$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa File: bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa (raw, json) Hash identifier: lFNdrHAbM2nVAi0GUp3DYknicaWDCqu2xRb7snLU1Qo= Subject key identifier: 20:3D:C3:AA:5F:F5:06:E1:C3:2F:A1:BD:AE:36:DD:6A:37:31:90:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AC7110F878A0BCC5D5D3D2DD0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 396982 IP address blocks: 34.53.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:0f:87:8a:0b:cc:5d:5d:3d:2d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=e78f82a7-c21f-4754-9ad2-373aa50dd5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:b6:75:77:86:d1:59:93:c4:87:4b:e0:50: 1a:0a:a7:0f:5f:75:e5:76:5c:d5:52:da:70:0d:69: 27:4d:66:fb:c2:41:01:1e:fd:ec:d3:67:cb:6b:83: d8:87:38:51:ec:a4:58:50:2b:9d:00:a2:42:99:d6: d9:b6:a3:1a:22:db:f7:94:fd:39:e4:49:b8:2d:f1: 9f:4c:29:4c:01:10:20:17:3b:ac:b2:8f:8d:fa:36: 59:86:e7:1c:58:f7:02:6d:7a:b8:18:2f:5f:7a:a0: 20:c3:e0:84:36:6f:b7:04:f8:c9:2f:e1:34:f2:f1: 64:73:f5:75:39:2e:64:57:0f:31:b4:38:91:d5:52: dc:65:04:8b:6a:7f:c2:68:30:05:c8:cc:39:91:98: 65:78:2b:4f:7d:ea:c4:94:30:15:85:90:33:f2:9e: 92:92:ed:0f:91:e5:69:92:54:b1:16:0b:65:68:91: d3:4d:b8:88:61:81:f4:33:bc:28:75:b9:09:d8:3e: c1:5e:5e:16:a1:32:31:ec:91:dc:24:9f:63:fb:96: cd:56:a2:d3:1f:30:09:29:d5:9a:4b:39:4e:0a:b5: fe:75:79:d2:4c:c2:30:4e:ca:e4:20:fd:d4:bb:70: a1:88:85:2f:e7:83:1c:d4:38:3c:90:a5:3c:07:9f: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3D:C3:AA:5F:F5:06:E1:C3:2F:A1:BD:AE:36:DD:6A:37:31:90:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.53.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e1:f8:4d:87:89:92:23:09:7e:10:94:16:ca:50:61:07:69: 13:a2:ab:18:8f:91:c5:21:71:75:e3:fc:d0:ed:a7:b3:ed:00: ec:c0:e8:0e:29:08:9e:70:39:71:03:4d:8a:28:29:a6:a8:df: dd:d5:7f:b3:b8:2c:a4:a0:0b:69:87:6d:fa:bf:30:6b:01:20: 2f:c2:b8:33:d5:1f:80:55:7c:1c:1f:d6:9e:da:80:95:ad:1f: 6f:03:c4:40:2a:9c:d3:f1:ce:27:10:54:e9:96:a2:a6:45:d0: 72:d3:80:fe:e0:73:fd:ae:d8:d0:4f:d0:3b:8c:c8:76:b2:8d: bf:60:fe:a6:f7:1c:9d:a9:e1:a0:a1:8d:da:4d:54:46:cf:f9: a1:3f:df:cc:67:3b:bd:ce:57:82:ff:fe:6f:49:7b:41:9b:3d: 6c:18:59:58:6d:83:75:b4:4d:a7:39:74:af:fc:65:6d:9d:7e: fe:6f:40:5d:e6:3d:eb:5f:2f:97:67:68:2a:e3:62:38:33:9b: 15:31:40:68:4c:91:a4:8c:5b:dc:f6:d5:c8:1f:b3:62:d3:56: 06:8a:36:41:df:f1:04:3f:92:d8:87:46:dc:34:30:fa:8d:36: 13:d1:13:17:4c:58:d2:07:7d:86:7e:66:d7:6f:9d:cb:6b:3b: 00:a8:e8:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQ+HigvMXV09LdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZTc4ZjgyYTctYzIxZi00NzU0LTlhZDItMzczYWE1MGRkNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj62dXeG0VmTxIdL4FAaCqcPX3XldlzVUtpw DWknTWb7wkEBHv3s02fLa4PYhzhR7KRYUCudAKJCmdbZtqMaItv3lP055Em4LfGf TClMARAgFzusso+N+jZZhuccWPcCbXq4GC9feqAgw+CENm+3BPjJL+E08vFkc/V1 OS5kVw8xtDiR1VLcZQSLan/CaDAFyMw5kZhleCtPferElDAVhZAz8p6Sku0PkeVp klSxFgtlaJHTTbiIYYH0M7wodbkJ2D7BXl4WoTIx7JHcJJ9j+5bNVqLTHzAJKdWa SzlOCrX+dXnSTMIwTsrkIP3Uu3ChiIUv54Mc1Dg8kKU8B59aWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA9w6pf9Qbhwy+hva423Wo3MZD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYzNGMzOGEtMWYzMi0z NmY3LThhMDYtMTBiNWZlMDgwM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIjWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELh+E2HiZIjCX4QlBbKUGEHaROiqxiPkcUhcXXj/NDtp7PtAOzA6A4p CJ5wOXEDTYooKaao393Vf7O4LKSgC2mHbfq/MGsBIC/CuDPVH4BVfBwf1p7agJWt H28DxEAqnNPxzicQVOmWoqZF0HLTgP7gc/2u2NBP0DuMyHayjb9g/qb3HJ2p4aCh jdpNVEbP+aE/38xnO73OV4L//m9Je0GbPWwYWVhtg3W0Tac5dK/8ZW2dfv5vQF3m PetfL5dnaCrjYjgzmxUxQGhMkaSMW9z21cgfs2LTVgaKNkHf8QQ/ktiHRtw0MPqN NhPRExdMWNIHfYZ+ZtdvnctrOwCo6JE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:55:29 2025 by rpki-client