$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/34db6870-0832-328b-b3fa-0971493250ae.roa File: 34db6870-0832-328b-b3fa-0971493250ae.roa (raw, json) Hash identifier: teCi9sXNMWxcD1lYDLugXD1E2jbzJcg/4Sdq2UWeDEs= Subject key identifier: A6:68:4E:E1:D7:EA:34:78:5E:55:48:7D:EB:69:3B:1F:4D:C0:F4:B3 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6CB47C8330B6485EDA1AF0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/34db6870-0832-328b-b3fa-0971493250ae.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 32043 IP address blocks: 173.213.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b4:7c:83:30:b6:48:5e:da:1a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=e2957db8-3150-4825-9caf-3272325decad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:55:1a:b4:12:3d:d1:03:e0:58:29:75:59: 6e:11:07:18:83:eb:ad:e8:ad:e1:8c:4a:60:be:68: c5:75:9a:36:c5:0a:2b:02:ed:28:f6:af:1d:7a:25: 1e:f5:bd:87:5e:87:27:71:3e:89:39:87:32:26:0a: 8b:90:69:6e:6b:a0:b7:34:b5:e3:b5:b5:2d:63:19: dd:59:31:a2:da:e0:aa:63:45:a1:82:ce:26:60:97: 38:a5:de:0c:8b:80:81:a0:54:40:87:91:26:cd:d3: 23:ed:d6:06:6e:36:18:b9:84:9a:a6:04:03:dd:55: 75:ac:fe:78:f0:ea:e4:49:90:bf:af:f7:36:1a:f4: 99:56:d2:38:bb:9f:2a:e2:5e:e9:96:50:8b:18:b9: 11:c5:1d:b3:b6:cc:eb:8e:fc:aa:a9:09:3f:86:0e: dc:13:49:40:28:eb:5d:58:b4:fb:d4:7e:31:40:8d: af:6f:89:20:09:87:2d:d4:8e:12:69:e8:9f:2f:9d: 46:c0:0e:d8:4d:2c:a6:ea:c0:5a:01:7f:a0:da:90: 66:d5:b3:78:82:28:cd:8f:09:ba:88:9a:f7:37:dd: 78:34:09:15:a4:be:ec:0b:65:49:20:09:a8:84:40: 1d:1b:31:88:8f:3b:02:33:e9:3b:87:54:e8:73:28: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:68:4E:E1:D7:EA:34:78:5E:55:48:7D:EB:69:3B:1F:4D:C0:F4:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/34db6870-0832-328b-b3fa-0971493250ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.213.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4e:0c:8b:23:8f:53:b7:3d:07:40:87:a9:a0:40:dd:a9:71: 37:0d:7c:34:23:e4:80:7e:20:a9:6c:c1:c7:18:2b:15:c5:39: 97:8b:4f:78:fb:e2:12:a5:23:d8:71:8c:40:73:78:30:ba:9c: 9c:d2:e5:0e:de:47:22:10:73:83:33:26:78:5c:ae:2b:70:8d: a5:5e:fd:48:fe:5e:25:be:ae:da:23:be:af:a3:d4:3c:57:b6: 47:41:78:39:ac:35:10:da:0b:64:a0:d1:d0:70:20:3e:c6:4e: cb:22:3e:bb:ba:3a:46:c7:f1:6a:e9:9f:56:25:4f:ae:fc:26: 6e:eb:a6:ca:6a:db:66:db:39:a4:dd:51:c0:43:61:80:c0:e6: 25:f6:ad:23:04:cb:cb:f7:2c:9a:90:28:1b:45:7a:b5:eb:65: 5f:27:51:1a:7b:dd:ed:e9:83:77:83:65:94:9d:14:2c:ec:d6: 64:1c:ee:df:73:bc:a6:18:49:33:ba:d6:a0:dc:3c:72:5d:df: 24:d8:5c:84:38:57:16:9c:a7:08:e0:20:2e:be:d8:9a:e7:5f: b0:ae:4f:2d:84:a3:e9:55:61:f0:c1:21:a6:70:a1:16:2b:ae: 1b:23:8f:d4:c2:1b:3c:01:e6:ee:6f:f8:d1:cb:7e:89:4d:c7: 6b:98:95:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLR8gzC2SF7aGvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZTI5NTdkYjgtMzE1MC00ODI1LTljYWYtMzI3MjMyNWRlY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr9VGrQSPdED4FgpdVluEQcYg+ut6K3hjEpg vmjFdZo2xQorAu0o9q8deiUe9b2HXocncT6JOYcyJgqLkGlua6C3NLXjtbUtYxnd WTGi2uCqY0Whgs4mYJc4pd4Mi4CBoFRAh5EmzdMj7dYGbjYYuYSapgQD3VV1rP54 8OrkSZC/r/c2GvSZVtI4u58q4l7pllCLGLkRxR2ztszrjvyqqQk/hg7cE0lAKOtd WLT71H4xQI2vb4kgCYct1I4SaeifL51GwA7YTSym6sBaAX+g2pBm1bN4gijNjwm6 iJr3N914NAkVpL7sC2VJIAmohEAdGzGIjzsCM+k7h1TocyjCUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZoTuHX6jR4XlVIfetpOx9NwPSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzRkYjY4NzAtMDgzMi0z MjhiLWIzZmEtMDk3MTQ5MzI1MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpODIsjj1O3PQdAh6mgQN2pcTcNfDQj5IB+IKlswccYKxXFOZeLT3j7 4hKlI9hxjEBzeDC6nJzS5Q7eRyIQc4MzJnhcritwjaVe/Uj+XiW+rtojvq+j1DxX tkdBeDmsNRDaC2Sg0dBwID7GTssiPru6OkbH8Wrpn1YlT678Jm7rpspq22bbOaTd UcBDYYDA5iX2rSMEy8v3LJqQKBtFerXrZV8nURp73e3pg3eDZZSdFCzs1mQc7t9z vKYYSTO61qDcPHJd3yTYXIQ4VxacpwjgIC6+2JrnX7CuTy2Eo+lVYfDBIaZwoRYr rhsjj9TCGzwB5u5v+NHLfolNx2uYlc4= -----END CERTIFICATE-----Generated at Wed Oct 8 15:42:57 2025 by rpki-client