$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f431c727-0b65-336f-9442-cf938a354148.roa File: f431c727-0b65-336f-9442-cf938a354148.roa (raw, json) Hash identifier: SLSUS0yo6O8o5oYDyVbdifUoWpAGiqQ6VwCJA3NHkjI= Subject key identifier: 63:62:D9:A5:3F:EF:0A:4C:EB:FC:60:C9:59:C1:19:61:75:17:30:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A53359C511FFD79CC37AA9380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f431c727-0b65-336f-9442-cf938a354148.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 15169 IP address blocks: 34.2.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:9c:51:1f:fd:79:cc:37:aa:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=55deea16-22cf-4137-bc25-e99d4eaf0d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:48:b4:c0:c5:3b:9f:ec:ee:4b:de:a0:4e:91: b6:8f:22:9c:65:0c:4d:10:06:ac:9c:d4:bb:73:74: 02:9c:26:df:fd:b6:ec:4e:ed:46:2d:48:e6:63:ce: 79:fd:86:7a:1c:16:e0:44:2d:a6:5f:a0:0f:43:a4: 1e:f1:b1:74:6c:8a:84:7f:1c:4e:d8:8a:48:d3:16: e2:fb:44:e3:e1:1a:f9:2b:b6:35:e2:25:7b:d0:1f: d5:6b:63:ca:31:1e:6d:32:21:69:c9:49:1b:ad:c1: ee:70:f0:13:bd:a1:5c:75:56:a3:e5:88:8c:88:75: 03:7e:72:d4:31:b2:f6:5c:47:c4:4a:2a:7a:a7:93: 94:8a:45:a3:a2:d9:bb:60:6c:50:1b:61:6d:5d:0e: a1:1c:ac:a1:52:01:bc:b7:b0:13:35:8b:fa:d5:91: 50:a3:96:f6:83:4f:57:80:0c:7f:f5:76:93:e8:2e: 75:05:66:71:2a:0b:e3:d0:19:f1:58:47:04:68:12: 66:54:3a:14:ed:fe:55:f5:d9:60:f7:12:04:19:49: 97:5c:3a:1b:d9:2c:91:b7:be:8c:74:b5:0d:ec:1a: ec:1c:68:bf:7b:53:84:27:4b:16:68:a9:df:ca:7f: 55:d1:e8:9a:1e:32:a3:e4:1e:3d:c7:25:e6:78:df: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:62:D9:A5:3F:EF:0A:4C:EB:FC:60:C9:59:C1:19:61:75:17:30:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f431c727-0b65-336f-9442-cf938a354148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c6:90:87:a3:1d:e0:e4:89:88:a9:ad:19:b2:73:0c:b9:b6: ab:79:91:ce:d6:6c:dc:fc:a3:dd:ab:c7:ed:3b:db:c1:b1:ef: be:60:37:84:f0:87:9e:fe:d8:09:0c:1a:9c:71:1b:01:c2:e8: f5:e8:d9:9f:55:40:dc:c7:7e:ff:57:ea:76:ee:0a:16:6b:79: dc:d5:79:23:10:e2:b5:c7:3f:18:42:55:74:a6:63:ff:d0:1e: 0c:70:1d:ad:11:a3:88:00:33:21:c7:d7:85:d1:2a:88:4a:ff: 1b:65:56:93:1f:9a:c9:16:6f:e7:d8:8c:d4:08:a3:69:ad:7e: d6:af:36:08:43:ff:fd:a1:2b:5d:43:e1:0b:57:70:e7:50:bb: 38:81:eb:a7:11:6e:cc:51:15:f6:73:d9:8c:10:aa:8e:7d:97: 93:b7:7c:3f:2a:83:cb:5f:e0:c7:3e:3d:96:da:e4:db:b3:e4: 20:7c:f5:e3:f5:dd:a0:25:48:26:e9:38:75:f1:f2:37:8a:60: 28:34:06:86:8c:d8:e9:5f:f6:fb:c5:d5:e1:c5:72:2f:3c:a5: 9e:6e:9f:07:55:e8:9b:50:82:5f:d5:02:b5:f7:b7:ff:92:35: b1:1f:ee:5d:50:74:88:1b:71:1a:dd:17:c5:5f:fa:d3:49:c7: 9d:62:a0:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNZxRH/15zDeqk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk NTVkZWVhMTYtMjJjZi00MTM3LWJjMjUtZTk5ZDRlYWYwZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiki0wMU7n+zuS96gTpG2jyKcZQxNEAasnNS7 c3QCnCbf/bbsTu1GLUjmY855/YZ6HBbgRC2mX6APQ6Qe8bF0bIqEfxxO2IpI0xbi +0Tj4Rr5K7Y14iV70B/Va2PKMR5tMiFpyUkbrcHucPATvaFcdVaj5YiMiHUDfnLU MbL2XEfESip6p5OUikWjotm7YGxQG2FtXQ6hHKyhUgG8t7ATNYv61ZFQo5b2g09X gAx/9XaT6C51BWZxKgvj0BnxWEcEaBJmVDoU7f5V9dlg9xIEGUmXXDob2SyRt76M dLUN7BrsHGi/e1OEJ0sWaKnfyn9V0eiaHjKj5B49xyXmeN9P4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNi2aU/7wpM6/xgyVnBGWF1FzDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjQzMWM3MjctMGI2NS0z MzZmLTk0NDItY2Y5MzhhMzU0MTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgJVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLGkIejHeDkiYiprRmycwy5tqt5kc7WbNz8o92rx+0728Gx775gN4Tw h57+2AkMGpxxGwHC6PXo2Z9VQNzHfv9X6nbuChZredzVeSMQ4rXHPxhCVXSmY//Q HgxwHa0Ro4gAMyHH14XRKohK/xtlVpMfmskWb+fYjNQIo2mtftavNghD//2hK11D 4QtXcOdQuziB66cRbsxRFfZz2YwQqo59l5O3fD8qg8tf4Mc+PZba5Nuz5CB89eP1 3aAlSCbpOHXx8jeKYCg0BoaM2Olf9vvF1eHFci88pZ5unwdV6JtQgl/VArX3t/+S NbEf7l1QdIgbcRrdF8Vf+tNJx51ioIk= -----END CERTIFICATE-----Generated at Mon Jun 30 15:04:00 2025 by rpki-client