$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91724a97-c972-3d04-9128-cf6b6b1669f0.roa File: 91724a97-c972-3d04-9128-cf6b6b1669f0.roa (raw, json) Hash identifier: 61LFg5fpq9Ksg7ANNKfXuXEHT0y1CjPYDBvObmpEBu0= Subject key identifier: 22:84:B4:A9:4D:67:F2:9A:82:C5:4A:6F:2C:FA:E7:61:FC:28:8D:F5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A480AEC7A4E1D25F4753F2380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91724a97-c972-3d04-9128-cf6b6b1669f0.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 19527 IP address blocks: 34.1.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:ec:7a:4e:1d:25:f4:75:3f:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=ac31644d-0bde-4c62-b9f5-d8a5fb243322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:e7:9f:d0:5c:6b:84:9a:aa:26:9d:83:6b: 39:c3:ea:b8:6e:16:52:f9:a5:d8:46:d5:7d:3b:7a: fc:bd:b7:51:7b:32:f8:03:35:eb:2a:58:09:fb:02: c3:31:6b:bf:dc:e6:8b:ac:7b:77:06:8b:4c:9b:69: fb:98:82:b6:d5:01:50:7c:90:5d:f6:65:25:86:96: 41:df:48:5b:bf:a1:01:2e:c3:59:89:d1:93:6c:e5: 3b:c3:64:7a:61:88:11:6c:95:82:04:2b:ac:35:26: a9:23:e3:b1:fe:ad:b4:c7:ff:0e:68:b2:e8:0b:f2: 3e:44:fc:68:8e:d5:a5:33:72:c9:c9:ba:bd:33:0d: 98:d5:a1:3f:87:4b:01:1b:aa:b3:84:07:2b:40:34: de:75:cd:4a:70:f2:cd:aa:33:a6:d1:ba:e2:fd:65: 8d:50:a2:03:c3:b3:d8:ab:c5:82:fb:fe:b8:88:4b: 66:69:07:45:03:13:69:54:06:40:a7:06:24:d3:97: 57:9f:86:af:96:ee:5d:d2:33:e4:5d:8c:1a:4d:58: 06:7b:7e:25:53:f6:73:72:4b:dc:2c:3b:71:68:f4: 73:bb:25:ec:a3:f6:0c:32:d3:93:37:1b:0f:32:55: 3e:7c:88:1e:9b:bb:b6:d2:81:43:61:ec:7f:be:f6: 5b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:84:B4:A9:4D:67:F2:9A:82:C5:4A:6F:2C:FA:E7:61:FC:28:8D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91724a97-c972-3d04-9128-cf6b6b1669f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:fe:cd:05:59:8d:96:1e:c9:09:a0:02:c1:d6:67:cb:0d:23: f1:31:7b:71:e8:89:d0:0b:99:d3:ac:90:93:ac:55:f7:65:59: fc:59:57:e2:20:2d:40:06:45:01:a4:43:be:f7:80:6e:d5:2b: 3c:5e:f6:c0:a6:5f:1d:6a:bf:51:87:86:75:ca:02:cb:c8:c6: 27:ea:6b:7d:e1:48:08:d9:39:90:d3:3f:76:5d:f8:1e:91:99: 8a:12:19:88:83:dd:5d:3f:54:38:fa:ac:8b:67:63:87:b4:d6: e8:0f:4c:f5:de:31:b2:b7:ff:2c:f5:a3:bb:d1:38:39:bf:0e: 68:1b:85:1d:e8:19:56:8b:9b:cb:8a:52:55:63:9d:93:1a:da: 8c:5c:34:27:db:ec:be:e7:4d:ad:4a:ae:ad:95:90:21:73:95: 3c:ee:7a:ba:11:75:75:4a:f4:38:18:19:7f:d2:98:7b:6e:64: 32:ff:60:13:9e:37:6f:3e:ac:97:91:c7:50:66:9d:5d:be:56: 89:db:2d:45:ba:f8:c3:2f:ab:43:43:7d:ba:03:43:41:17:24: 71:86:ce:d4:74:7b:60:5d:dc:52:3c:4e:d7:12:22:9e:91:73: 2e:c2:59:30:24:1b:d2:e3:46:07:18:77:78:c9:5f:cd:f5:49: ec:db:5e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICux6Th0l9HU/I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk YWMzMTY0NGQtMGJkZS00YzYyLWI5ZjUtZDhhNWZiMjQzMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriXnn9Bca4Saqiadg2s5w+q4bhZS+aXYRtV9 O3r8vbdRezL4AzXrKlgJ+wLDMWu/3OaLrHt3BotMm2n7mIK21QFQfJBd9mUlhpZB 30hbv6EBLsNZidGTbOU7w2R6YYgRbJWCBCusNSapI+Ox/q20x/8OaLLoC/I+RPxo jtWlM3LJybq9Mw2Y1aE/h0sBG6qzhAcrQDTedc1KcPLNqjOm0bri/WWNUKIDw7PY q8WC+/64iEtmaQdFAxNpVAZApwYk05dXn4avlu5d0jPkXYwaTVgGe34lU/Zzckvc LDtxaPRzuyXso/YMMtOTNxsPMlU+fIgem7u20oFDYex/vvZbkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKEtKlNZ/KagsVKbyz652H8KI31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTE3MjRhOTctYzk3Mi0z ZDA0LTkxMjgtY2Y2YjZiMTY2OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD+zQVZjZYeyQmgAsHWZ8sNI/Exe3HoidALmdOskJOsVfdlWfxZV+Ig LUAGRQGkQ773gG7VKzxe9sCmXx1qv1GHhnXKAsvIxifqa33hSAjZOZDTP3Zd+B6R mYoSGYiD3V0/VDj6rItnY4e01ugPTPXeMbK3/yz1o7vRODm/DmgbhR3oGVaLm8uK UlVjnZMa2oxcNCfb7L7nTa1Krq2VkCFzlTzueroRdXVK9DgYGX/SmHtuZDL/YBOe N28+rJeRx1BmnV2+VonbLUW6+MMvq0NDfboDQ0EXJHGGztR0e2Bd3FI8TtcSIp6R cy7CWTAkG9LjRgcYd3jJX831SezbXp0= -----END CERTIFICATE-----Generated at Mon Jun 30 13:51:26 2025 by rpki-client