:7e:b1:e2:4d:b9:02:48:0f:2f:67:2e:59:9d:b1: 9c:89:d5:88:96:00:7c:fa:e7:c9:07:e9:c4:14:13:36:15:c4: 3e:40:06:a6:93:48:bf:fc:9a:77:7b:08:a7:10:a1:3a:e4:52: 79:ee:db:66:d6:c9:59:d8:14:9b:a1:61:2a:36:0c:e4:40:68: 85:b2:5b:98:a3:ce:cd:3d:e5:2b:83:46:27:a7:5b:df:9d:f5: b7:42:9f:55:2c:6d:46:bb:5f:83:85:da:0e:a9:50:da:a6:ba: ba:39:46:10:82:54:a9:cc:60:e4:0c:28:06:74:1a:c5:6a:9f: 6c:68:8b:d4:2a:e5:f9:d7:26:60:a3:83:7c:91:a7:8f:a2:35: e4:26:4f:f6:ba:6b:be:bb:7d:fc:d8:e2:03:bf:10:08:06:82: c2:cf:6c:9c:eb:f2:e2:a6:6c:fc:20:fa:5d:1f:cc:3b:31:71: d7:b8:68:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiemxNLFBXE2xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OWJjMjE3NDItZTlhZS00NDNlLWJlMzItMjJmYWVmODRjZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4WJcxIDaidsVncPMKC8P8iofQI+RCEOp7PM qkPd/ts+NG/UtVi/pD0upsvF0WP/IAK6NsI7eNBqHaVTNu0De29YMXDlSm8QO2RP jO0i109apovlUcrLeDzyWF9bglmZ5OBqPl2jjB6qSEQ6HEW+mQQPwKf9iLqvvPJj veYacnpaXq4yRPxOCC5kxxzaYN7fgbnUF0Kt6VH9O0pI5J6/FsM8c2n8+/Ar4fQ9 Xf3uVrwovOsbqT87Ono9TtStnfYWrFAevYXVYjpcekF3nzh4T1lV7rPzgHgmfxBu XxpeTFtNDm+Sy/a52yRn82pLK5R4piox8Z2juzHesb2Sd6ZvJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEZSEVsysnX60ORc4TqHEmuHoCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2YyNDhmZDYtNGE0Ny0z N2YyLTg5NDgtOGRhOTBkMjVlYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGra6qKZKWz4gzCBO56Z4Ue1f6L6efC7Xz3kJOIahUtmhChCUd0Jh7wl CLqDitcl3qFaB5ODEhtEY1Lfbs7ck39sL1XHqCysQZ9WvHx+seJNuQJIDy9nLlmd sZyJ1YiWAHz658kH6cQUEzYVxD5ABqaTSL/8mnd7CKcQoTrkUnnu22bWyVnYFJuh YSo2DORAaIWyW5ijzs095SuDRienW9+d9bdCn1UsbUa7X4OF2g6pUNqmuro5RhCC VKnMYOQMKAZ0GsVqn2xoi9Qq5fnXJmCjg3yRp4+iNeQmT/a6a767ffzY4gO/EAgG gsLPbJzr8uKmbPwg+l0fzDsxcde4aLc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:20 2025 by rpki-client