$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa File: bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa (raw, json) Hash identifier: m06CeX3db33+0GdBprc7B+Q0wCJnQkkZ0ohgwjfwVek= Subject key identifier: 3E:08:CA:A8:57:6C:E7:79:B0:C8:F2:F7:25:CC:8C:79:9A:DA:0C:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB4669E227EE895029240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b4:66:9e:22:7e:e8:95:02:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=5cbf1380-2b89-4c8c-ae3f-85ad8931e42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:86:54:cd:c0:64:58:aa:47:3b:b0:99:4b: 7b:4f:ea:87:2b:76:a8:0f:7e:22:4d:20:14:01:a8: 0d:24:e9:09:15:2e:c1:cd:4f:c7:43:cd:c6:64:91: 63:40:72:08:c5:3a:79:20:33:c3:fb:0f:79:56:22: 22:1c:64:62:cd:e6:14:df:ee:f7:2b:34:d4:58:90: 4f:db:80:8f:d4:68:62:51:76:3b:58:64:38:ef:cd: 75:9b:4a:ec:11:40:fc:ca:f8:87:1f:09:da:00:13: 4f:af:ee:5d:a3:58:77:fa:1e:a5:1c:c2:fa:89:77: f2:d0:4a:9b:03:94:34:cd:53:64:18:53:31:41:4a: ce:70:ce:ea:70:f3:8d:44:ac:36:9a:2b:c8:db:ce: 16:88:9d:1a:6f:2c:fd:ee:0a:1a:a3:e2:af:53:49: 88:ff:72:6f:57:d9:a0:04:39:6d:38:9b:2c:5f:92: cf:fd:4c:4d:e2:d0:c2:28:9f:f3:03:2e:da:91:9f: 60:81:d6:cb:96:1c:89:f3:85:5d:9e:e1:1f:45:89: ba:bb:32:5b:80:63:bd:16:8c:bc:98:8e:02:a9:ad: 43:89:5a:87:97:95:52:ca:38:4e:c7:81:3d:8c:1d: ff:39:eb:6f:2b:ba:00:0c:bf:c0:1c:77:d5:c1:a9: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:08:CA:A8:57:6C:E7:79:B0:C8:F2:F7:25:CC:8C:79:9A:DA:0C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:43:6b:6b:63:7e:d1:ff:32:f0:8f:c0:84:4d:77:a4:ed:f5: 2e:d6:1a:fc:8a:4f:6b:42:a1:73:21:82:70:11:d2:f1:34:dd: 2c:24:9e:4a:72:85:28:1c:49:00:e5:a9:3c:aa:a1:74:2c:21: de:f3:8c:b5:d2:6a:0b:96:38:85:ba:df:63:b9:e7:6c:5a:59: fd:0d:ae:64:3a:96:f7:83:30:9c:5a:9f:5c:cb:26:ef:7f:c9: ea:54:1b:84:0b:8e:d8:28:a2:26:92:ad:40:64:11:92:84:e5: c3:bc:73:0f:fc:de:16:45:6e:10:42:56:a7:f5:8b:74:dd:0a: d7:a3:02:f4:93:00:d7:ef:7f:41:e6:93:e3:cf:81:df:ed:70: f2:67:dc:ed:b9:b2:97:1f:c4:5a:99:46:bd:93:fb:03:96:2e: 64:00:19:91:94:36:da:52:e2:7e:6e:57:e9:30:36:26:93:2f: 03:1b:d9:90:1a:63:63:8b:55:fe:05:31:5f:b7:8e:69:13:45: b3:1c:a4:aa:b6:e7:52:73:d8:6b:ce:de:53:aa:ad:88:e0:30: dc:cc:35:61:9a:bc:7a:48:d1:16:da:90:4b:89:c7:a6:8b:75: 28:01:a5:67:13:a6:50:dc:d4:b4:7c:ae:2d:3d:1e:c1:71:5b: 96:79:77:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27RmniJ+6JUCkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NWNiZjEzODAtMmI4OS00YzhjLWFlM2YtODVhZDg5MzFlNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl6GVM3AZFiqRzuwmUt7T+qHK3aoD34iTSAU AagNJOkJFS7BzU/HQ83GZJFjQHIIxTp5IDPD+w95ViIiHGRizeYU3+73KzTUWJBP 24CP1GhiUXY7WGQ47811m0rsEUD8yviHHwnaABNPr+5do1h3+h6lHML6iXfy0Eqb A5Q0zVNkGFMxQUrOcM7qcPONRKw2mivI284WiJ0abyz97goao+KvU0mI/3JvV9mg BDltOJssX5LP/UxN4tDCKJ/zAy7akZ9ggdbLlhyJ84VdnuEfRYm6uzJbgGO9Foy8 mI4Cqa1DiVqHl5VSyjhOx4E9jB3/OetvK7oADL/AHHfVwalJ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4IyqhXbOd5sMjy9yXMjHma2gwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZmYWY4ZmMtYjcyNy0z OGViLWFhMDgtNWU0YjA2NDBjYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1Da2tjftH/MvCPwIRNd6Tt9S7WGvyKT2tCoXMhgnAR0vE03Swknkpy hSgcSQDlqTyqoXQsId7zjLXSaguWOIW632O552xaWf0NrmQ6lveDMJxan1zLJu9/ yepUG4QLjtgooiaSrUBkEZKE5cO8cw/83hZFbhBCVqf1i3TdCtejAvSTANfvf0Hm k+PPgd/tcPJn3O25spcfxFqZRr2T+wOWLmQAGZGUNtpS4n5uV+kwNiaTLwMb2ZAa Y2OLVf4FMV+3jmkTRbMcpKq251Jz2GvO3lOqrYjgMNzMNWGavHpI0RbakEuJx6aL dSgBpWcTplDc1LR8ri09HsFxW5Z5d/E= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:50 2025 by rpki-client