$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2997db3d-8ce0-3327-ba82-ab8000cf6e48.roa File: 2997db3d-8ce0-3327-ba82-ab8000cf6e48.roa (raw, json) Hash identifier: wXrjUui7/F2gcD51HT1VR2bLypdYE/ki+vImV4fNa0o= Subject key identifier: 6A:5C:88:E1:81:6E:41:34:7A:99:24:DF:A0:EA:66:B3:2D:CB:12:D9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A497052028BD246F766366C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2997db3d-8ce0-3327-ba82-ab8000cf6e48.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 15169 IP address blocks: 34.3.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:52:02:8b:d2:46:f7:66:36:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=bb8a4234-bdef-4a55-ac24-126e8d43d795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:f0:52:f8:49:ab:3a:98:f3:c7:21:ce:79: f9:2d:16:42:f5:72:50:f8:f4:31:b7:29:a8:ce:62: 73:68:87:75:cd:ad:f0:8b:85:f8:84:b5:f1:92:29: 21:cb:57:44:2e:15:38:d3:73:38:65:38:bf:af:37: b0:fa:2a:e4:3d:df:1f:81:04:d3:13:6d:9f:5e:04: 5f:8f:4d:b6:3b:ed:81:71:b9:01:51:3b:bf:df:49: c0:9e:5f:9c:58:20:ee:0a:76:1d:68:af:e7:a3:ab: f4:cb:63:90:a1:59:75:da:63:43:3d:b6:30:29:e2: 79:7a:a3:db:88:19:9e:0d:83:09:09:a6:d0:ca:f5: 4b:2e:20:c2:60:55:96:1c:c4:76:3f:82:27:b7:63: 01:e2:18:fe:89:df:fc:e0:87:35:0d:ef:38:51:7a: b4:1f:11:86:d5:8b:ef:69:09:91:68:39:95:78:87: b9:bf:23:02:15:ce:85:94:5c:4b:2b:71:53:f2:a5: 24:89:a1:93:06:ee:54:5d:b4:79:5c:20:34:4c:70: 67:0a:39:db:2d:10:1b:92:9c:93:e1:8e:7a:67:70: 7e:95:75:e7:ea:57:03:6e:71:67:f8:9f:5e:06:60: b5:c8:74:39:c3:25:37:29:a2:ab:6e:5d:31:29:ff: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5C:88:E1:81:6E:41:34:7A:99:24:DF:A0:EA:66:B3:2D:CB:12:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2997db3d-8ce0-3327-ba82-ab8000cf6e48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:51:86:b7:de:c4:8e:18:93:e3:64:88:f1:97:d3:97:25:e9: 81:9a:8f:b5:15:b2:67:9a:f2:4b:7f:c3:c3:84:1f:8f:4f:d2: 4e:98:72:88:00:53:32:c2:a0:6f:7a:c0:98:20:01:ca:00:66: 3e:90:07:2f:a1:a7:6c:10:52:59:b8:13:ef:9a:10:f4:ca:39: 1f:1b:4b:68:0e:f0:be:6e:7c:6b:52:7f:b6:26:c6:f9:0a:b7: 37:db:bf:6e:a0:67:6a:c2:8a:f5:32:a2:6b:3e:b6:84:26:f1: a9:69:68:ad:2a:12:04:c3:7d:ca:ee:8a:29:6b:f8:ad:ac:08: 95:d5:85:da:80:d6:d8:b3:7f:95:3b:10:1a:14:f3:80:e8:82: 04:ff:84:87:e9:04:45:72:39:66:bd:3f:b5:2c:5c:dd:00:72: 23:3f:ad:31:72:e1:f5:c8:86:02:a5:84:13:f6:f6:dc:12:3e: 51:27:bf:20:b5:6a:67:37:b9:f2:97:73:99:37:46:e1:85:45: c4:9d:62:8a:ea:28:78:03:a7:4d:a2:36:f0:3e:80:60:95:4e: ea:21:0f:fe:9b:bd:a2:3a:54:4a:98:fe:6f:1c:84:de:e4:ac: 9d:5c:83:6a:c8:d9:50:18:6e:63:ca:8a:f7:f4:4a:f2:30:92: 7b:c6:53:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcFICi9JG92Y2bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YmI4YTQyMzQtYmRlZi00YTU1LWFjMjQtMTI2ZThkNDNkNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm13wUvhJqzqY88chznn5LRZC9XJQ+PQxtymo zmJzaId1za3wi4X4hLXxkikhy1dELhU403M4ZTi/rzew+irkPd8fgQTTE22fXgRf j022O+2BcbkBUTu/30nAnl+cWCDuCnYdaK/no6v0y2OQoVl12mNDPbYwKeJ5eqPb iBmeDYMJCabQyvVLLiDCYFWWHMR2P4Int2MB4hj+id/84Ic1De84UXq0HxGG1Yvv aQmRaDmVeIe5vyMCFc6FlFxLK3FT8qUkiaGTBu5UXbR5XCA0THBnCjnbLRAbkpyT 4Y56Z3B+lXXn6lcDbnFn+J9eBmC1yHQ5wyU3KaKrbl0xKf8D2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpciOGBbkE0epkk36DqZrMtyxLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjk5N2RiM2QtOGNlMC0z MzI3LWJhODItYWI4MDAwY2Y2ZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNRhrfexI4Yk+NkiPGX05cl6YGaj7UVsmea8kt/w8OEH49P0k6YcogA UzLCoG96wJggAcoAZj6QBy+hp2wQUlm4E++aEPTKOR8bS2gO8L5ufGtSf7YmxvkK tzfbv26gZ2rCivUyoms+toQm8alpaK0qEgTDfcruiilr+K2sCJXVhdqA1tizf5U7 EBoU84DoggT/hIfpBEVyOWa9P7UsXN0AciM/rTFy4fXIhgKlhBP29twSPlEnvyC1 amc3ufKXc5k3RuGFRcSdYorqKHgDp02iNvA+gGCVTuohD/6bvaI6VEqY/m8chN7k rJ1cg2rI2VAYbmPKivf0SvIwknvGU2w= -----END CERTIFICATE-----Generated at Tue Jul 1 22:18:44 2025 by rpki-client