$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68bf43aa-d432-3de9-8b80-6726c9e05884.roa File: 68bf43aa-d432-3de9-8b80-6726c9e05884.roa (raw, json) Hash identifier: jH9pxGt8okXEJY7kO1D12/5XhuGtpbjqHehZ83PnQ/I= Subject key identifier: F4:16:2C:6D:B7:14:59:40:75:03:0D:CC:82:E7:F0:08:DE:28:11:31 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AE2FBC6B975752202BBA89E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68bf43aa-d432-3de9-8b80-6726c9e05884.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 396982 IP address blocks: 34.3.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c6:b9:75:75:22:02:bb:a8:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=c1157b3b-a3bc-4214-a713-9e06f4c189d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:b1:2f:1d:c1:7c:76:16:47:55:1f:d1:de: 0f:bd:f0:8f:17:59:b0:3b:a2:10:2f:68:63:2d:34: d0:d8:0e:4d:78:58:88:05:0a:63:84:71:9e:96:24: 50:26:5e:7c:f7:61:27:92:a1:2f:95:ef:0b:95:75: 14:65:5b:90:4b:6a:4d:4f:cc:f5:6d:68:14:b3:b2: f6:84:4f:64:35:55:ab:4e:b0:f7:df:a7:03:16:8f: f6:a5:02:0d:12:fc:ad:b5:90:18:c8:53:67:ad:3f: 6d:37:3d:58:d1:8d:7c:03:fd:94:54:84:dd:43:47: 8d:64:6e:da:7d:01:e5:10:53:6f:0e:fd:f0:b1:d0: 93:63:e7:ac:2f:db:02:ba:5d:43:99:45:df:f1:1c: 6f:3a:3b:39:13:85:16:59:14:fd:89:c3:c2:5d:c7: 0e:a0:4a:30:71:00:40:cf:67:83:c6:2f:cd:14:64: 1c:db:5e:dd:90:d7:01:d7:ab:bc:6e:aa:91:52:75: ea:ba:26:e5:87:17:7c:ba:19:49:92:3f:9a:4d:30: c5:6e:e9:f2:76:00:61:b6:5b:9a:b8:8d:ec:7f:01: 09:19:90:f2:20:5f:b0:03:bc:6b:ef:3c:c6:98:9b: 7e:c9:5e:78:a1:fb:bc:e1:25:0f:23:25:b4:cf:b1: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:16:2C:6D:B7:14:59:40:75:03:0D:CC:82:E7:F0:08:DE:28:11:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68bf43aa-d432-3de9-8b80-6726c9e05884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:81:c9:d0:07:8e:00:f8:30:7c:72:07:3b:73:d9:c9:8f:89: 5a:e4:bc:bc:9e:2a:92:fb:db:cd:76:2e:25:38:24:07:e3:0a: 5c:f1:42:70:21:cd:db:9f:fa:ed:4e:48:09:7a:18:17:44:d7: 1c:09:75:b3:ca:19:8d:20:1a:19:d3:82:fe:68:80:55:0a:32: b0:82:73:ef:f1:aa:7a:82:64:fb:4b:78:bc:9a:cf:4e:74:8e: 0b:a8:ef:9e:aa:93:e2:fd:09:f7:3b:72:a6:b4:73:89:7b:a5: 04:2e:87:c4:32:45:95:2d:3e:84:a1:f8:d0:a5:a4:91:88:5e: 67:d2:f9:3f:f9:c1:ac:e3:61:dc:2f:4a:57:b6:d7:33:66:c2: 6b:33:b0:ee:48:36:01:84:ce:4c:65:49:b0:72:0a:e1:b7:c1: 28:17:3a:2f:a0:69:78:63:3b:62:32:7a:2b:25:97:1b:7d:b4: 65:0b:2c:48:6c:55:ce:42:c1:3b:fa:4f:d5:c9:16:92:a6:67: 7d:49:81:28:e3:b1:4c:5f:36:5d:15:e8:2a:9c:84:cd:4e:d3: 09:93:93:38:f2:57:6e:8b:d5:9c:11:d3:e1:99:c5:f7:b3:5f: 36:45:2c:ab:6b:98:3b:1e:12:40:64:b0:2f:fd:79:38:0e:3d: c3:0b:0d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8a5dXUiAruonoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk YzExNTdiM2ItYTNiYy00MjE0LWE3MTMtOWUwNmY0YzE4OWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRGxLx3BfHYWR1Uf0d4PvfCPF1mwO6IQL2hj LTTQ2A5NeFiIBQpjhHGeliRQJl5892EnkqEvle8LlXUUZVuQS2pNT8z1bWgUs7L2 hE9kNVWrTrD336cDFo/2pQINEvyttZAYyFNnrT9tNz1Y0Y18A/2UVITdQ0eNZG7a fQHlEFNvDv3wsdCTY+esL9sCul1DmUXf8RxvOjs5E4UWWRT9icPCXccOoEowcQBA z2eDxi/NFGQc217dkNcB16u8bqqRUnXquiblhxd8uhlJkj+aTTDFbunydgBhtlua uI3sfwEJGZDyIF+wA7xr7zzGmJt+yV54ofu84SUPIyW0z7HE0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQWLG23FFlAdQMNzILn8AjeKBExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjhiZjQzYWEtZDQzMi0z ZGU5LThiODAtNjcyNmM5ZTA1ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIgOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+BydAHjgD4MHxyBztz2cmPiVrkvLyeKpL72812LiU4JAfjClzxQnAh zduf+u1OSAl6GBdE1xwJdbPKGY0gGhnTgv5ogFUKMrCCc+/xqnqCZPtLeLyaz050 jguo756qk+L9Cfc7cqa0c4l7pQQuh8QyRZUtPoSh+NClpJGIXmfS+T/5wazjYdwv Sle21zNmwmszsO5INgGEzkxlSbByCuG3wSgXOi+gaXhjO2Iyeisllxt9tGULLEhs Vc5CwTv6T9XJFpKmZ31JgSjjsUxfNl0V6CqchM1O0wmTkzjyV26L1ZwR0+GZxfez XzZFLKtrmDseEkBksC/9eTgOPcMLDTQ= -----END CERTIFICATE-----Generated at Sat Aug 23 22:11:08 2025 by rpki-client