$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba543447-8c4d-3150-9872-2f0e3ae1b000.roa File: ba543447-8c4d-3150-9872-2f0e3ae1b000.roa (raw, json) Hash identifier: 8M3cHJcspSI08WBO626kJEOrzsTa2pOkaxPGiR9O/nk= Subject key identifier: A4:59:94:CF:AE:FC:07:00:FB:E7:FB:98:0F:C2:3F:A6:53:0F:15:91 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84123913B2FF5631166C4E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba543447-8c4d-3150-9872-2f0e3ae1b000.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 19527 IP address blocks: 34.1.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:39:13:b2:ff:56:31:16:6c:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=965205dd-e1b0-4424-8495-a9a98de443c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:03:2b:33:ba:20:73:f7:56:b6:9c:f6:43: c7:a2:51:34:de:94:9a:dc:f8:af:f9:7c:0a:26:71: a9:bc:66:c6:da:7c:15:74:a2:ee:cf:f2:90:64:74: 6d:20:db:40:63:71:78:26:1a:06:2d:e3:46:06:ad: bc:35:54:b0:79:50:b3:d8:a7:42:4d:b2:06:3e:2c: e5:b2:f3:05:37:f8:b8:9e:b3:75:de:40:94:f8:a7: 54:79:1d:a6:d0:ed:27:88:57:60:5a:22:78:76:cc: af:cd:c6:45:ab:4f:62:b7:b0:d3:16:62:e2:a0:7c: 74:18:ec:8e:9d:42:db:b2:64:5f:5f:6d:09:4f:b8: 2b:e6:c6:70:2c:3d:1a:55:2f:3e:ea:6a:36:f4:a9: 27:b1:e2:c6:3a:b8:bb:77:07:f6:38:cd:ea:7d:42: 7b:60:25:f5:15:23:1b:f5:f6:54:85:73:3b:50:16: 9a:83:b0:0a:da:01:e4:45:03:db:23:ed:85:d4:d6: 3d:27:e8:c8:6e:d8:12:f5:98:45:ad:40:24:8a:2e: 46:0b:22:22:5f:7c:a4:67:4d:41:90:aa:2b:e0:94: 5f:7c:02:50:94:5c:eb:4b:83:a9:f4:1f:da:30:1b: 99:bb:8f:d1:35:8d:92:9e:de:c9:87:e9:11:31:11: 3c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:59:94:CF:AE:FC:07:00:FB:E7:FB:98:0F:C2:3F:A6:53:0F:15:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba543447-8c4d-3150-9872-2f0e3ae1b000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e3:73:db:86:b2:3e:46:6c:8a:24:95:ca:c0:f1:1b:f8:de: 9d:1c:9a:46:00:de:06:2b:d9:d3:91:67:3c:4a:50:69:6d:86: 22:f5:6b:40:65:d0:33:a7:b0:f0:b4:1b:a8:80:83:da:ba:37: 15:82:fc:2f:fc:6c:e0:8d:78:81:8c:26:2c:69:9f:e8:07:8b: 14:9d:58:78:ec:54:e0:c2:18:4e:a5:e3:db:43:90:62:c3:9d: 85:b6:66:71:ae:ee:b1:ee:89:a1:dd:fd:54:f7:a0:7f:cc:97: be:16:24:54:5f:23:e3:77:24:e6:15:70:63:d9:ae:e8:a3:65: 58:72:08:6a:c5:5e:53:e8:9e:27:94:98:03:ce:58:23:ec:4a: b1:57:f4:3c:69:08:6e:64:0e:e8:c5:38:d2:66:e3:88:00:40: 11:ae:33:26:66:95:77:4e:0f:c7:aa:75:75:02:c9:79:65:08: cc:2d:9f:d0:c3:ad:e5:c8:4a:12:bd:73:d9:f0:1d:7f:60:89: f0:4b:7e:de:02:e8:df:05:d8:22:02:8c:29:14:fc:a3:0b:7f: b3:33:ac:97:dd:58:49:12:f4:16:9c:d4:d2:93:c0:26:41:46: 78:19:43:1a:07:5b:7c:3e:61:c9:15:b3:35:05:8a:2f:ad:62: b1:ad:cb:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjkTsv9WMRZsTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTY1MjA1ZGQtZTFiMC00NDI0LTg0OTUtYTlhOThkZTQ0M2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma4DKzO6IHP3Vrac9kPHolE03pSa3Piv+XwK JnGpvGbG2nwVdKLuz/KQZHRtINtAY3F4JhoGLeNGBq28NVSweVCz2KdCTbIGPizl svMFN/i4nrN13kCU+KdUeR2m0O0niFdgWiJ4dsyvzcZFq09it7DTFmLioHx0GOyO nULbsmRfX20JT7gr5sZwLD0aVS8+6mo29KknseLGOri7dwf2OM3qfUJ7YCX1FSMb 9fZUhXM7UBaag7AK2gHkRQPbI+2F1NY9J+jIbtgS9ZhFrUAkii5GCyIiX3ykZ01B kKor4JRffAJQlFzrS4Op9B/aMBuZu4/RNY2Snt7Jh+kRMRE8/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRZlM+u/AcA++f7mA/CP6ZTDxWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmE1NDM0NDctOGM0ZC0z MTUwLTk4NzItMmYwZTNhZTFiMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXjc9uGsj5GbIoklcrA8Rv43p0cmkYA3gYr2dORZzxKUGlthiL1a0Bl 0DOnsPC0G6iAg9q6NxWC/C/8bOCNeIGMJixpn+gHixSdWHjsVODCGE6l49tDkGLD nYW2ZnGu7rHuiaHd/VT3oH/Ml74WJFRfI+N3JOYVcGPZruijZVhyCGrFXlPonieU mAPOWCPsSrFX9DxpCG5kDujFONJm44gAQBGuMyZmlXdOD8eqdXUCyXllCMwtn9DD reXIShK9c9nwHX9gifBLft4C6N8F2CICjCkU/KMLf7MzrJfdWEkS9Bac1NKTwCZB RngZQxoHW3w+YckVszUFii+tYrGty5E= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:59 2025 by rpki-client