$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91bda03a-2e66-35b5-a06d-68b95c3f3932.roa File: 91bda03a-2e66-35b5-a06d-68b95c3f3932.roa (raw, json) Hash identifier: 1qDnYdyy7vOy75ogqdzM+isYRd7Ll6jPkJ6hscFv3xA= Subject key identifier: 66:18:FA:EE:EF:15:21:4F:AD:D6:20:08:4A:6C:D1:2C:C1:42:FC:78 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A9E14A28317288FC19BE7CE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91bda03a-2e66-35b5-a06d-68b95c3f3932.roa Signing time: Wed 23 Jul 2025 20:40:03 +0000 ROA not before: Wed 23 Jul 2025 20:40:03 +0000 ROA not after: Tue 21 Oct 2025 20:40:03 +0000 asID: 15169 IP address blocks: 34.4.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:14:a2:83:17:28:8f:c1:9b:e7:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 23 20:40:03 2025 GMT Not After : Oct 21 20:40:03 2025 GMT Subject: CN=33b8aaf1-6523-4364-b4ae-7587c310aa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:9c:5c:7d:5b:e8:80:ae:4e:1e:78:e4:cb: fe:dd:0d:cf:17:df:4f:89:76:6d:0f:5b:fd:0e:9f: b1:59:43:10:03:ee:12:fe:13:88:27:6d:03:80:6e: bb:14:43:d8:ca:09:03:a2:b7:bb:03:5e:85:a3:90: c1:99:b0:75:35:ba:6f:db:37:56:d9:5d:30:4f:69: e0:de:79:ed:f2:1e:6c:c3:1f:f1:1b:ef:be:f1:22: 74:92:ec:5f:40:13:f8:4d:6b:f9:0f:0b:3d:fc:72: 2a:fb:89:5b:a7:f0:28:6d:e6:ac:d8:8d:c9:cb:68: 64:4e:69:9e:d7:53:4f:04:ab:16:a0:8b:84:80:ab: b0:39:c8:af:3f:dd:cc:07:49:e2:2c:c3:98:85:c9: d1:36:8b:81:1b:94:0e:27:52:77:b7:93:0f:fe:7b: 6a:04:da:f5:10:8e:28:36:d7:98:22:e2:da:85:2a: 11:60:81:88:4e:9c:64:9b:27:8d:9d:4e:01:60:fa: 89:07:cc:2a:f6:87:63:67:41:84:a7:82:25:b4:23: 5c:f2:9b:6f:41:55:70:ca:34:fd:6c:e2:9b:e7:ab: 91:c0:42:aa:2c:39:c6:fd:7a:a3:6c:55:b8:86:d1: 36:c9:e6:e2:b2:9c:8b:21:22:d2:f2:69:04:c5:6f: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:18:FA:EE:EF:15:21:4F:AD:D6:20:08:4A:6C:D1:2C:C1:42:FC:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91bda03a-2e66-35b5-a06d-68b95c3f3932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ba:19:d2:8c:51:6b:f8:1f:4e:a0:56:58:c6:15:cf:bd:5d: 86:bc:e8:37:6d:95:3e:4d:ac:ed:e8:eb:01:3d:e9:0f:5c:ba: 80:8a:aa:f1:63:0f:93:fa:36:e5:9c:d2:d7:32:63:aa:75:f3: 8c:7e:1c:29:e2:5e:24:b8:08:c2:67:fd:54:56:93:84:6e:8b: 03:8f:1b:ae:f3:4d:09:7b:99:7a:00:fc:06:c3:93:10:1c:9a: cd:40:01:19:4d:e3:c3:bd:1d:6c:ee:ec:78:e7:0d:cc:cc:d8: b5:62:6d:79:ab:a6:05:5b:3a:1e:56:3b:79:a5:67:61:7c:06: 9e:93:16:8b:18:ed:90:d7:34:4a:a0:a0:55:14:e4:fb:cb:18: a9:ed:c4:bf:89:fb:39:0d:fe:f2:80:04:0e:7d:7b:ae:79:4d: 47:9d:1d:79:a2:f6:07:ef:97:55:37:3a:c4:9e:fa:dc:32:7e: 8b:af:24:20:5b:51:45:da:ad:81:cf:98:fe:a5:c8:36:63:eb: 93:88:3e:8a:56:32:1c:8c:87:b1:1b:90:96:3d:1a:bf:3c:fc: f6:97:bc:2c:1b:0b:ae:9b:47:e3:33:da:8c:fe:c3:fd:81:e3: 58:22:1b:c2:37:32:de:a0:f6:c2:6b:9f:41:32:b5:f8:9b:7d: e4:d7:70:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeFKKDFyiPwZvnzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcyMzIwNDAwM1oXDTI1MTAyMTIwNDAwM1owLzEtMCsGA1UEAxMk MzNiOGFhZjEtNjUyMy00MzY0LWI0YWUtNzU4N2MzMTBhYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW2cXH1b6ICuTh545Mv+3Q3PF99PiXZtD1v9 Dp+xWUMQA+4S/hOIJ20DgG67FEPYygkDore7A16Fo5DBmbB1Nbpv2zdW2V0wT2ng 3nnt8h5swx/xG+++8SJ0kuxfQBP4TWv5Dws9/HIq+4lbp/Aobeas2I3Jy2hkTmme 11NPBKsWoIuEgKuwOcivP93MB0niLMOYhcnRNouBG5QOJ1J3t5MP/ntqBNr1EI4o NteYIuLahSoRYIGITpxkmyeNnU4BYPqJB8wq9odjZ0GEp4IltCNc8ptvQVVwyjT9 bOKb56uRwEKqLDnG/XqjbFW4htE2yebispyLISLS8mkExW/9FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYY+u7vFSFPrdYgCEps0SzBQvx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTFiZGEwM2EtMmU2Ni0z NWI1LWEwNmQtNjhiOTVjM2YzOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy6GdKMUWv4H06gVljGFc+9XYa86DdtlT5NrO3o6wE96Q9cuoCKqvFj D5P6NuWc0tcyY6p184x+HCniXiS4CMJn/VRWk4RuiwOPG67zTQl7mXoA/AbDkxAc ms1AARlN48O9HWzu7HjnDczM2LVibXmrpgVbOh5WO3mlZ2F8Bp6TFosY7ZDXNEqg oFUU5PvLGKntxL+J+zkN/vKABA59e655TUedHXmi9gfvl1U3OsSe+twyfouvJCBb UUXarYHPmP6lyDZj65OIPopWMhyMh7EbkJY9Gr88/PaXvCwbC66bR+Mz2oz+w/2B 41giG8I3Mt6g9sJrn0EytfibfeTXcBU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:25:52 2025 by rpki-client