$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea45876-71e4-3bc2-a68f-4a22492e39b7.roa File: aea45876-71e4-3bc2-a68f-4a22492e39b7.roa (raw, json) Hash identifier: LN3/QUMzFdp5abbiXTl1KQDcilk8JU9hUXR1cZWzRQg= Subject key identifier: F9:2D:E3:1A:05:52:0C:8A:A5:99:CB:2C:CD:7D:A3:10:7F:6C:4F:B5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AD23C32536EEF6E4881ACF850 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea45876-71e4-3bc2-a68f-4a22492e39b7.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 396982 IP address blocks: 34.187.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:32:53:6e:ef:6e:48:81:ac:f8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=83aceb98-93a0-4746-8f01-114b825cfd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:6a:e7:20:66:5f:9d:59:a5:0b:6c:ea:70:25: d2:2a:be:18:69:82:b0:69:ec:6e:a1:69:84:40:71: 5a:13:00:11:bf:e3:39:7d:ce:2b:45:07:18:4d:06: 56:4c:c5:65:f1:2a:4d:20:1c:8f:b1:cd:1f:5b:6e: c2:47:14:de:37:26:e5:57:3f:68:de:ca:b1:a2:c3: ed:24:98:1c:5e:64:d1:d9:55:cd:f9:33:03:95:8c: af:d0:e8:f2:a9:16:a3:dd:d0:0f:33:93:94:04:54: e7:ab:9c:29:41:bc:2b:fc:80:9d:cd:d8:02:20:97: a9:17:c3:1c:31:a0:1e:a0:8a:38:40:32:57:bd:c8: c9:1e:87:1b:7b:2d:b2:1e:87:bd:ab:a4:a1:9a:41: 28:1f:cc:b2:18:5c:29:43:64:2e:2f:b6:0c:ce:96: 85:3f:f5:72:ed:f4:e0:9e:cf:7b:4d:0d:2f:2f:4e: 21:ec:85:15:6f:36:93:43:cc:f1:08:5c:45:49:37: 23:50:48:3a:7b:92:fd:4e:05:7a:40:8b:87:a6:91: 79:63:e0:ef:cf:12:e4:87:4e:31:be:4d:df:c8:33: 5a:46:46:67:c3:c7:b7:44:76:41:73:99:77:2c:f6: 8c:6a:81:ec:5a:63:72:89:76:bb:a9:1b:82:a2:cd: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2D:E3:1A:05:52:0C:8A:A5:99:CB:2C:CD:7D:A3:10:7F:6C:4F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea45876-71e4-3bc2-a68f-4a22492e39b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.187.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a6:a4:f4:1b:31:e6:b1:fa:a4:29:55:64:ba:46:15:4f:d4: 6c:a3:ec:1a:ea:82:70:0d:34:cf:dd:e1:f2:c5:bb:ba:c6:4f: 11:c4:a0:61:ab:50:d3:24:57:47:81:2f:30:53:6b:3a:6c:53: 78:fc:0e:27:e1:18:4a:0a:fd:8e:48:9e:de:cc:f5:da:a4:26: b8:23:9a:3b:58:e7:e7:09:c5:e0:96:e9:a5:d8:67:94:aa:54: 62:93:92:73:62:d6:1e:3a:1f:2d:68:d5:c3:f3:77:d1:60:22: af:47:8f:75:39:ad:f4:dc:4e:bb:f4:09:fa:b1:8e:24:2c:98: 97:4e:9d:da:ab:46:29:14:49:f6:b6:0b:72:b3:68:14:23:48: 78:77:72:2a:c9:56:00:c6:2d:63:cd:b5:80:8a:46:71:b2:04: ca:b4:fc:bd:a0:4e:a0:27:3f:43:ff:45:cf:55:0e:87:72:0d: fc:d4:02:17:71:59:ab:23:d5:4f:01:d0:71:7d:96:b8:38:71: c8:84:5a:cf:0a:79:0d:4d:00:b5:14:70:6f:43:ab:f9:b5:e1: 12:d3:f9:14:66:f9:ff:76:df:ae:7a:0c:fb:0a:32:ff:23:9c: 18:b4:c0:61:39:dd:2e:0b:12:e4:42:97:ef:89:9e:9b:92:25: 5d:fa:2c:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPDJTbu9uSIGs+FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ODNhY2ViOTgtOTNhMC00NzQ2LThmMDEtMTE0YjgyNWNmZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/WrnIGZfnVmlC2zqcCXSKr4YaYKwaexuoWmE QHFaEwARv+M5fc4rRQcYTQZWTMVl8SpNIByPsc0fW27CRxTeNyblVz9o3sqxosPt JJgcXmTR2VXN+TMDlYyv0OjyqRaj3dAPM5OUBFTnq5wpQbwr/ICdzdgCIJepF8Mc MaAeoIo4QDJXvcjJHocbey2yHoe9q6ShmkEoH8yyGFwpQ2QuL7YMzpaFP/Vy7fTg ns97TQ0vL04h7IUVbzaTQ8zxCFxFSTcjUEg6e5L9TgV6QIuHppF5Y+DvzxLkh04x vk3fyDNaRkZnw8e3RHZBc5l3LPaMaoHsWmNyiXa7qRuCos2PqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkt4xoFUgyKpZnLLM19oxB/bE+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVhNDU4NzYtNzFlNC0z YmMyLWE2OGYtNGEyMjQ5MmUzOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIrsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmmpPQbMeax+qQpVWS6RhVP1Gyj7BrqgnANNM/d4fLFu7rGTxHEoGGr UNMkV0eBLzBTazpsU3j8DifhGEoK/Y5Int7M9dqkJrgjmjtY5+cJxeCW6aXYZ5Sq VGKTknNi1h46Hy1o1cPzd9FgIq9Hj3U5rfTcTrv0CfqxjiQsmJdOndqrRikUSfa2 C3KzaBQjSHh3cirJVgDGLWPNtYCKRnGyBMq0/L2gTqAnP0P/Rc9VDodyDfzUAhdx Wasj1U8B0HF9lrg4cciEWs8KeQ1NALUUcG9Dq/m14RLT+RRm+f923656DPsKMv8j nBi0wGE53S4LEuRCl++JnpuSJV36LOg= -----END CERTIFICATE-----Generated at Sat Aug 23 21:59:39 2025 by rpki-client