$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa File: 1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa (raw, json) Hash identifier: BYY2dPTJIlBmZ37JaZdC11lUF1577VBYT8vwJQlZQfo= Subject key identifier: 49:7A:D6:01:20:BE:59:60:E9:9B:EA:A1:37:CD:CC:7E:5A:7C:34:A5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584ABEB0DAD6506C7532E5EA8580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa Signing time: Mon 04 Aug 2025 13:00:36 +0000 ROA not before: Mon 04 Aug 2025 13:00:36 +0000 ROA not after: Sun 02 Nov 2025 14:00:36 +0000 asID: 396982 IP address blocks: 34.3.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:b0:da:d6:50:6c:75:32:e5:ea:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 4 13:00:36 2025 GMT Not After : Nov 2 14:00:36 2025 GMT Subject: CN=04d6e42d-b5d6-4b8d-a8f5-a1d1e7a46b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:cf:60:28:1f:83:f9:b8:be:a8:68:55:55: 01:38:1a:b9:35:d5:d8:89:ff:c0:bc:c2:ed:40:54: 61:cf:81:db:75:13:18:fc:8b:96:c7:27:a0:e8:eb: 51:4f:5f:96:0e:c2:04:52:35:4d:4d:e6:aa:48:1c: ea:7e:37:f8:ca:91:1f:34:fc:5b:d6:b9:86:74:7c: ee:fb:40:5e:1e:15:35:27:2e:3d:bc:42:75:41:d7: 29:dd:ca:d1:e9:74:ba:a1:c3:fa:30:6d:81:f4:8e: 1f:fe:5a:e1:97:fd:03:e1:a9:33:15:94:90:12:2b: 62:07:3b:dc:76:7a:78:51:10:99:92:0e:d0:d9:1b: a3:90:3a:6c:01:c1:6e:70:af:89:6d:57:dd:99:b4: 05:7e:d3:b4:c6:75:83:90:23:64:2b:37:38:d8:0e: ba:cd:b1:14:0f:2f:3c:27:bf:19:63:47:98:ba:dc: 59:87:12:69:b0:50:f0:f9:bf:f0:b9:ad:6a:d5:54: 27:bc:19:62:28:82:82:0d:09:e1:05:6f:93:83:ca: 72:b0:8f:e4:bd:fb:35:08:98:c9:04:4b:7a:91:02: 9e:bf:e2:3a:d7:f6:1b:6e:a2:4d:ea:61:b5:7e:0f: 07:68:a2:67:07:d7:b4:31:f8:5c:31:79:82:f1:a1: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7A:D6:01:20:BE:59:60:E9:9B:EA:A1:37:CD:CC:7E:5A:7C:34:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:de:06:27:90:a7:97:22:76:99:2d:ad:5d:dc:84:c9:24:c9: 69:83:fd:ed:c6:89:4f:90:32:eb:11:17:3e:ae:9a:e3:50:fd: 55:6c:b1:ae:c8:a9:51:98:9f:26:28:36:e2:a7:34:31:91:7d: a3:a8:02:47:17:8f:7b:1e:a8:be:68:3d:e8:48:84:a5:56:01: 15:e3:5c:09:56:2d:96:fe:08:98:67:e7:33:d6:88:5f:bb:4d: a1:3b:b6:c3:a9:ae:bb:46:c9:f6:48:d4:8f:10:3c:f2:35:44: e7:43:21:94:1e:23:c6:ae:44:c9:83:71:86:90:96:f4:a5:b1: 01:38:5f:1c:4c:3f:d8:23:cc:9d:a0:14:4d:95:73:3a:49:8d: 5a:9e:05:0c:84:d5:61:6c:8d:bb:85:1b:e6:27:05:79:d7:13: be:a3:e8:f1:fc:f6:bd:c7:d2:b8:f1:ca:11:f4:dd:ed:d0:fc: d2:90:91:39:19:75:c4:1b:ef:d9:69:65:af:16:f5:8b:e8:b4: 5e:4a:8e:0f:0e:26:a8:ed:ec:f1:84:38:ff:ed:1f:31:5c:38: 9b:a1:1b:57:95:8d:eb:47:b9:1e:39:9c:ba:90:67:07:30:1b: 9a:7e:bf:3f:16:e3:d6:1e:07:74:b4:30:e1:8f:32:b5:b7:1c: 81:06:b7:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq+sNrWUGx1MuXqhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgwNDEzMDAzNloXDTI1MTEwMjE0MDAzNlowLzEtMCsGA1UEAxMk MDRkNmU0MmQtYjVkNi00YjhkLWE4ZjUtYTFkMWU3YTQ2YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqivPYCgfg/m4vqhoVVUBOBq5NdXYif/AvMLt QFRhz4HbdRMY/IuWxyeg6OtRT1+WDsIEUjVNTeaqSBzqfjf4ypEfNPxb1rmGdHzu +0BeHhU1Jy49vEJ1Qdcp3crR6XS6ocP6MG2B9I4f/lrhl/0D4akzFZSQEitiBzvc dnp4URCZkg7Q2RujkDpsAcFucK+JbVfdmbQFftO0xnWDkCNkKzc42A66zbEUDy88 J78ZY0eYutxZhxJpsFDw+b/wua1q1VQnvBliKIKCDQnhBW+Tg8pysI/kvfs1CJjJ BEt6kQKev+I61/YbbqJN6mG1fg8HaKJnB9e0MfhcMXmC8aFfEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl61gEgvllg6ZvqoTfNzH5afDSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQyOWZkMmYtZjk5Ni0z Mjg2LThiYzQtMDdiYzZiNTIyNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7eBieQp5cidpktrV3chMkkyWmD/e3GiU+QMusRFz6umuNQ/VVssa7I qVGYnyYoNuKnNDGRfaOoAkcXj3seqL5oPehIhKVWARXjXAlWLZb+CJhn5zPWiF+7 TaE7tsOprrtGyfZI1I8QPPI1ROdDIZQeI8auRMmDcYaQlvSlsQE4XxxMP9gjzJ2g FE2VczpJjVqeBQyE1WFsjbuFG+YnBXnXE76j6PH89r3H0rjxyhH03e3Q/NKQkTkZ dcQb79lpZa8W9YvotF5Kjg8OJqjt7PGEOP/tHzFcOJuhG1eVjetHuR45nLqQZwcw G5p+vz8W49YeB3S0MOGPMrW3HIEGt68= -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:19 2025 by rpki-client