$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28db7955-c838-34af-ab58-07d1f8ae4134.roa File: 28db7955-c838-34af-ab58-07d1f8ae4134.roa (raw, json) Hash identifier: TvWS3SIkG0AdA8ZvWrZp3knNNlGHUqNYQfnUr6Qi01U= Subject key identifier: 51:F2:DF:87:12:65:26:2A:D7:54:89:A3:54:24:9E:D6:55:03:5C:19 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AA590F1352A2E107A07F85D40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28db7955-c838-34af-ab58-07d1f8ae4134.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 34.191.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:f1:35:2a:2e:10:7a:07:f8:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=25b1e25c-8e0e-426b-935f-8b3e3cbdcd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:85:20:99:7c:e1:8b:56:43:7c:ce:c7:5e:47: 03:11:af:dc:ef:d4:2d:a5:74:a0:52:98:e2:3e:9b: 9d:b2:3b:6e:20:7b:79:f3:1b:35:d0:ec:b8:10:e4: 38:d3:5d:3a:b3:2e:e5:d1:3d:69:ed:95:aa:2f:c8: f1:ef:b1:cf:83:a0:61:16:28:6b:02:d6:09:26:89: 2e:8a:38:a1:b8:73:5c:8c:ea:8f:b7:df:24:0e:cc: 03:27:aa:c2:35:83:85:0d:71:97:d8:ad:f1:8d:62: cc:70:8b:97:81:e5:6d:ee:14:0b:1f:0e:94:ee:21: a3:3d:f8:43:ea:3d:54:cc:b2:c1:29:32:7e:cc:6e: bf:83:3f:77:6b:55:e3:d8:6e:94:ca:03:7a:77:42: ea:a5:b7:ee:27:5a:b9:6c:1e:ad:dc:1b:e6:23:65: be:eb:3d:f0:a1:2a:67:2a:38:c5:2d:fc:15:92:d9: ec:bf:c7:60:0a:8b:cc:57:05:53:f4:cd:31:2d:9d: 9c:28:15:a2:04:54:ae:43:59:fb:fb:d9:2d:25:58: 04:d8:a6:ec:bc:b5:9b:71:f1:88:06:65:f5:a0:f5: 12:62:eb:d9:8b:d8:08:67:b3:75:a2:99:7c:35:9e: 5a:7e:29:68:c5:3e:77:d6:07:5b:8f:30:fa:39:1f: de:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F2:DF:87:12:65:26:2A:D7:54:89:A3:54:24:9E:D6:55:03:5C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28db7955-c838-34af-ab58-07d1f8ae4134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:91:e8:37:da:90:22:82:53:d2:8a:c3:02:de:37:68:40:a9: 00:b8:db:aa:03:7f:ab:6e:eb:85:a7:51:2e:ee:29:07:04:43: e0:db:55:c1:30:46:88:7b:78:57:03:7d:20:00:b5:b6:16:3e: d0:9d:89:26:2b:c3:c0:c2:14:bf:a9:45:16:b0:db:42:b1:a0: 07:9c:d5:cb:03:99:be:96:67:42:b7:5f:11:7e:20:a4:72:71: 6d:cb:ef:61:60:e9:ba:b2:5e:74:68:20:1a:88:f3:ae:f2:69: 69:0b:bf:70:f1:14:1f:a5:c5:f2:f5:75:78:fe:4c:d7:f7:88: 98:4d:42:b7:7e:b7:4e:75:fb:49:df:0d:1d:7e:0f:af:03:09: 87:35:d6:fb:2e:c1:3d:c7:8f:3d:08:11:6a:c3:24:56:61:38: fb:c0:36:46:d6:5d:4c:be:8c:bc:21:dd:31:88:b0:5b:00:4d: 46:9b:2e:66:a9:ce:1f:39:8b:20:13:83:76:e6:c2:76:be:8c: 35:6e:36:a3:7b:90:52:a5:82:d6:b7:0e:61:47:b7:28:ad:14: 48:06:48:8d:cf:64:08:50:c1:1a:4c:24:eb:72:3d:59:d2:ad: 35:bb:9f:c5:27:97:1b:04:ab:2c:8a:13:fd:9b:11:c2:90:3d: c8:34:a5:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkPE1Ki4Qegf4XUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk MjViMWUyNWMtOGUwZS00MjZiLTkzNWYtOGIzZTNjYmRjZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IUgmXzhi1ZDfM7HXkcDEa/c79QtpXSgUpji PpudsjtuIHt58xs10Oy4EOQ40106sy7l0T1p7ZWqL8jx77HPg6BhFihrAtYJJoku ijihuHNcjOqPt98kDswDJ6rCNYOFDXGX2K3xjWLMcIuXgeVt7hQLHw6U7iGjPfhD 6j1UzLLBKTJ+zG6/gz93a1Xj2G6UygN6d0LqpbfuJ1q5bB6t3BvmI2W+6z3woSpn KjjFLfwVktnsv8dgCovMVwVT9M0xLZ2cKBWiBFSuQ1n7+9ktJVgE2KbsvLWbcfGI BmX1oPUSYuvZi9gIZ7N1opl8NZ5afiloxT531gdbjzD6OR/ebwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHy34cSZSYq11SJo1QkntZVA1wZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhkYjc5NTUtYzgzOC0z NGFmLWFiNTgtMDdkMWY4YWU0MTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOR6DfakCKCU9KKwwLeN2hAqQC426oDf6tu64WnUS7uKQcEQ+DbVcEw Roh7eFcDfSAAtbYWPtCdiSYrw8DCFL+pRRaw20KxoAec1csDmb6WZ0K3XxF+IKRy cW3L72Fg6bqyXnRoIBqI867yaWkLv3DxFB+lxfL1dXj+TNf3iJhNQrd+t051+0nf DR1+D68DCYc11vsuwT3Hjz0IEWrDJFZhOPvANkbWXUy+jLwh3TGIsFsATUabLmap zh85iyATg3bmwna+jDVuNqN7kFKlgta3DmFHtyitFEgGSI3PZAhQwRpMJOtyPVnS rTW7n8UnlxsEqyyKE/2bEcKQPcg0pSY= -----END CERTIFICATE-----Generated at Wed Aug 6 09:42:59 2025 by rpki-client