$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc1b999-7d74-3638-a48d-92624a9e481a.roa File: cfc1b999-7d74-3638-a48d-92624a9e481a.roa (raw, json) Hash identifier: Wf6CjQpjvrVUkduLX7wmDvo2PP9U72w1O4SiyfiZfZU= Subject key identifier: 7E:70:1B:0C:2F:EC:3F:58:91:90:AF:08:70:83:C1:60:63:B4:F7:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AC2E1142DEEAECEC5B6818340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc1b999-7d74-3638-a48d-92624a9e481a.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 15169 IP address blocks: 34.1.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:14:2d:ee:ae:ce:c5:b6:81:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=a43b6bd2-1248-4cf4-90b5-d13432ccf3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:79:fa:8a:19:b0:ab:a4:41:f3:e8:37:ab:bf: fc:a7:21:1d:9a:f1:49:02:3a:d6:4f:49:6d:ca:09: fb:ef:85:90:d0:91:8e:06:f5:85:b7:88:97:1b:e6: f5:ab:ae:9c:84:c5:2e:47:ab:82:5b:38:04:be:09: e4:1c:44:3d:f9:a4:95:68:f8:e3:4f:b4:90:95:eb: 14:66:f2:b7:ba:18:bb:23:44:c1:7a:c3:75:9f:31: ba:5b:ad:56:3a:a6:3a:e9:89:55:1e:a2:2f:b1:54: 14:da:8f:5e:39:9b:d5:9f:33:52:1d:a2:5a:80:53: 1b:cc:a7:cb:fe:d8:82:74:a2:7a:41:44:45:17:21: c3:8b:ba:53:ab:44:77:a3:e3:ed:93:5d:33:65:dd: 27:15:91:c7:7f:25:a9:65:4b:88:f7:b1:6d:ba:f2: d4:0c:4c:a3:f5:dc:2a:d4:52:ee:78:af:d7:21:67: 89:bd:de:9f:0c:a7:f9:93:c2:24:63:01:6c:77:a4: b1:74:5d:e3:94:4b:49:e3:64:be:fa:4e:41:8a:5d: 0f:95:85:76:78:a4:f5:41:1b:9c:30:d4:3e:55:01: 86:2c:ea:97:da:6a:e9:b8:c5:36:e5:15:95:09:8c: a7:4e:7e:21:16:59:7d:3e:f9:8b:c4:69:1d:92:34: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:70:1B:0C:2F:EC:3F:58:91:90:AF:08:70:83:C1:60:63:B4:F7:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc1b999-7d74-3638-a48d-92624a9e481a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:97:e4:75:43:89:fb:cb:a1:00:2e:47:7b:7f:67:3d:1d:39: f1:89:bf:3b:2a:6b:27:da:5b:40:5c:ce:68:6c:1a:ad:d1:6a: e0:cf:6a:64:58:23:fa:a7:ca:20:de:08:88:5a:93:a8:ca:8f: 95:6f:16:58:bb:9f:8b:b5:4e:ae:96:61:28:bf:ee:60:b7:8e: 35:1d:26:a5:7b:2f:de:a6:e9:0f:61:88:51:ee:9d:c2:fa:b7: 10:34:c8:ed:ea:b8:12:cb:f1:6e:44:86:63:74:5a:8f:59:77: 79:ab:38:fb:de:ce:82:dd:92:f2:a5:64:0a:7b:a1:ea:fd:5f: 4e:4e:51:0c:61:e9:03:80:81:b8:a7:11:a6:4b:d9:2c:c4:da: e7:ef:11:6b:f3:f3:e5:e5:f5:ec:d8:2d:4a:bb:2d:08:4a:42: a0:74:32:73:a7:d9:35:7d:74:78:d2:11:4d:45:3f:3c:12:8b: ad:60:40:63:15:1f:73:80:cb:b2:0e:07:12:00:56:98:89:55: 1a:12:a6:03:d2:67:00:0a:68:c3:9a:f6:9f:47:0e:55:c5:87: 08:c1:ee:cb:48:c0:56:d9:a0:56:e6:14:a7:d1:c9:56:ea:e1: 70:f7:33:5a:fb:16:b1:31:4b:f5:c5:d4:9a:b4:40:0a:d5:4d: ee:9c:da:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RQt7q7OxbaBg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTQzYjZiZDItMTI0OC00Y2Y0LTkwYjUtZDEzNDMyY2NmM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHn6ihmwq6RB8+g3q7/8pyEdmvFJAjrWT0lt ygn774WQ0JGOBvWFt4iXG+b1q66chMUuR6uCWzgEvgnkHEQ9+aSVaPjjT7SQlesU ZvK3uhi7I0TBesN1nzG6W61WOqY66YlVHqIvsVQU2o9eOZvVnzNSHaJagFMbzKfL /tiCdKJ6QURFFyHDi7pTq0R3o+Ptk10zZd0nFZHHfyWpZUuI97FtuvLUDEyj9dwq 1FLueK/XIWeJvd6fDKf5k8IkYwFsd6SxdF3jlEtJ42S++k5Bil0PlYV2eKT1QRuc MNQ+VQGGLOqX2mrpuMU25RWVCYynTn4hFll9PvmLxGkdkjQYAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5wGwwv7D9YkZCvCHCDwWBjtPc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZjMWI5OTktN2Q3NC0z NjM4LWE0OGQtOTI2MjRhOWU0ODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWX5HVDifvLoQAuR3t/Zz0dOfGJvzsqayfaW0BczmhsGq3RauDPamRY I/qnyiDeCIhak6jKj5VvFli7n4u1Tq6WYSi/7mC3jjUdJqV7L96m6Q9hiFHuncL6 txA0yO3quBLL8W5EhmN0Wo9Zd3mrOPvezoLdkvKlZAp7oer9X05OUQxh6QOAgbin EaZL2SzE2ufvEWvz8+Xl9ezYLUq7LQhKQqB0MnOn2TV9dHjSEU1FPzwSi61gQGMV H3OAy7IOBxIAVpiJVRoSpgPSZwAKaMOa9p9HDlXFhwjB7stIwFbZoFbmFKfRyVbq 4XD3M1r7FrExS/XF1Jq0QArVTe6c2oA= -----END CERTIFICATE-----Generated at Wed Aug 6 19:31:31 2025 by rpki-client