$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa File: 5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa (raw, json) Hash identifier: nivpih25gXRgKkT8tdMEzFF0JIxlv1dHi/3e4N6biFY= Subject key identifier: B7:E9:6B:DA:87:99:C7:6A:C8:23:FF:D7:F7:9C:39:02:7A:84:EA:45 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AE46133AC224989F653EC9300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 19527 IP address blocks: 34.1.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:33:ac:22:49:89:f6:53:ec:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=a0c770bd-a001-4d26-ab5f-f2ef4f66a7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7d:e0:d9:ce:83:8b:d3:cb:6d:c2:57:9f:95: a4:76:40:0a:c4:93:13:a4:e2:15:0c:b4:f6:bb:0a: bd:0f:c4:97:d0:47:34:57:28:32:b6:5d:08:45:a5: 0f:b7:e1:1c:ca:54:1b:af:6f:1c:3e:e6:fb:ad:8a: 6f:a6:98:79:34:58:b2:3a:87:43:08:ff:50:ea:71: 02:7c:1f:86:9a:cd:3e:b5:85:9a:20:f7:09:e6:ae: 47:72:b0:7f:f2:00:75:44:34:a8:3d:b7:bb:25:c2: 24:0f:b2:5e:71:6c:1e:b2:83:00:c7:0a:4c:23:af: 6b:5e:20:f1:84:54:c9:ea:87:dd:6a:97:7b:21:76: 31:ee:c6:0a:f1:80:af:ae:fd:93:c2:a8:1a:79:10: 99:11:61:a5:f2:c4:a4:d8:50:0e:2a:e5:db:a5:4b: 49:fb:21:43:da:b0:bc:2e:69:10:34:1e:3d:ff:d5: 9b:ab:a2:9a:9f:bd:7c:6b:0c:af:82:60:0a:63:4b: dd:d6:c2:fe:52:27:df:d9:34:02:ec:49:4b:89:af: d8:b4:03:bf:18:ca:fc:0c:62:c8:62:24:cf:a5:d5: 5a:32:57:69:b0:6c:71:5b:e6:ed:17:95:26:b3:a9: c7:c5:16:b4:ea:4d:5d:bd:c0:79:d2:ed:e7:c5:fd: 6a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E9:6B:DA:87:99:C7:6A:C8:23:FF:D7:F7:9C:39:02:7A:84:EA:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a2:e8:08:3c:14:c8:03:0b:68:55:89:94:ae:40:0b:8b:3c: 8b:5f:d8:7a:d8:48:04:54:29:fe:64:6c:6e:63:06:a6:dc:fd: 38:a5:6d:96:f6:6a:f7:ed:5e:95:94:f9:a5:6f:df:5d:49:53: aa:ff:ae:d7:06:de:c4:e6:b9:1e:00:81:31:06:77:97:70:0f: 62:31:41:29:f6:9a:85:74:c6:ad:0d:c5:9d:7d:cb:0c:34:08: dd:04:bc:c8:17:08:cb:47:82:5c:c8:4b:df:14:5b:2c:03:ec: 21:f0:4f:26:67:d3:93:f1:65:a8:e6:7f:b0:b3:70:6e:91:25: 27:57:d4:86:4d:95:78:1e:a9:e4:f4:48:b8:4b:be:85:a5:f3: 3f:04:d9:e4:72:ee:24:3c:b6:7b:6f:27:a8:01:16:b1:8b:22: d9:4f:4d:12:c3:19:ec:6e:8c:98:32:25:4e:18:5b:e5:b0:ee: e1:e1:2a:9c:dd:a1:21:4f:24:1d:cf:05:28:91:34:30:30:30: b6:78:61:68:a8:5c:ce:0e:61:d1:19:64:d5:5a:28:eb:fb:a4: e3:c7:7f:3c:ee:13:57:99:58:55:d3:55:0a:8d:06:9d:3f:cd: 7f:22:e4:7c:75:95:96:dd:ac:cd:1e:1c:8b:ea:83:7f:34:a2: 95:70:2c:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYTOsIkmJ9lPskwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YTBjNzcwYmQtYTAwMS00ZDI2LWFiNWYtZjJlZjRmNjZhN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH3g2c6Di9PLbcJXn5WkdkAKxJMTpOIVDLT2 uwq9D8SX0Ec0Vygytl0IRaUPt+EcylQbr28cPub7rYpvpph5NFiyOodDCP9Q6nEC fB+Gms0+tYWaIPcJ5q5HcrB/8gB1RDSoPbe7JcIkD7JecWwesoMAxwpMI69rXiDx hFTJ6ofdapd7IXYx7sYK8YCvrv2TwqgaeRCZEWGl8sSk2FAOKuXbpUtJ+yFD2rC8 LmkQNB49/9Wbq6Kan718awyvgmAKY0vd1sL+Uiff2TQC7ElLia/YtAO/GMr8DGLI YiTPpdVaMldpsGxxW+btF5Ums6nHxRa06k1dvcB50u3nxf1qXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfpa9qHmcdqyCP/1/ecOQJ6hOpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWJlYTIyNDEtNGYwNC0z NGM4LWJkOGItNWE4ZTQzNTVhNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOi6Ag8FMgDC2hViZSuQAuLPItf2HrYSARUKf5kbG5jBqbc/TilbZb2 avftXpWU+aVv311JU6r/rtcG3sTmuR4AgTEGd5dwD2IxQSn2moV0xq0NxZ19yww0 CN0EvMgXCMtHglzIS98UWywD7CHwTyZn05PxZajmf7CzcG6RJSdX1IZNlXgeqeT0 SLhLvoWl8z8E2eRy7iQ8tntvJ6gBFrGLItlPTRLDGexujJgyJU4YW+Ww7uHhKpzd oSFPJB3PBSiRNDAwMLZ4YWioXM4OYdEZZNVaKOv7pOPHfzzuE1eZWFXTVQqNBp0/ zX8i5Hx1lZbdrM0eHIvqg380opVwLOk= -----END CERTIFICATE-----Generated at Sun Aug 24 01:10:53 2025 by rpki-client