$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/055434fe-69c3-38a3-bc48-639de4c20f6d.roa File: 055434fe-69c3-38a3-bc48-639de4c20f6d.roa (raw, json) Hash identifier: KXWeCbvFhUm7zvGU8+GceQ3rJuwupLKXrSyWYK8RcOc= Subject key identifier: 3C:5E:42:AD:97:0D:51:85:EC:6C:86:DD:47:62:EB:FB:2A:0B:96:D1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A497050C22BA5484B85B6BF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/055434fe-69c3-38a3-bc48-639de4c20f6d.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 15169 IP address blocks: 34.3.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:50:c2:2b:a5:48:4b:85:b6:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=01f4bb32-2bc6-4ca2-9021-a905be4eb340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:62:e7:c8:ec:07:a0:06:83:d8:e4:ea:9f:80: 1c:61:57:31:e7:d4:77:cc:3c:98:98:2e:38:85:c1: 1f:a3:af:3d:56:0a:6c:c6:e3:64:f2:ca:31:78:9c: 11:5d:d2:43:22:0f:23:ad:a4:06:25:8c:15:18:2e: 68:4c:ad:0c:43:31:28:ea:c3:e2:4c:45:3b:1e:13: 2b:d3:6f:81:96:1d:c1:c3:ae:ef:22:8a:e9:0a:49: d4:7a:44:61:ef:a6:9d:69:e8:ae:31:63:f6:c1:8e: 41:f2:f8:f7:a0:dd:cc:db:15:2f:04:a9:08:43:c8: 4f:f5:62:f7:ae:fa:60:4f:5f:8d:38:34:43:f0:47: ac:18:a3:ff:e8:43:4a:f0:b9:8b:5d:51:19:27:59: 53:ea:4e:e7:95:11:ad:f5:52:d5:c8:19:d7:2a:7e: 23:c2:75:9d:a8:8b:b1:e3:bc:88:c9:a4:a6:93:ad: 7c:b9:a4:68:25:c8:af:61:52:69:82:b0:20:ad:99: bf:4a:0e:e1:c9:df:ad:6b:da:a3:76:c4:50:0e:cb: b9:a0:d5:86:d5:88:56:54:5f:14:c7:ef:72:40:e0: 65:d9:7b:0f:8f:12:7f:7c:9e:a2:55:6d:ca:c1:2a: 5a:35:91:c0:08:05:0f:40:b3:43:3f:e6:04:5e:af: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5E:42:AD:97:0D:51:85:EC:6C:86:DD:47:62:EB:FB:2A:0B:96:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/055434fe-69c3-38a3-bc48-639de4c20f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:64:17:cb:3e:3d:7d:30:a7:e0:22:09:78:59:12:af:38:1c: 75:2f:14:66:93:57:07:6f:f9:c6:61:e2:b0:a8:43:fb:69:a9: 09:02:9f:da:5d:a7:0e:4f:08:52:93:70:16:2b:25:8a:92:0c: 2f:f9:6c:69:ab:27:82:20:fe:39:fd:a7:6b:94:74:74:cb:cd: e5:dc:61:a2:48:34:c6:97:ea:ee:0e:56:6a:3c:a0:10:7b:59: 1a:4f:62:fe:f4:39:cd:bd:ae:d9:f8:e9:7e:40:8c:b5:07:d4: a3:6a:c4:95:fd:d2:02:90:c7:0a:8f:68:c6:fb:bb:3f:c8:bf: 4b:93:ff:ef:2b:fa:dd:e5:66:fc:39:1e:f2:64:53:6a:3a:92: ab:b3:d3:e7:66:d7:ca:4d:f6:b6:de:02:aa:39:da:30:bb:fc: b5:e7:63:28:b7:13:3c:95:2f:47:e3:13:16:cf:38:fc:00:0b: 37:07:13:a8:3f:22:46:8d:a8:25:e6:1f:0e:84:fa:e5:33:18: b6:b1:66:c1:8c:89:d6:d0:80:9d:68:83:bf:a2:93:41:14:8c: 1b:cf:da:52:f1:11:17:31:2c:a6:d4:32:d4:34:7a:84:64:0d: d5:aa:1c:13:d4:76:43:a1:5f:d2:eb:03:47:a6:0d:e0:9a:6b: cd:42:33:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcFDCK6VIS4W2vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MDFmNGJiMzItMmJjNi00Y2EyLTkwMjEtYTkwNWJlNGViMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2LnyOwHoAaD2OTqn4AcYVcx59R3zDyYmC44 hcEfo689VgpsxuNk8soxeJwRXdJDIg8jraQGJYwVGC5oTK0MQzEo6sPiTEU7HhMr 02+Blh3Bw67vIorpCknUekRh76adaeiuMWP2wY5B8vj3oN3M2xUvBKkIQ8hP9WL3 rvpgT1+NODRD8EesGKP/6ENK8LmLXVEZJ1lT6k7nlRGt9VLVyBnXKn4jwnWdqIux 47yIyaSmk618uaRoJcivYVJpgrAgrZm/Sg7hyd+ta9qjdsRQDsu5oNWG1YhWVF8U x+9yQOBl2XsPjxJ/fJ6iVW3KwSpaNZHACAUPQLNDP+YEXq8IRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxeQq2XDVGF7GyG3Udi6/sqC5bRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDU1NDM0ZmUtNjljMy0z OGEzLWJjNDgtNjM5ZGU0YzIwZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRkF8s+PX0wp+AiCXhZEq84HHUvFGaTVwdv+cZh4rCoQ/tpqQkCn9pd pw5PCFKTcBYrJYqSDC/5bGmrJ4Ig/jn9p2uUdHTLzeXcYaJINMaX6u4OVmo8oBB7 WRpPYv70Oc29rtn46X5AjLUH1KNqxJX90gKQxwqPaMb7uz/Iv0uT/+8r+t3lZvw5 HvJkU2o6kquz0+dm18pN9rbeAqo52jC7/LXnYyi3EzyVL0fjExbPOPwACzcHE6g/ IkaNqCXmHw6E+uUzGLaxZsGMidbQgJ1og7+ik0EUjBvP2lLxERcxLKbUMtQ0eoRk DdWqHBPUdkOhX9LrA0emDeCaa81CM/A= -----END CERTIFICATE-----Generated at Mon Jun 30 13:34:35 2025 by rpki-client