$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68bf43aa-d432-3de9-8b80-6726c9e05884.roa File: 68bf43aa-d432-3de9-8b80-6726c9e05884.roa (raw, json) Hash identifier: Ev0zIfb7kTp7cyNaagZgUdyFhoYJsOxpwh7OLYlpOj4= Subject key identifier: AC:FB:89:69:CA:49:C4:B6:BE:A2:28:53:A5:CC:4E:94:18:78:77:D8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A0278E6ACC5ACAFBBD881B300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68bf43aa-d432-3de9-8b80-6726c9e05884.roa Signing time: Thu 29 May 2025 02:55:59 +0000 ROA not before: Thu 29 May 2025 02:55:59 +0000 ROA not after: Wed 27 Aug 2025 02:55:59 +0000 asID: 396982 IP address blocks: 34.3.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:02:78:e6:ac:c5:ac:af:bb:d8:81:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 29 02:55:59 2025 GMT Not After : Aug 27 02:55:59 2025 GMT Subject: CN=a3808b54-aa50-47cd-92aa-5bcaa9c0f8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:ec:da:93:e3:4b:75:d6:6a:80:3a:58:4c: 40:e1:6e:65:cc:59:03:f4:bf:2a:69:40:90:dc:f8: d3:8f:73:63:dc:86:57:9a:30:1a:97:23:74:ae:f1: 6f:b4:3c:d4:75:3f:6f:30:e5:65:52:8e:0d:82:cd: 2d:33:61:4f:38:f3:0f:60:6d:18:46:93:a3:e4:08: 0d:4f:2b:08:9f:5e:7a:7b:89:d1:05:96:f5:85:2e: 16:5d:d2:7d:c1:14:75:2c:53:bf:12:52:97:fa:e0: d3:66:79:a5:da:8c:d4:f4:4f:ca:0b:ee:09:da:ed: 0a:eb:28:1f:04:67:5b:c1:c5:13:84:97:6d:53:97: 5d:6e:b8:26:0b:03:e6:39:39:34:f4:99:67:91:5e: bf:62:ce:b0:74:f2:6f:c4:af:f9:a2:a4:70:47:bf: fe:05:93:05:d5:3b:fb:92:98:47:c1:e0:b2:1c:f2: 99:7a:b7:5e:bf:3e:9a:63:2e:ec:e0:46:7e:55:0e: dd:4a:15:f6:e4:b9:78:f6:ad:4a:e7:bc:45:69:ea: 09:fa:a4:2e:eb:a7:01:82:9d:d4:5e:1f:ca:94:1f: 88:57:fd:5b:d4:06:ed:f5:c3:28:69:53:32:27:62: 42:b0:9f:77:4c:d0:41:32:e3:03:22:c9:00:18:7f: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FB:89:69:CA:49:C4:B6:BE:A2:28:53:A5:CC:4E:94:18:78:77:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68bf43aa-d432-3de9-8b80-6726c9e05884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a8:4c:36:d5:14:23:23:dd:1b:ce:30:83:35:df:8f:8e:2c: 02:8a:12:6f:b5:a3:47:b6:7d:4e:af:b5:f0:56:5f:8c:cb:61: 09:ff:c5:aa:90:f7:92:c1:1f:4b:42:c2:7c:29:29:dd:32:89: ac:89:c7:f3:c1:60:21:55:61:0d:4b:e3:e4:3f:20:ea:b4:42: 5d:bc:16:73:03:c5:94:75:0d:34:76:68:1c:bd:e1:d8:da:dc: 6a:30:73:03:52:f8:87:ae:50:13:5c:da:24:1d:c9:6f:bf:ff: 7c:71:70:5e:0a:a1:f1:bf:87:f6:80:74:da:e2:f4:8e:68:e3: 86:1a:da:1a:3b:8b:88:50:1c:73:41:24:69:d4:64:ec:cb:12: 26:81:c2:d1:15:59:ce:cf:b6:95:4e:d3:4b:a2:0b:61:fb:47: b3:53:c2:7c:5e:d6:f0:1b:c7:70:ed:97:b1:60:77:e0:24:79: 53:4a:da:d7:1a:d3:c4:68:fa:ee:9c:f5:cd:ea:1f:57:12:4f: b2:a1:b3:21:62:de:48:fa:49:69:5c:b7:05:ef:cd:34:0f:87: cf:6f:34:fc:0c:3c:31:b2:62:d1:e1:cc:6d:e3:bf:dc:ec:c8: 5b:01:64:fd:f4:85:02:cf:e3:45:45:52:d9:ee:ae:89:85:40: b4:84:b1:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoCeOasxayvu9iBswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUyOTAyNTU1OVoXDTI1MDgyNzAyNTU1OVowLzEtMCsGA1UEAxMk YTM4MDhiNTQtYWE1MC00N2NkLTkyYWEtNWJjYWE5YzBmOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLns2pPjS3XWaoA6WExA4W5lzFkD9L8qaUCQ 3PjTj3Nj3IZXmjAalyN0rvFvtDzUdT9vMOVlUo4Ngs0tM2FPOPMPYG0YRpOj5AgN TysIn156e4nRBZb1hS4WXdJ9wRR1LFO/ElKX+uDTZnml2ozU9E/KC+4J2u0K6ygf BGdbwcUThJdtU5ddbrgmCwPmOTk09JlnkV6/Ys6wdPJvxK/5oqRwR7/+BZMF1Tv7 kphHweCyHPKZerdevz6aYy7s4EZ+VQ7dShX25Ll49q1K57xFaeoJ+qQu66cBgp3U Xh/KlB+IV/1b1Abt9cMoaVMyJ2JCsJ93TNBBMuMDIskAGH+89wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz7iWnKScS2vqIoU6XMTpQYeHfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjhiZjQzYWEtZDQzMi0z ZGU5LThiODAtNjcyNmM5ZTA1ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIgOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCoTDbVFCMj3RvOMIM134+OLAKKEm+1o0e2fU6vtfBWX4zLYQn/xaqQ 95LBH0tCwnwpKd0yiayJx/PBYCFVYQ1L4+Q/IOq0Ql28FnMDxZR1DTR2aBy94dja 3GowcwNS+IeuUBNc2iQdyW+//3xxcF4KofG/h/aAdNri9I5o44Ya2ho7i4hQHHNB JGnUZOzLEiaBwtEVWc7PtpVO00uiC2H7R7NTwnxe1vAbx3Dtl7Fgd+AkeVNK2tca 08Ro+u6c9c3qH1cST7KhsyFi3kj6SWlctwXvzTQPh89vNPwMPDGyYtHhzG3jv9zs yFsBZP30hQLP40VFUtnuromFQLSEsYQ= -----END CERTIFICATE-----Generated at Fri Jun 6 16:56:28 2025 by rpki-client