$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa File: 8a5ecf25-e2b2-3327-9834-af1bffafca00.roa (raw, json) Hash identifier: cmV4ryeD/IIQ9N6lSt7KqJBM8884lEhGrfVU7r+AXbw= Subject key identifier: 30:E5:5E:43:1C:07:19:19:8A:22:41:BB:7E:88:56:49:AC:AE:0F:40 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30EFA2C04BFFAD7AA6D310 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 34.4.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:ef:a2:c0:4b:ff:ad:7a:a6:d3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=b51dff88-5060-4022-9a9c-aace6ff6a0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:34:a7:c1:61:ee:b7:07:2e:24:f8:16:be:65: b3:ba:c6:ea:2d:20:a8:f0:81:2a:ae:6c:dd:49:d7: 9c:c7:65:0a:4e:87:49:8f:f2:f8:3d:26:94:db:92: e2:31:81:a1:61:7d:0c:31:92:61:d9:44:53:af:88: 38:97:d5:89:86:95:e8:00:e6:99:69:e1:32:e5:b2: 15:57:8b:1c:cc:2d:e7:ab:71:4d:79:91:f4:c3:12: e6:d1:19:f4:fa:3e:3e:1a:38:e8:7e:7b:bf:5f:48: 7b:4b:53:ef:e5:ac:a3:d9:86:2e:b9:b6:59:0b:3f: ac:86:e0:11:1b:d8:63:dc:9c:cf:e2:f9:12:ef:88: 13:c3:63:82:88:59:ff:39:19:31:2e:a5:98:1c:c6: 5c:fd:09:73:4e:8b:e1:f4:61:51:61:ce:ac:d7:3d: eb:61:0b:23:b3:d7:78:65:c4:49:0d:21:1f:65:04: 8e:8f:4d:13:a5:8c:7a:03:73:dc:99:2d:58:bd:df: 9a:ff:51:cc:9f:ad:35:b0:e6:e5:e0:a3:37:cd:b8: 8a:64:18:61:53:cc:d5:44:e5:4d:af:d9:9b:75:2d: 57:5d:b3:e0:67:2a:de:21:70:32:60:e4:ed:1a:b1: 98:cc:98:57:ba:37:f6:80:5c:fa:31:50:5a:d3:1a: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E5:5E:43:1C:07:19:19:8A:22:41:BB:7E:88:56:49:AC:AE:0F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 34.4.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b7:08:16:59:61:f1:8c:08:a0:1b:14:02:be:fc:cc:69:2a: 1d:b3:4a:46:1e:a0:09:63:4c:68:6e:3f:b0:df:83:e7:7c:e7: d9:ef:bc:f4:9f:b7:8e:d9:c3:3c:f4:5a:2a:f4:be:ba:a7:4c: 7b:7b:bc:15:7c:7a:41:6e:bb:0c:ec:36:44:e7:38:50:56:20: cd:05:1a:6f:3a:9c:11:61:5a:14:c3:0f:05:b9:ca:8b:24:a3: 2b:32:17:e0:fa:f3:91:9b:36:33:f5:c6:b7:f1:73:80:b1:60: f8:f7:30:cb:3e:44:c3:9e:e4:68:82:80:eb:5e:5c:70:e8:60: f4:fa:f2:06:03:57:14:d7:93:4a:d5:ec:e1:27:e2:65:54:de: 32:4e:a4:32:88:29:fd:87:00:71:04:d4:5d:09:11:9f:d3:94: c7:ab:ad:f5:a8:2d:37:23:d5:24:b4:67:c3:2a:d2:19:65:ad: 04:fb:aa:1c:88:ed:33:7f:51:46:f1:3c:40:82:42:ff:0e:c9: 30:73:26:5b:54:d4:e6:ef:85:04:25:5a:19:18:7c:69:07:80: 51:c4:7b:3a:29:fb:40:34:a4:2a:28:92:f0:50:ae:fc:09:85: bd:21:29:17:25:29:88:fa:fc:60:a5:b6:d2:e5:bf:9e:f9:c6: 19:72:5b:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMO+iwEv/rXqm0xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk YjUxZGZmODgtNTA2MC00MDIyLTlhOWMtYWFjZTZmZjZhMGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjSnwWHutwcuJPgWvmWzusbqLSCo8IEqrmzd Sdecx2UKTodJj/L4PSaU25LiMYGhYX0MMZJh2URTr4g4l9WJhpXoAOaZaeEy5bIV V4sczC3nq3FNeZH0wxLm0Rn0+j4+Gjjofnu/X0h7S1Pv5ayj2YYuubZZCz+shuAR G9hj3JzP4vkS74gTw2OCiFn/ORkxLqWYHMZc/QlzTovh9GFRYc6s1z3rYQsjs9d4 ZcRJDSEfZQSOj00TpYx6A3PcmS1Yvd+a/1HMn601sObl4KM3zbiKZBhhU8zVROVN r9mbdS1XXbPgZyreIXAyYOTtGrGYzJhXujf2gFz6MVBa0xq+7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDlXkMcBxkZiiJBu36IVkmsrg9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGE1ZWNmMjUtZTJiMi0z MzI3LTk4MzQtYWYxYmZmYWZjYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu3CBZZYfGMCKAbFAK+/MxpKh2zSkYeoAljTGhuP7Dfg+d859nvvPSf t47Zwzz0Wir0vrqnTHt7vBV8ekFuuwzsNkTnOFBWIM0FGm86nBFhWhTDDwW5yosk oysyF+D685GbNjP1xrfxc4CxYPj3MMs+RMOe5GiCgOteXHDoYPT68gYDVxTXk0rV 7OEn4mVU3jJOpDKIKf2HAHEE1F0JEZ/TlMerrfWoLTcj1SS0Z8Mq0hllrQT7qhyI 7TN/UUbxPECCQv8OyTBzJltU1ObvhQQlWhkYfGkHgFHEezop+0A0pCookvBQrvwJ hb0hKRclKYj6/GClttLlv575xhlyW4s= -----END CERTIFICATE-----Generated at Mon Aug 4 16:11:55 2025 by rpki-client