$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25473d4e-87e9-3317-b3de-2feb469dabde.roa File: 25473d4e-87e9-3317-b3de-2feb469dabde.roa (raw, json) Hash identifier: SmhSQn0mjr0GujdxCQ+ATeFKhpbN6fDA52+iLtXrdYU= Subject key identifier: 7A:31:37:38:AC:83:2C:99:31:A7:31:F0:AB:B1:74:2E:4F:81:73:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A4970509CC3BBC70EEDD2CA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25473d4e-87e9-3317-b3de-2feb469dabde.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 19527 IP address blocks: 34.3.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:50:9c:c3:bb:c7:0e:ed:d2:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=0f9a8131-1096-40c7-896d-ed4f19a9f384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:a8:23:b2:d8:0f:a5:d1:31:df:ab:1a:6b: 76:83:95:8c:a3:1c:4b:81:77:ea:a4:3e:1a:8a:1d: e3:63:1a:57:fb:78:ab:cd:ba:c6:06:a2:2e:f4:cd: 1a:19:ec:e6:ad:49:ed:1f:a8:e2:df:79:9f:f7:9f: ed:5f:1b:e9:e0:7c:87:a1:7f:c0:74:59:52:8d:c3: 0d:4d:55:8d:9a:73:44:21:07:8c:76:6f:29:27:af: ef:00:8e:00:99:75:86:f2:5e:b3:7b:4b:d5:33:d3: 7e:82:a8:8a:5f:ff:f0:0c:95:c1:22:f0:37:46:95: fb:7e:c7:78:cf:47:77:b0:ee:5b:07:55:8d:c7:05: 57:9b:8a:ec:3a:38:b5:8a:37:ee:9f:17:e1:bc:9c: 24:ab:e8:1f:ea:5e:ac:03:51:c2:6b:d4:ab:cc:5e: cb:cf:da:d7:d5:3e:fa:ac:06:2f:2d:0d:5d:22:4a: a9:8e:51:8e:f1:a1:d5:35:21:6c:97:98:12:ad:51: ba:b5:2e:28:0d:33:33:40:01:14:47:94:d1:52:87: 02:48:9d:11:0b:6f:c5:23:f7:15:17:65:f8:24:ce: 74:fc:fe:cb:4c:01:b1:41:47:ff:87:87:2e:e8:96: ea:23:8a:38:69:56:f5:f9:0d:d1:8a:06:5f:78:a0: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:31:37:38:AC:83:2C:99:31:A7:31:F0:AB:B1:74:2E:4F:81:73:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25473d4e-87e9-3317-b3de-2feb469dabde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ce:00:22:d4:67:1f:41:28:b2:8a:19:ce:01:14:e7:7d:4b: 75:21:83:2c:8a:a4:cf:93:39:8a:a5:c9:ab:01:96:27:b8:9d: e0:2e:0c:27:04:52:c5:4c:f4:13:0e:4d:ce:91:c0:28:92:29: 82:60:c9:26:f9:2b:1f:82:cc:74:28:dd:70:de:20:08:ed:1d: eb:e5:e9:f3:72:5f:ac:5c:1a:e1:2f:e1:dd:48:88:ac:2d:21: ae:ec:4c:a0:28:f5:65:86:18:af:99:3b:b5:3c:16:57:f0:09: 9b:4f:01:86:40:14:bd:95:cb:44:fa:23:93:df:d3:a1:a1:f4: b3:ad:08:37:cc:6d:d2:42:b2:26:3d:85:f8:1a:56:ba:9f:35: 51:0f:c7:0d:de:38:f1:ab:8f:25:56:cf:5f:cc:91:c9:1a:8f: 46:55:f9:be:06:c7:ac:2f:d2:a1:b0:96:66:7c:5e:bb:e4:68: 34:bc:82:25:c0:e3:bd:f1:c4:8f:6e:68:e5:9f:35:34:b0:2e: ef:0f:86:b1:48:cd:0f:6e:b9:80:01:82:61:8e:2f:ba:f1:f2: 8b:11:6f:68:58:78:93:e8:92:84:3d:12:7f:f3:b1:16:6e:a8: 4b:c9:f4:35:d7:85:82:6d:c3:39:fc:40:55:f2:ba:31:82:e2: cf:f5:8d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcFCcw7vHDu3SyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MGY5YTgxMzEtMTA5Ni00MGM3LTg5NmQtZWQ0ZjE5YTlmMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8GoI7LYD6XRMd+rGmt2g5WMoxxLgXfqpD4a ih3jYxpX+3irzbrGBqIu9M0aGezmrUntH6ji33mf95/tXxvp4HyHoX/AdFlSjcMN TVWNmnNEIQeMdm8pJ6/vAI4AmXWG8l6ze0vVM9N+gqiKX//wDJXBIvA3RpX7fsd4 z0d3sO5bB1WNxwVXm4rsOji1ijfunxfhvJwkq+gf6l6sA1HCa9SrzF7Lz9rX1T76 rAYvLQ1dIkqpjlGO8aHVNSFsl5gSrVG6tS4oDTMzQAEUR5TRUocCSJ0RC2/FI/cV F2X4JM50/P7LTAGxQUf/h4cu6JbqI4o4aVb1+Q3RigZfeKCPEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoxNzisgyyZMacx8KuxdC5PgXPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjU0NzNkNGUtODdlOS0z MzE3LWIzZGUtMmZlYjQ2OWRhYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3OACLUZx9BKLKKGc4BFOd9S3UhgyyKpM+TOYqlyasBlie4neAuDCcE UsVM9BMOTc6RwCiSKYJgySb5Kx+CzHQo3XDeIAjtHevl6fNyX6xcGuEv4d1IiKwt Ia7sTKAo9WWGGK+ZO7U8FlfwCZtPAYZAFL2Vy0T6I5Pf06Gh9LOtCDfMbdJCsiY9 hfgaVrqfNVEPxw3eOPGrjyVWz1/Mkckaj0ZV+b4Gx6wv0qGwlmZ8XrvkaDS8giXA 473xxI9uaOWfNTSwLu8PhrFIzQ9uuYABgmGOL7rx8osRb2hYeJPokoQ9En/zsRZu qEvJ9DXXhYJtwzn8QFXyujGC4s/1jdc= -----END CERTIFICATE-----Generated at Tue Jul 1 19:08:36 2025 by rpki-client