$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/81649cff-5105-32e3-b15e-430f64cd9fd3.roa File: 81649cff-5105-32e3-b15e-430f64cd9fd3.roa (raw, json) Hash identifier: 8sxQrJOJFxkdGoiGBbXmSRmtfGIM/exkPsgmqPG4Qxw= Subject key identifier: 64:A4:A1:0B:CB:14:BB:01:A5:D8:E2:61:88:88:14:88:E3:6B:9F:2D Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F4328584B0746C5225371222499E3B980 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/81649cff-5105-32e3-b15e-430f64cd9fd3.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 14618 IP address blocks: 204.155.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c5:22:53:71:22:24:99:e3:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=f98d9853-0a0e-4ef9-b07e-74d5e601ff62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:a6:07:15:af:6a:2a:b2:38:04:15:e0:0f: 23:b5:0b:ed:ae:0c:6d:e9:74:96:d9:90:be:48:cc: b1:57:d0:39:f4:3e:11:4c:c2:1d:10:d2:d4:29:80: 61:18:55:b9:34:cf:c5:70:ca:e0:05:38:d4:a6:95: a6:c4:a3:db:f7:f3:0f:ba:2b:56:dc:90:18:90:4c: 31:bd:f7:ab:e8:8e:06:0a:de:25:3b:7f:5f:7c:88: cb:f7:55:f4:54:a4:0c:c9:40:4b:50:54:65:51:28: dd:f1:bf:c0:7e:cf:3a:f8:ee:43:e4:7c:5d:e5:43: 77:72:a8:0d:2b:32:3e:10:94:dc:f5:73:cf:ba:e3: 79:5b:83:3c:ad:95:e9:1c:3e:57:f4:33:3f:8e:22: 63:6d:01:70:b8:78:68:4c:ea:0a:b2:f8:96:8b:79: c9:d4:64:c2:9b:f1:62:ab:bf:2c:fb:46:df:8a:59: ba:e1:d5:2b:5e:09:a3:76:35:60:90:91:c9:52:f6: 31:8d:90:bc:1c:49:41:38:0e:21:60:f7:a0:a3:33: f1:7a:3f:0f:26:ea:b6:fa:61:33:fd:7c:32:a2:b0: 6c:34:4c:b4:fe:07:07:d1:0e:eb:c3:2d:56:42:2a: 75:68:56:05:40:44:39:ba:63:b7:6d:62:19:ff:b3: 2c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A4:A1:0B:CB:14:BB:01:A5:D8:E2:61:88:88:14:88:E3:6B:9F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/81649cff-5105-32e3-b15e-430f64cd9fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:76:fb:49:14:cb:56:42:e3:fe:7b:61:a0:17:10:95:6b:00: 56:9a:22:15:d5:8a:11:ca:80:25:71:07:c4:60:85:94:3d:13: 48:60:2c:b6:bd:ec:46:83:fd:54:d8:a0:8a:ff:22:4d:03:a8: c0:4a:00:df:b1:0b:5a:b1:23:28:52:52:3a:15:9a:6b:4f:d3: 3e:13:3e:82:ca:30:c9:c7:03:a2:50:dc:89:31:54:33:21:d9: 8b:00:d3:36:33:58:89:10:d2:16:18:7b:53:0a:d8:22:6c:79: 43:73:3c:dd:8f:3d:05:c3:1a:85:fd:62:96:01:1b:68:0c:79: 7e:06:c7:21:94:19:b7:9f:1e:28:89:93:ec:24:b1:8d:49:2d: 9a:9a:16:cf:22:d9:3a:36:94:50:71:cc:1b:47:f5:5f:8c:71: f9:74:e2:e8:99:bd:b3:3b:fa:c5:4d:4a:f4:6c:2c:e3:2c:78: 1f:3d:bb:e9:4f:a0:95:bb:cc:8f:24:50:2d:de:17:4b:c8:44: cb:e6:80:f1:81:11:e0:0a:12:1d:55:68:29:dd:0d:10:16:27: 81:f0:09:6c:9b:e2:be:e1:ba:45:9b:08:eb:3c:78:73:97:35: b8:69:f3:9b:8f:93:d5:d0:ff:c7:f4:06:14:e0:cb:3c:46:e4: ce:28:ab:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsUiU3EiJJnjuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk Zjk4ZDk4NTMtMGEwZS00ZWY5LWIwN2UtNzRkNWU2MDFmZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8OmBxWvaiqyOAQV4A8jtQvtrgxt6XSW2ZC+ SMyxV9A59D4RTMIdENLUKYBhGFW5NM/FcMrgBTjUppWmxKPb9/MPuitW3JAYkEwx vfer6I4GCt4lO39ffIjL91X0VKQMyUBLUFRlUSjd8b/Afs86+O5D5Hxd5UN3cqgN KzI+EJTc9XPPuuN5W4M8rZXpHD5X9DM/jiJjbQFwuHhoTOoKsviWi3nJ1GTCm/Fi q78s+0bfilm64dUrXgmjdjVgkJHJUvYxjZC8HElBOA4hYPegozPxej8PJuq2+mEz /XwyorBsNEy0/gcH0Q7rwy1WQip1aFYFQEQ5umO3bWIZ/7MsJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSkoQvLFLsBpdjiYYiIFIjja58tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvODE2NDljZmYtNTEwNS0z MmUzLWIxNWUtNDMwZjY0Y2Q5ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV2+0kUy1ZC4/57YaAXEJVrAFaaIhXVihHKgCVxB8RghZQ9E0hgLLa9 7EaD/VTYoIr/Ik0DqMBKAN+xC1qxIyhSUjoVmmtP0z4TPoLKMMnHA6JQ3IkxVDMh 2YsA0zYzWIkQ0hYYe1MK2CJseUNzPN2PPQXDGoX9YpYBG2gMeX4GxyGUGbefHiiJ k+wksY1JLZqaFs8i2To2lFBxzBtH9V+Mcfl04uiZvbM7+sVNSvRsLOMseB89u+lP oJW7zI8kUC3eF0vIRMvmgPGBEeAKEh1VaCndDRAWJ4HwCWyb4r7hukWbCOs8eHOX Nbhp85uPk9XQ/8f0BhTgyzxG5M4oq70= -----END CERTIFICATE-----Generated at Tue Sep 9 18:32:07 2025 by rpki-client