$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b544b1-ec45-38d5-8b02-be2bdf6ec613.roa File: b3b544b1-ec45-38d5-8b02-be2bdf6ec613.roa (raw, json) Hash identifier: +0Hhz+ghpOYslKJGlmSJnaLGq0cvfNKCJ+giabeZNWE= Subject key identifier: 1E:F4:8D:57:66:40:B2:7C:2D:47:D0:ED:89:82:9E:E3:D9:0F:A9:8E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE452E60FDE001AD9C320 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b544b1-ec45-38d5-8b02-be2bdf6ec613.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.170.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e4:52:e6:0f:de:00:1a:d9:c3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=7e01e37c-54ae-45ed-83c4-35e2dd764b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e2:95:c0:b7:b2:1a:4b:d5:8c:fc:12:f9:1f: 88:d2:eb:ed:57:68:9b:bc:5a:d1:c3:4b:e0:e0:9a: 76:8a:3a:bb:a3:22:55:ef:11:57:c9:da:22:30:61: 2e:82:75:4d:90:ea:25:9f:c9:1f:47:d5:b8:06:26: d8:93:f4:ed:44:f2:8d:f5:de:64:e7:78:32:c2:b0: c1:80:26:9b:7d:24:93:90:9f:69:7b:60:51:65:c2: 4a:a5:27:e4:66:01:b7:b6:4e:79:c5:1c:79:86:2a: d6:80:df:67:e6:61:92:7b:3b:6a:54:64:0a:0c:87: 9b:df:7a:c8:32:a2:74:28:f6:58:c8:f2:66:2f:61: cc:8e:61:b0:9f:4f:aa:d8:20:61:02:b5:07:37:19: 2f:97:cf:f3:c5:a7:21:fb:d9:c9:21:a3:45:8a:86: 75:97:c2:7a:97:63:f6:2c:91:69:e6:97:5d:64:63: e2:96:2d:29:92:7f:61:e5:d3:9c:b0:f6:18:9c:18: c9:aa:61:4e:bf:1c:3d:14:58:3c:13:12:4d:9f:c7: 06:9a:2f:57:8a:a1:39:f5:ce:e2:f9:28:0c:7c:f9: 7b:6f:37:47:34:2c:e1:86:ce:48:8d:5e:db:85:98: 9d:97:7c:c5:4a:54:47:9b:20:b1:bf:61:14:8d:e9: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:8D:57:66:40:B2:7C:2D:47:D0:ED:89:82:9E:E3:D9:0F:A9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b544b1-ec45-38d5-8b02-be2bdf6ec613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.170.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:33:d9:5f:6e:1f:d3:99:c8:67:d1:c4:2d:cc:61:75:83:0b: 80:8d:5e:d8:45:6f:56:f3:74:06:e9:b9:72:19:41:0f:c6:8d: e7:b1:5c:ab:b7:08:ae:50:4d:ac:70:41:7a:d6:49:a0:4d:c9: 58:a8:e3:9c:50:6c:09:e3:ca:1d:31:49:9b:f9:24:5d:52:df: 2b:5c:40:ec:b4:be:2a:a7:3e:52:f0:fd:1e:21:44:9a:6b:54: 3f:49:d9:09:19:39:ad:07:3e:9a:40:43:4b:8c:48:66:4c:46: 64:13:bb:e8:fe:ef:45:85:a4:6e:8d:42:ef:e8:06:a8:a4:1a: 00:7b:a3:d0:d9:a6:9f:db:ff:27:74:02:fb:2e:86:98:19:f6: 0c:8a:f4:ed:5e:fe:33:fa:c2:e8:c7:84:58:c6:da:bc:67:99: fb:0e:7d:be:d9:90:cf:dd:8d:63:da:e7:8a:75:d4:08:d7:cb: 16:ba:30:9f:3f:f5:13:42:76:b2:cd:b8:f3:12:ba:13:cb:0c: 1b:7b:3c:26:27:36:88:2e:d8:f1:f3:65:f3:c9:1f:49:25:82: 5e:6f:d9:1a:47:aa:1a:4c:13:fa:f3:a4:29:88:08:35:e1:69: 4a:88:ee:86:fc:1a:b1:ec:58:94:1a:95:b3:db:06:ea:06:61: 8e:2f:32:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+RS5g/eABrZwyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk N2UwMWUzN2MtNTRhZS00NWVkLTgzYzQtMzVlMmRkNzY0YjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOKVwLeyGkvVjPwS+R+I0uvtV2ibvFrRw0vg 4Jp2ijq7oyJV7xFXydoiMGEugnVNkOoln8kfR9W4BibYk/TtRPKN9d5k53gywrDB gCabfSSTkJ9pe2BRZcJKpSfkZgG3tk55xRx5hirWgN9n5mGSeztqVGQKDIeb33rI MqJ0KPZYyPJmL2HMjmGwn0+q2CBhArUHNxkvl8/zxach+9nJIaNFioZ1l8J6l2P2 LJFp5pddZGPili0pkn9h5dOcsPYYnBjJqmFOvxw9FFg8ExJNn8cGmi9XiqE59c7i +SgMfPl7bzdHNCzhhs5IjV7bhZidl3zFSlRHmyCxv2EUjem6CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB70jVdmQLJ8LUfQ7YmCnuPZD6mOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjNiNTQ0YjEtZWM0NS0z OGQ1LThiMDItYmUyYmRmNmVjNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcz2V9uH9OZyGfRxC3MYXWDC4CNXthFb1bzdAbpuXIZQQ/GjeexXKu3 CK5QTaxwQXrWSaBNyVio45xQbAnjyh0xSZv5JF1S3ytcQOy0viqnPlLw/R4hRJpr VD9J2QkZOa0HPppAQ0uMSGZMRmQTu+j+70WFpG6NQu/oBqikGgB7o9DZpp/b/yd0 AvsuhpgZ9gyK9O1e/jP6wujHhFjG2rxnmfsOfb7ZkM/djWPa54p11AjXyxa6MJ8/ 9RNCdrLNuPMSuhPLDBt7PCYnNogu2PHzZfPJH0klgl5v2RpHqhpME/rzpCmICDXh aUqI7ob8GrHsWJQalbPbBuoGYY4vMs8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:05 2025 by rpki-client