$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa File: 5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa (raw, json) Hash identifier: iO1MuJCfZT0V22PaWyS99H4uW+Ak+nm0QbyTc2kYtS8= Subject key identifier: 1A:36:61:52:12:AC:C9:10:F1:55:88:81:0D:4A:9B:8E:32:39:70:1C Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F4328584AADF1210706221E01FE12DEC0 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 10317 IP address blocks: 204.155.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:21:07:06:22:1e:01:fe:12:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=5b58e913-83da-4423-9248-bbf0ba2e87b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:cb:66:41:c2:3a:9a:10:d9:3f:cb:36:99: 4b:75:cb:65:ce:0f:bf:80:df:49:f7:77:c6:de:20: 75:1c:8b:6d:d9:06:b7:b1:23:28:3d:56:a0:10:a3: b9:8a:d8:9b:a4:cf:eb:8f:ed:45:1f:a8:3f:8a:3e: b9:08:22:45:8a:3e:d6:5c:c5:94:91:19:85:06:53: 42:39:1d:04:bd:ec:7d:91:9b:2b:73:6c:7a:c5:63: 7a:03:8c:b4:b6:ae:47:9c:6e:48:ed:58:0b:2d:98: 02:4c:19:42:67:9c:c3:c3:be:51:32:eb:2d:fa:68: e3:2c:04:04:bb:95:84:bf:1b:d0:cc:0d:02:6a:1f: 41:21:1b:80:60:55:1c:68:c2:aa:ec:4d:8a:99:fc: 54:3e:7f:25:81:36:73:50:6d:5a:a1:96:f8:26:88: 81:1e:75:cb:80:29:46:88:f5:ec:6e:0c:86:21:cf: cf:60:50:ae:2e:0a:de:63:6a:43:f0:ef:a9:0b:f8: 85:71:d5:29:46:1f:bc:93:67:d0:df:0d:cc:df:9e: c2:35:b2:70:02:da:dd:da:e0:3b:24:af:1e:05:59: 83:ce:11:31:f3:72:22:7d:19:96:0b:4d:bf:f5:58: f3:11:25:22:7e:09:35:91:87:b6:b9:cb:8f:a5:2e: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:36:61:52:12:AC:C9:10:F1:55:88:81:0D:4A:9B:8E:32:39:70:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:82:7b:a1:9c:f7:4d:13:e7:c2:3f:52:9d:66:61:b2:97:a9: 1e:f0:3e:ad:55:10:63:08:57:71:c4:2b:1e:34:5d:0a:43:d3: 08:bb:0d:95:d8:27:68:18:3f:37:df:58:64:ec:3c:dd:b1:5e: 1a:af:6e:11:c8:64:1a:17:a6:50:bf:76:27:86:b8:b4:f1:20: 59:cc:75:f3:bc:ba:05:c6:42:8b:4a:53:17:1c:39:ca:41:cb: b1:07:68:db:8e:4c:4f:44:30:7d:1a:c4:7c:fa:f4:30:4d:25: ec:2d:e1:7f:64:ea:cb:76:fd:cf:cd:55:84:cc:12:36:34:09: f8:6d:92:c1:63:96:2b:8d:8a:d0:90:43:80:15:ca:d5:03:12: f4:d3:27:11:f5:53:8d:35:af:05:2e:ec:20:05:22:2a:43:10: c0:f0:fc:ca:a6:28:9d:c5:10:78:36:f7:c3:70:16:af:b3:10: ec:df:11:ad:76:7a:c1:1a:c3:ec:ef:2f:f3:03:39:0f:59:cf: 38:5c:e9:05:99:60:c7:cc:b3:b3:d2:c5:7b:8d:94:b2:8b:72: 38:65:c5:c6:7d:be:37:9c:f2:dd:e0:23:16:b7:93:ac:02:04: 56:49:b6:dd:39:91:5b:3e:c8:88:51:07:ae:53:04:06:45:2d: 31:57:21:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SEHBiIeAf4S3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NWI1OGU5MTMtODNkYS00NDIzLTkyNDgtYmJmMGJhMmU4N2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe3LZkHCOpoQ2T/LNplLdctlzg+/gN9J93fG 3iB1HItt2Qa3sSMoPVagEKO5itibpM/rj+1FH6g/ij65CCJFij7WXMWUkRmFBlNC OR0Evex9kZsrc2x6xWN6A4y0tq5HnG5I7VgLLZgCTBlCZ5zDw75RMust+mjjLAQE u5WEvxvQzA0Cah9BIRuAYFUcaMKq7E2KmfxUPn8lgTZzUG1aoZb4JoiBHnXLgClG iPXsbgyGIc/PYFCuLgreY2pD8O+pC/iFcdUpRh+8k2fQ3w3M357CNbJwAtrd2uA7 JK8eBVmDzhEx83IifRmWC02/9VjzESUifgk1kYe2ucuPpS5edwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo2YVISrMkQ8VWIgQ1Km44yOXAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvNTY5NGFmMDQtYmZkYS0z MTJjLTg0ZDUtOGNmYTVjNmQ4ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6Ce6Gc900T58I/Up1mYbKXqR7wPq1VEGMIV3HEKx40XQpD0wi7DZXY J2gYPzffWGTsPN2xXhqvbhHIZBoXplC/dieGuLTxIFnMdfO8ugXGQotKUxccOcpB y7EHaNuOTE9EMH0axHz69DBNJewt4X9k6st2/c/NVYTMEjY0CfhtksFjliuNitCQ Q4AVytUDEvTTJxH1U401rwUu7CAFIipDEMDw/MqmKJ3FEHg298NwFq+zEOzfEa12 esEaw+zvL/MDOQ9Zzzhc6QWZYMfMs7PSxXuNlLKLcjhlxcZ9vjec8t3gIxa3k6wC BFZJtt05kVs+yIhRB65TBAZFLTFXIWE= -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:42 2025 by rpki-client