$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bfe3ed1-3be3-3dd5-bb8d-8d286fff97d6.roa File: 5bfe3ed1-3be3-3dd5-bb8d-8d286fff97d6.roa (raw, json) Hash identifier: jN95Kr4pTQpx/zdmqdLrR5hSlbZylkkUMSmcugVGg1Y= Subject key identifier: 08:86:3C:CB:21:01:73:E2:96:97:5D:A7:3B:C5:09:E0:55:6A:13:A1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A9D30F68498F131A8DC5B04C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bfe3ed1-3be3-3dd5-bb8d-8d286fff97d6.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 396982 IP address blocks: 34.4.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f6:84:98:f1:31:a8:dc:5b:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=6b8c7442-7e44-4d5a-ab9f-2c9546d47e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6f:f1:45:4a:24:3a:b7:83:3b:f4:0e:f4:d9: 72:0f:c7:73:0d:0e:cb:cd:bd:97:73:6e:de:ce:80: 19:b4:97:d9:72:79:c1:25:0c:e1:5b:03:0c:da:54: 69:61:56:24:6c:2c:05:47:c0:7c:cb:c7:15:90:a6: f9:94:c9:5e:86:e1:28:00:93:72:2f:1d:d6:70:3b: a0:97:74:2d:e4:31:99:02:0b:47:57:fc:9b:3a:9e: 19:d7:bd:50:b6:c8:62:19:21:2a:e6:26:e4:21:24: 8b:ef:14:aa:18:cb:83:f7:9b:00:76:58:1a:4e:9a: dd:06:28:c8:86:e2:60:6e:99:59:77:5c:c1:3e:df: 15:7b:c4:44:26:73:9e:7b:74:1a:e2:7d:c5:12:c0: bf:ac:21:69:82:74:9f:b4:8f:9f:75:c0:e0:ae:c8: 3a:c6:05:a4:41:18:4f:d1:52:56:cb:e1:2f:b8:d9: 3c:89:9b:6a:72:a9:06:f0:19:b0:f6:7a:bd:ae:d9: 7f:5e:8f:f9:07:c0:81:80:c3:bc:df:dc:23:73:f1: d2:c1:af:a8:03:f8:7f:b8:82:07:91:8e:20:ef:21: 34:3f:78:e2:b2:78:28:90:11:c0:23:87:a0:e6:a5: f5:c9:47:33:32:9b:bc:92:49:fc:47:60:f7:af:9b: 3b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:86:3C:CB:21:01:73:E2:96:97:5D:A7:3B:C5:09:E0:55:6A:13:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bfe3ed1-3be3-3dd5-bb8d-8d286fff97d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4f:7f:d2:07:00:1d:2a:44:29:55:61:29:4e:15:9e:b1:71: 9c:7c:ce:55:04:2f:13:44:c2:c1:f4:61:82:e3:5c:a6:e6:85: 07:59:8f:8b:cd:61:17:75:cd:5e:17:df:ef:fd:f4:a1:d9:5e: 55:66:fd:33:76:f4:82:0f:7d:f6:4b:c7:ba:70:13:51:c7:66: 6b:7d:45:7f:19:97:22:c9:77:60:6c:ca:83:a5:26:31:a3:7d: 4c:2f:ff:6e:35:4a:1b:eb:ec:5e:90:2f:72:05:cc:5f:0c:c7: 3a:ec:c8:42:6f:59:3d:86:cc:e4:d9:75:3a:c5:e4:9a:3c:e1: 50:99:a6:3c:13:6e:2e:17:e7:82:e0:52:86:59:5a:dd:84:36: 5b:5f:96:b1:a5:50:fa:25:a4:0a:51:b5:fa:ba:90:bf:2e:e2: 7f:af:be:41:51:dd:d1:bc:2e:1b:8e:a3:db:06:ab:dc:b7:31: c1:98:62:0a:73:76:39:c9:85:3f:47:03:79:25:86:29:59:c0: 85:49:24:e6:d7:6d:24:67:c8:4e:28:c2:12:a3:8e:e2:76:fa: 3c:1a:5f:28:57:3b:5b:3b:f6:b8:c9:60:12:9f:58:57:bc:8e: aa:2f:33:09:06:ae:9e:84:d3:1c:02:97:66:49:19:79:b3:fa: 43:19:a1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPaEmPExqNxbBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NmI4Yzc0NDItN2U0NC00ZDVhLWFiOWYtMmM5NTQ2ZDQ3ZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2/xRUokOreDO/QO9NlyD8dzDQ7Lzb2Xc27e zoAZtJfZcnnBJQzhWwMM2lRpYVYkbCwFR8B8y8cVkKb5lMlehuEoAJNyLx3WcDug l3Qt5DGZAgtHV/ybOp4Z171QtshiGSEq5ibkISSL7xSqGMuD95sAdlgaTprdBijI huJgbplZd1zBPt8Ve8REJnOee3Qa4n3FEsC/rCFpgnSftI+fdcDgrsg6xgWkQRhP 0VJWy+EvuNk8iZtqcqkG8Bmw9nq9rtl/Xo/5B8CBgMO839wjc/HSwa+oA/h/uIIH kY4g7yE0P3jisngokBHAI4eg5qX1yUczMpu8kkn8R2D3r5s7NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiGPMshAXPilpddpzvFCeBVahOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWJmZTNlZDEtM2JlMy0z ZGQ1LWJiOGQtOGQyODZmZmY5N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpPf9IHAB0qRClVYSlOFZ6xcZx8zlUELxNEwsH0YYLjXKbmhQdZj4vN YRd1zV4X3+/99KHZXlVm/TN29IIPffZLx7pwE1HHZmt9RX8ZlyLJd2BsyoOlJjGj fUwv/241Shvr7F6QL3IFzF8MxzrsyEJvWT2GzOTZdTrF5Jo84VCZpjwTbi4X54Lg UoZZWt2ENltflrGlUPolpApRtfq6kL8u4n+vvkFR3dG8LhuOo9sGq9y3McGYYgpz djnJhT9HA3klhilZwIVJJObXbSRnyE4owhKjjuJ2+jwaXyhXO1s79rjJYBKfWFe8 jqovMwkGrp6E0xwCl2ZJGXmz+kMZoZE= -----END CERTIFICATE-----Generated at Wed Aug 6 05:29:19 2025 by rpki-client