$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa File: a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa (raw, json) Hash identifier: MBkXRXct/99sdtEsB1TnqayLJwRb7aeozVtIHGsP3oY= Subject key identifier: 4A:B9:D6:6C:E9:44:72:B5:05:16:AA:56:02:F0:F4:DC:5D:36:A6:6F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBA60E6EE8BE4A8565D600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 34.3.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a6:0e:6e:e8:be:4a:85:65:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=42156b3f-7736-462a-9e92-3beb51286e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:8a:d9:04:4f:53:55:09:e2:8d:78:2d:52: 61:6e:e1:43:37:1c:6b:c3:04:24:fd:bf:a8:31:f4: 05:0f:4b:0d:2a:10:62:fb:63:be:c4:00:1e:2a:9f: dc:00:05:32:2b:1c:b0:98:a9:c3:66:00:91:5e:95: 8d:b4:8f:c9:71:f9:22:19:10:ba:b9:0d:33:e3:a3: b6:78:d0:f8:8b:14:73:d6:99:96:6e:1f:0e:99:f8: 27:65:1b:9d:28:5a:16:28:d0:68:5d:d1:dc:47:fc: 39:e4:e0:1d:4a:71:09:ac:11:64:bb:b8:50:0c:ed: 90:0e:b4:21:27:33:00:33:4b:bb:9b:6c:2c:82:8c: 29:a0:dc:f5:c2:15:e7:8c:60:78:0c:55:38:7a:e4: c5:cd:16:7c:c3:96:d7:cc:4f:76:a7:b9:79:78:e6: e2:1a:2d:95:a9:53:53:f2:e4:9a:ec:5a:bb:34:d7: 42:3e:bd:68:54:59:7e:b8:c0:e6:1b:97:f8:5d:bf: 01:c7:36:e8:cc:66:2a:66:6b:56:20:cd:96:a7:b3: 55:b8:10:50:66:62:e5:3b:f4:9b:a9:41:1d:58:33: a2:84:90:47:01:77:44:9a:4b:ef:cb:d9:a1:a8:d1: 32:1b:9b:05:78:9a:11:26:38:3d:38:cd:a0:62:69: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B9:D6:6C:E9:44:72:B5:05:16:AA:56:02:F0:F4:DC:5D:36:A6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 34.3.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8e:e1:6b:7f:f1:d5:48:d8:9f:19:6e:42:bb:21:0f:96:73: 5f:33:8b:44:fe:b0:f7:5d:40:b5:75:6f:7f:15:b0:3c:c9:2d: 52:ac:5c:52:3f:8f:9a:14:e4:9d:c9:b9:19:91:fd:c9:b2:a6: 95:58:07:5d:d0:5a:8a:01:c6:4c:fa:2d:fa:45:a2:93:6f:d0: b5:17:4d:e5:24:2e:2e:40:ec:55:1a:31:81:f6:99:b3:20:42: 84:f3:a8:c7:51:af:35:86:35:eb:4e:20:fb:f8:03:f6:3c:05: 01:ab:3b:00:6f:13:2a:91:cd:15:f5:69:23:74:24:56:63:1d: 2b:5f:ae:e7:05:1d:d1:ac:c4:8a:5c:0c:4d:3c:ce:bb:83:e3: 2c:68:13:23:46:98:36:a2:15:d0:95:9d:0d:54:10:95:5b:c0: 1f:ba:d3:10:8c:e7:a3:56:d4:ef:eb:bc:e3:2d:47:41:b9:a5: 9d:fb:37:65:84:99:c7:0e:d3:6e:cb:58:10:d3:65:e8:c8:24: f9:d8:32:46:ec:f6:a0:2b:c6:69:e9:99:aa:bb:c4:f2:49:99: d4:fb:fd:eb:b6:2f:33:6e:3a:a5:e6:bf:be:8f:58:28:17:bf: 4b:cf:6f:de:b8:0b:c8:e7:0b:a7:60:8d:4a:0c:79:51:df:ed: 49:d7:02:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26YObui+SoVl1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDIxNTZiM2YtNzczNi00NjJhLTllOTItM2JlYjUxMjg2ZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/SK2QRPU1UJ4o14LVJhbuFDNxxrwwQk/b+o MfQFD0sNKhBi+2O+xAAeKp/cAAUyKxywmKnDZgCRXpWNtI/JcfkiGRC6uQ0z46O2 eND4ixRz1pmWbh8OmfgnZRudKFoWKNBoXdHcR/w55OAdSnEJrBFku7hQDO2QDrQh JzMAM0u7m2wsgowpoNz1whXnjGB4DFU4euTFzRZ8w5bXzE92p7l5eObiGi2VqVNT 8uSa7Fq7NNdCPr1oVFl+uMDmG5f4Xb8BxzbozGYqZmtWIM2Wp7NVuBBQZmLlO/Sb qUEdWDOihJBHAXdEmkvvy9mhqNEyG5sFeJoRJjg9OM2gYmmY3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq51mzpRHK1BRaqVgLw9NxdNqZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA5NmUzYmMtZThhNi0z MTk2LWFmYWYtYTIwYWNmNTM3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuO4Wt/8dVI2J8ZbkK7IQ+Wc18zi0T+sPddQLV1b38VsDzJLVKsXFI/ j5oU5J3JuRmR/cmyppVYB13QWooBxkz6LfpFopNv0LUXTeUkLi5A7FUaMYH2mbMg QoTzqMdRrzWGNetOIPv4A/Y8BQGrOwBvEyqRzRX1aSN0JFZjHStfrucFHdGsxIpc DE08zruD4yxoEyNGmDaiFdCVnQ1UEJVbwB+60xCM56NW1O/rvOMtR0G5pZ37N2WE mccO027LWBDTZejIJPnYMkbs9qArxmnpmaq7xPJJmdT7/eu2LzNuOqXmv76PWCgX v0vPb964C8jnC6dgjUoMeVHf7UnXAmY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:46 2025 by rpki-client