$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bff1c659-6b2c-34fa-96f6-095bbc78e22c.roa File: bff1c659-6b2c-34fa-96f6-095bbc78e22c.roa (raw, json) Hash identifier: XrZvDDg/PJEwCbMMQzKiNQTbbYcEeUlLwrBThtDa24Y= Subject key identifier: 6B:F1:5A:93:63:2C:BF:81:48:C7:C9:7B:00:D6:E0:B1:1A:9E:9A:D8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB830BE005BC4A33530C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bff1c659-6b2c-34fa-96f6-095bbc78e22c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.98.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:83:0b:e0:05:bc:4a:33:53:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=8d838e94-772e-48da-a55b-fa305ce88d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cf:b3:a8:33:ed:ea:05:54:8d:41:20:5a:b3: 29:18:d2:7a:7e:9d:3c:82:8e:3c:1b:ed:09:e1:8f: 7f:de:e7:e5:30:cc:55:c7:fa:5c:84:80:11:55:a9: 1f:5e:20:96:a2:c9:71:df:1e:4e:da:19:7a:74:1b: 55:e9:72:99:c2:41:31:52:f2:98:b5:2c:6a:a1:37: 98:28:83:fa:28:20:b1:49:a8:d3:a9:c3:86:f6:bd: 85:47:bd:cd:39:72:21:4c:0c:c3:48:71:8c:c0:a4: 87:1d:19:36:e8:12:c7:f8:36:34:53:87:ba:61:40: 7e:4e:1a:be:ff:bf:e7:0b:a0:0b:8d:80:af:e0:39: 5a:fb:cc:37:69:fd:1d:a9:05:b7:03:38:31:de:67: 51:30:77:5d:cc:56:aa:fa:25:bd:bd:42:9b:a1:92: fd:2c:fe:21:cf:84:dd:c6:8a:96:71:96:2d:69:f9: 78:ed:69:8d:7e:1a:a5:d2:27:2a:a6:f3:55:b4:57: b6:88:02:dd:47:0a:b9:0a:7b:9e:41:bc:41:ba:2d: 2c:76:76:ff:33:01:a1:55:59:3a:44:29:9d:29:39: b5:f2:44:71:9b:28:1b:ce:dc:b9:bd:56:25:28:74: 33:2d:78:f0:c1:80:fb:fc:d2:b8:3f:48:e3:3b:0e: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F1:5A:93:63:2C:BF:81:48:C7:C9:7B:00:D6:E0:B1:1A:9E:9A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bff1c659-6b2c-34fa-96f6-095bbc78e22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3a:26:58:7d:3b:81:b5:c5:1a:e2:27:dc:a9:70:06:6f:9a: de:7e:3d:58:b5:7c:2e:74:33:e4:df:1d:5c:95:68:3c:f2:89: a4:7b:d1:06:b6:89:ba:6b:11:b7:d3:e3:0e:dc:4b:51:a3:3c: b5:23:7c:20:76:a8:4b:c1:16:59:f8:ba:2b:b9:23:0e:45:2c: 1c:59:f4:bc:57:11:f8:59:02:d2:f0:09:4b:7f:5e:ed:72:ef: 36:86:13:68:f7:4b:e3:04:a8:6a:aa:89:e9:16:a2:f1:20:2e: ac:f3:d0:ae:14:39:31:25:ad:b9:f4:d1:37:31:31:80:9c:14: 3f:03:8f:92:e1:03:c7:7b:80:d6:03:6e:d0:bb:c7:1e:3b:ff: 50:95:f9:49:2d:9f:ca:30:ce:c8:02:2b:d7:b1:7e:c3:98:ef: e3:83:cf:5f:af:3d:2f:e8:16:0d:b9:da:92:28:b7:8c:cc:ab: 9d:29:0d:0e:68:d4:66:e2:51:a4:bc:50:a0:ed:ae:36:f6:f7: 50:8e:89:b3:78:b1:35:0c:15:3b:ca:10:93:4b:4e:6d:58:b7: 59:4f:b1:77:3a:08:02:ac:2e:b0:d6:f6:1a:77:64:d6:6b:5d: 58:89:fa:ac:a5:f0:d1:f2:61:8e:21:fa:85:22:fb:24:b7:7a: a6:ad:17:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24ML4AW8SjNTDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OGQ4MzhlOTQtNzcyZS00OGRhLWE1NWItZmEzMDVjZTg4ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM+zqDPt6gVUjUEgWrMpGNJ6fp08go48G+0J 4Y9/3uflMMxVx/pchIARVakfXiCWoslx3x5O2hl6dBtV6XKZwkExUvKYtSxqoTeY KIP6KCCxSajTqcOG9r2FR73NOXIhTAzDSHGMwKSHHRk26BLH+DY0U4e6YUB+Thq+ /7/nC6ALjYCv4Dla+8w3af0dqQW3Azgx3mdRMHddzFaq+iW9vUKboZL9LP4hz4Td xoqWcZYtafl47WmNfhql0icqpvNVtFe2iALdRwq5CnueQbxBui0sdnb/MwGhVVk6 RCmdKTm18kRxmygbzty5vVYlKHQzLXjwwYD7/NK4P0jjOw5ofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvxWpNjLL+BSMfJewDW4LEanprYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZmMWM2NTktNmIyYy0z NGZhLTk2ZjYtMDk1YmJjNzhlMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo6Jlh9O4G1xRriJ9ypcAZvmt5+PVi1fC50M+TfHVyVaDzyiaR70Qa2 ibprEbfT4w7cS1GjPLUjfCB2qEvBFln4uiu5Iw5FLBxZ9LxXEfhZAtLwCUt/Xu1y 7zaGE2j3S+MEqGqqiekWovEgLqzz0K4UOTElrbn00TcxMYCcFD8Dj5LhA8d7gNYD btC7xx47/1CV+Uktn8owzsgCK9exfsOY7+ODz1+vPS/oFg252pIot4zMq50pDQ5o 1GbiUaS8UKDtrjb291COibN4sTUMFTvKEJNLTm1Yt1lPsXc6CAKsLrDW9hp3ZNZr XViJ+qyl8NHyYY4h+oUi+yS3eqatF/0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:36 2025 by rpki-client