$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86df3606-9c38-3727-9c8b-256389082390.roa File: 86df3606-9c38-3727-9c8b-256389082390.roa (raw, json) Hash identifier: mNDnUKkPNut+kt+yJYO2QDZyPzaU/izSQi+VX/q40/I= Subject key identifier: 64:E6:82:CC:A4:3A:4A:89:FF:11:D8:7D:33:CB:0F:A6:BD:DF:70:65 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A68263CBCEC510EEF79799500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86df3606-9c38-3727-9c8b-256389082390.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 139190 IP address blocks: 34.1.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:3c:bc:ec:51:0e:ef:79:79:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=5d3fece9-070a-434d-9041-6b27bda82c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:18:25:c6:a8:56:02:25:ba:c9:63:4c:17:fa: d6:ab:af:85:46:36:bb:0f:54:a9:77:5c:96:11:11: d1:37:b9:62:5f:05:2d:49:80:c3:72:cf:7c:36:ef: 51:ab:87:43:e2:20:66:10:68:1a:93:a8:c7:e6:64: 5a:21:69:2b:6d:50:81:4b:92:64:42:7e:4e:0b:4f: 09:87:fb:1f:d2:c3:53:23:83:1f:b7:a2:13:ab:93: 16:db:b1:99:06:3e:bb:15:67:0c:04:46:2e:59:ac: 17:57:66:0d:09:aa:3c:91:80:65:a6:d1:9a:8a:fc: ae:2e:ea:f3:49:98:68:89:63:70:13:30:ff:20:c4: ff:70:7e:74:dd:fe:a2:df:92:ad:b9:bf:cb:6e:b6: 71:58:38:d2:76:47:11:52:bb:af:94:2e:24:83:07: 29:5e:df:36:ef:de:44:ca:a5:a1:38:70:92:2d:e4: 3b:d2:97:ec:9f:3c:e7:45:92:a9:1f:5a:ed:88:fe: de:e3:c2:45:89:b1:86:1e:60:58:99:c7:38:b3:d0: 4c:22:84:f5:5f:f7:da:c3:2a:17:73:01:22:ab:45: c5:2d:52:10:a1:16:1e:b3:e6:a4:4b:20:7e:8a:89: 27:cc:0c:7a:0d:28:55:d2:6c:17:38:67:ca:57:76: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E6:82:CC:A4:3A:4A:89:FF:11:D8:7D:33:CB:0F:A6:BD:DF:70:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86df3606-9c38-3727-9c8b-256389082390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0a:4c:70:eb:ef:b9:cd:43:50:b1:0e:c9:5f:1c:65:35:e6: 59:63:43:ae:ba:6b:97:6b:64:64:1b:c9:fe:91:66:ad:2b:d7: e7:22:92:07:69:c5:38:cf:11:52:74:77:1f:06:8d:45:38:81: e9:a9:2a:08:a5:1e:ef:83:96:ff:f3:94:f0:31:90:b3:8f:c7: ba:d6:cb:1a:58:b5:d1:5c:af:b1:93:ab:b1:6a:a0:07:66:2c: 12:d6:78:ec:a5:2b:da:9e:b2:f9:c3:7d:35:9b:77:76:a1:a9: 38:86:76:53:1e:da:bf:d0:5d:d3:92:0d:2b:30:be:78:b6:31: 7d:e6:bc:8a:6f:3e:66:fc:dd:2d:76:1e:03:ce:96:35:49:d6: ac:dd:93:bd:f5:88:cc:62:e8:2c:ff:25:7b:b6:c5:fa:a6:20: c5:b1:3a:88:04:22:0f:ca:77:c8:39:04:2f:b5:55:fe:5c:b4: 34:20:9a:1f:5e:49:c7:cb:5f:1a:e7:72:e2:fe:77:7b:20:ff: a8:37:6b:a7:1b:a3:4e:bd:61:2e:47:c6:51:e1:37:65:63:be: cb:f8:54:72:34:12:dc:40:64:c4:21:60:f8:e6:78:ed:8e:d1: d2:8c:a8:8b:45:fc:b3:36:5f:e6:f9:d2:cf:62:2d:41:d7:12: 01:4a:d4:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjy87FEO73l5lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NWQzZmVjZTktMDcwYS00MzRkLTkwNDEtNmIyN2JkYTgyYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBglxqhWAiW6yWNMF/rWq6+FRja7D1Spd1yW ERHRN7liXwUtSYDDcs98Nu9Rq4dD4iBmEGgak6jH5mRaIWkrbVCBS5JkQn5OC08J h/sf0sNTI4Mft6ITq5MW27GZBj67FWcMBEYuWawXV2YNCao8kYBlptGaivyuLurz SZhoiWNwEzD/IMT/cH503f6i35Ktub/LbrZxWDjSdkcRUruvlC4kgwcpXt82795E yqWhOHCSLeQ70pfsnzznRZKpH1rtiP7e48JFibGGHmBYmcc4s9BMIoT1X/fawyoX cwEiq0XFLVIQoRYes+akSyB+ioknzAx6DShV0mwXOGfKV3bcpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTmgsykOkqJ/xHYfTPLD6a933BlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZkZjM2MDYtOWMzOC0z NzI3LTljOGItMjU2Mzg5MDgyMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYKTHDr77nNQ1CxDslfHGU15lljQ666a5drZGQbyf6RZq0r1+cikgdp xTjPEVJ0dx8GjUU4gempKgilHu+Dlv/zlPAxkLOPx7rWyxpYtdFcr7GTq7FqoAdm LBLWeOylK9qesvnDfTWbd3ahqTiGdlMe2r/QXdOSDSswvni2MX3mvIpvPmb83S12 HgPOljVJ1qzdk731iMxi6Cz/JXu2xfqmIMWxOogEIg/Kd8g5BC+1Vf5ctDQgmh9e ScfLXxrncuL+d3sg/6g3a6cbo069YS5HxlHhN2Vjvsv4VHI0EtxAZMQhYPjmeO2O 0dKMqItF/LM2X+b50s9iLUHXEgFK1G0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:22 2025 by rpki-client