$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/957ab119-98ee-32bf-9afa-feb2edcacb30.roa File: 957ab119-98ee-32bf-9afa-feb2edcacb30.roa (raw, json) Hash identifier: xU0PcOwgUn4yevcIrHjnFTVfLy8yNJXVvJwp/4h/h6s= Subject key identifier: 85:CA:9F:DA:B8:39:75:A7:DE:92:EB:30:18:F1:1B:52:8D:6E:71:F6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A506AF327ADC375C4CE54B7C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/957ab119-98ee-32bf-9afa-feb2edcacb30.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 15169 IP address blocks: 34.1.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f3:27:ad:c3:75:c4:ce:54:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=b7a6d6b5-9587-4f4e-ae5b-43c9fc3f31b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:85:f1:2e:a6:9f:5b:33:2c:f9:d3:27:b5:af: b3:f6:1a:5b:47:e7:a4:27:25:de:a3:f9:64:89:7d: 3e:b6:33:b7:e7:7d:55:e3:a5:e3:f3:43:89:19:80: f5:8a:03:df:4d:85:d5:e1:a2:36:4d:5d:0c:a8:70: 5b:9f:39:b4:4e:6a:55:06:16:9e:0f:e2:4c:47:26: f3:9c:8b:e0:13:83:23:3d:b0:26:78:d5:5e:94:95: e8:5c:1a:f4:19:14:68:db:b8:d0:cf:5f:93:75:e0: 2e:6c:3d:9c:fc:4c:d4:fc:14:30:8a:c0:00:fd:25: 21:45:93:62:7e:b9:96:b6:72:06:43:3f:d4:e3:fc: 2a:5f:ab:51:6c:00:ed:b1:49:d3:16:31:ed:3d:cc: 42:1a:ca:89:78:67:3b:86:7c:64:35:bf:91:36:c3: 93:7b:b5:bb:01:be:0e:1d:84:68:26:24:e5:1b:93: f6:fe:d3:e0:b4:91:9f:c4:f5:ba:7c:19:62:c8:0c: 6b:ab:31:26:25:20:ef:f0:85:c5:14:fd:f4:08:27: 45:ba:f4:9f:f5:8b:f7:a6:7d:61:03:8c:d8:65:de: cc:13:c2:f5:eb:28:3f:17:61:06:ff:04:9e:5a:e7: cd:58:22:87:59:19:2f:72:b0:fb:27:03:e0:ff:15: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CA:9F:DA:B8:39:75:A7:DE:92:EB:30:18:F1:1B:52:8D:6E:71:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/957ab119-98ee-32bf-9afa-feb2edcacb30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:55:c7:1b:5d:0a:0c:26:cf:b4:83:26:c3:b0:2a:db:0b:63: c7:aa:72:72:20:16:9d:ea:1f:28:72:8c:3b:35:fc:eb:3b:a5: 09:1f:d6:b7:c0:12:ea:1d:71:e8:9e:42:8f:be:d0:75:d1:fc: 7b:0b:0e:e8:f5:29:63:57:62:41:35:d2:b5:c0:23:a0:e3:e7: ce:51:bb:6f:d5:f3:8c:f8:bd:82:6f:63:93:fb:80:99:04:0d: 77:28:90:58:7c:53:20:df:bf:6c:b6:82:fd:d6:17:d4:67:12: 8a:0a:d6:d0:41:e4:94:d9:a7:28:5b:3e:84:e7:11:95:ea:fd: fd:06:cf:e8:62:f5:6b:af:3b:e8:2c:23:21:93:c1:79:ad:ee: d5:b1:3b:5c:9a:ac:4e:e5:7f:32:8f:a7:08:a5:9c:b6:95:6a: 4a:59:4d:75:47:e5:28:1a:0b:90:8a:ce:84:1c:e1:ba:e9:74: 86:88:30:16:b4:36:cb:6a:0a:e6:16:dc:81:94:13:78:31:02: 22:39:5a:cb:49:da:37:54:d9:58:b5:6a:6d:0c:00:36:91:1e: 8c:a0:54:4b:48:71:9b:7b:f5:ac:1b:03:d6:c5:a2:03:25:dd: 12:c8:79:98:fe:e5:24:7a:c9:aa:0a:e3:82:cb:35:f0:08:dc: c4:22:e2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQavMnrcN1xM5Ut8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk YjdhNmQ2YjUtOTU4Ny00ZjRlLWFlNWItNDNjOWZjM2YzMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYXxLqafWzMs+dMnta+z9hpbR+ekJyXeo/lk iX0+tjO3531V46Xj80OJGYD1igPfTYXV4aI2TV0MqHBbnzm0TmpVBhaeD+JMRybz nIvgE4MjPbAmeNVelJXoXBr0GRRo27jQz1+TdeAubD2c/EzU/BQwisAA/SUhRZNi frmWtnIGQz/U4/wqX6tRbADtsUnTFjHtPcxCGsqJeGc7hnxkNb+RNsOTe7W7Ab4O HYRoJiTlG5P2/tPgtJGfxPW6fBliyAxrqzEmJSDv8IXFFP30CCdFuvSf9Yv3pn1h A4zYZd7ME8L16yg/F2EG/wSeWufNWCKHWRkvcrD7JwPg/xX5cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXKn9q4OXWn3pLrMBjxG1KNbnH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTU3YWIxMTktOThlZS0z MmJmLTlhZmEtZmViMmVkY2FjYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdVxxtdCgwmz7SDJsOwKtsLY8eqcnIgFp3qHyhyjDs1/Os7pQkf1rfA EuodceieQo++0HXR/HsLDuj1KWNXYkE10rXAI6Dj585Ru2/V84z4vYJvY5P7gJkE DXcokFh8UyDfv2y2gv3WF9RnEooK1tBB5JTZpyhbPoTnEZXq/f0Gz+hi9WuvO+gs IyGTwXmt7tWxO1yarE7lfzKPpwilnLaVakpZTXVH5SgaC5CKzoQc4brpdIaIMBa0 NstqCuYW3IGUE3gxAiI5WstJ2jdU2Vi1am0MADaRHoygVEtIcZt79awbA9bFogMl 3RLIeZj+5SR6yaoK44LLNfAI3MQi4s4= -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:17 2025 by rpki-client