$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb3fc26a-fcca-3494-ae6a-328a5cce2b3a.roa File: bb3fc26a-fcca-3494-ae6a-328a5cce2b3a.roa (raw, json) Hash identifier: 6qKZCR7J8SdukKyl+tDwHMAmuR9ZKdzlQP5VtD4Dx+E= Subject key identifier: 9C:33:B2:94:3D:05:74:22:5F:D0:01:2B:7F:D4:A3:C9:18:FC:18:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB407C3F8A91BBBB6FC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb3fc26a-fcca-3494-ae6a-328a5cce2b3a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 34.98.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b4:07:c3:f8:a9:1b:bb:b6:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=02cd9f1a-8d03-4007-ad84-2d61ff4cf703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bc:d6:29:e8:70:bc:c5:d8:00:9c:a2:7d:60: 89:bc:c7:47:22:b2:30:3a:2f:9a:2f:e8:28:8f:a5: 41:8e:dd:da:ca:65:db:50:7f:61:6b:aa:5c:6b:84: a4:9f:52:01:d7:ae:c4:88:c4:b3:1f:af:05:c5:9a: 40:07:52:71:b8:ea:e9:65:8b:77:db:51:7f:b7:8b: bd:2d:1b:ca:d4:d6:c6:ee:3f:46:05:6c:21:27:69: 15:0b:73:c7:85:aa:03:2d:a2:77:ba:7a:ba:99:fa: 50:d3:5a:c2:04:2a:3b:37:31:96:3c:d7:d0:c4:09: 45:a6:49:f0:6e:e9:b5:80:0f:3f:67:b8:5f:c4:f0: e4:86:f3:6e:fb:25:54:32:b8:ed:72:d4:bb:cb:ef: ce:f7:67:f6:48:7c:55:5a:c8:77:30:d6:d5:12:1b: 2e:13:5c:4c:ae:a0:f1:7f:67:6a:e2:ff:39:8e:14: 22:b8:0d:86:0c:b7:93:33:f0:a9:28:e8:1c:b4:0b: 80:cb:c3:63:1b:64:8e:f3:af:29:ac:f9:e2:f4:85: 75:14:37:6d:33:12:c6:ab:af:0e:55:4f:71:23:f1: 9c:5a:da:cf:cd:4b:6e:aa:a5:f5:4b:3a:ec:3b:83: ea:71:22:f2:1d:77:39:e7:3e:f7:36:2c:a3:fc:cf: b8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:33:B2:94:3D:05:74:22:5F:D0:01:2B:7F:D4:A3:C9:18:FC:18:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb3fc26a-fcca-3494-ae6a-328a5cce2b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:14:f5:72:03:85:1e:87:b8:87:ea:54:a8:b6:5d:50:f7:52: bb:7a:13:a3:37:c6:6b:bf:50:a5:5a:29:55:d2:5c:90:aa:3d: f1:77:67:e6:f7:6f:1f:6b:14:2b:a0:26:84:01:af:f7:8f:4a: a0:61:47:3d:cb:8d:0d:e3:ad:41:5e:74:41:13:c0:f5:83:08: d1:dc:59:93:9c:53:09:a3:df:75:15:ce:50:35:5d:e3:0e:ce: dc:d3:ed:90:48:41:b3:70:ca:93:11:35:49:88:b6:09:b2:9f: f3:8c:1c:39:2a:ef:62:e8:ee:d6:a8:a9:35:27:13:ab:8c:28: 2c:f4:0f:e5:5c:73:8f:db:fb:4f:d0:98:5d:e2:83:e9:2a:ee: cb:93:1d:02:c7:ed:37:2b:46:7e:91:e0:c2:ab:c3:6c:d2:93: 14:92:0a:70:8e:63:3d:91:62:45:67:b5:ce:8e:cd:7e:e9:25: 18:5f:c9:d5:76:47:77:98:8e:c4:6f:50:51:55:3e:a5:04:8c: 2f:56:3f:69:49:c2:c1:e8:c8:8d:ec:d0:65:9f:30:01:3e:2a: e3:e7:93:32:30:da:ac:82:64:f2:d4:0d:f4:de:85:ae:69:66: e7:c9:1a:70:29:b0:64:ce:84:33:09:b7:84:db:c7:37:22:19: d1:a2:a9:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27QHw/ipG7u2/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MDJjZDlmMWEtOGQwMy00MDA3LWFkODQtMmQ2MWZmNGNmNzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7zWKehwvMXYAJyifWCJvMdHIrIwOi+aL+go j6VBjt3aymXbUH9ha6pca4Skn1IB167EiMSzH68FxZpAB1JxuOrpZYt321F/t4u9 LRvK1NbG7j9GBWwhJ2kVC3PHhaoDLaJ3unq6mfpQ01rCBCo7NzGWPNfQxAlFpknw bum1gA8/Z7hfxPDkhvNu+yVUMrjtctS7y+/O92f2SHxVWsh3MNbVEhsuE1xMrqDx f2dq4v85jhQiuA2GDLeTM/CpKOgctAuAy8NjG2SO868prPni9IV1FDdtMxLGq68O VU9xI/GcWtrPzUtuqqX1SzrsO4PqcSLyHXc55z73Niyj/M+4YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwzspQ9BXQiX9ABK3/Uo8kY/Bg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmIzZmMyNmEtZmNjYS0z NDk0LWFlNmEtMzI4YTVjY2UyYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBImKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEU9XIDhR6HuIfqVKi2XVD3Urt6E6M3xmu/UKVaKVXSXJCqPfF3Z+b3 bx9rFCugJoQBr/ePSqBhRz3LjQ3jrUFedEETwPWDCNHcWZOcUwmj33UVzlA1XeMO ztzT7ZBIQbNwypMRNUmItgmyn/OMHDkq72Lo7taoqTUnE6uMKCz0D+Vcc4/b+0/Q mF3ig+kq7suTHQLH7TcrRn6R4MKrw2zSkxSSCnCOYz2RYkVntc6OzX7pJRhfydV2 R3eYjsRvUFFVPqUEjC9WP2lJwsHoyI3s0GWfMAE+KuPnkzIw2qyCZPLUDfTeha5p ZufJGnApsGTOhDMJt4TbxzciGdGiqU0= -----END CERTIFICATE-----Generated at Tue Jul 22 11:57:08 2025 by rpki-client