$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa File: fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa (raw, json) Hash identifier: Q6mlj6XqbY/SL+PhAp/Zrc9ITv9lz3PCIe2ct9a9nks= Subject key identifier: A9:A8:14:06:73:70:38:10:71:C7:27:7C:0B:7C:2A:45:24:BE:FD:AA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A497053BBCBED769E8025AA00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 15169 IP address blocks: 34.3.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:53:bb:cb:ed:76:9e:80:25:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=27e58e50-962f-4a6d-9c56-3b27be5757ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:96:d8:4e:63:02:d5:14:95:41:f1:ed:04:49: 11:7a:41:9c:a0:81:fc:db:d5:fa:34:45:50:24:78: 96:d2:72:b7:59:9e:d9:17:8f:58:e8:f5:29:84:86: 8a:af:02:c6:fd:c4:d7:70:9f:3c:54:e8:7a:c5:e4: bc:00:93:70:69:b6:93:62:ae:8b:a2:fa:06:43:92: 17:5a:df:7d:c0:13:af:5a:fc:f8:4a:df:c4:f2:aa: 75:d6:59:6c:ae:b1:61:d1:29:6c:ad:43:63:38:d5: c2:de:a2:1c:f4:cb:b5:b9:7f:67:61:90:6b:2a:94: 6a:9e:28:5e:86:cd:6d:a1:95:77:42:5b:fb:49:55: d8:72:c2:44:43:67:ed:86:e2:78:9b:63:73:fb:13: 33:4f:2d:00:c1:0c:c3:19:74:c5:78:ae:ff:d8:42: 31:fc:f5:a7:3f:a3:ec:68:cf:71:c2:05:5a:22:6c: 2e:ac:38:33:8e:d5:7c:df:92:7c:00:f0:18:a6:0b: 12:8b:d4:84:fb:4e:53:bc:30:38:d6:24:62:59:ab: 2c:94:17:4a:50:1d:fa:a5:58:34:83:3f:1d:f7:00: 19:0c:db:a4:6d:76:80:80:1a:c3:bd:c7:24:5d:c9: 9a:38:e2:3c:87:fe:6d:6b:68:4c:4a:f9:fe:15:84: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:14:06:73:70:38:10:71:C7:27:7C:0B:7C:2A:45:24:BE:FD:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:1e:65:3c:43:8e:ec:06:9a:ec:49:3e:6f:ef:18:04:b3:95: 80:6e:04:ab:2f:7f:8b:82:ee:16:ed:f0:b5:5a:3e:b8:43:05: 25:5b:65:09:8b:e2:27:63:0c:33:5d:2b:eb:87:18:1e:fc:16: 7e:c7:72:f2:06:ab:17:55:37:4d:06:28:b7:50:8c:82:ca:a7: 3a:79:20:69:53:f4:c6:7d:12:16:67:b4:90:cf:c6:2e:d6:15: 1d:40:2f:9b:d7:db:d7:3e:21:ff:58:59:61:e5:01:30:1f:f7: b3:2b:1d:8d:bc:81:22:b9:a2:3f:37:e4:8d:c3:1b:e3:52:3d: a0:78:87:c3:d3:62:1d:88:f0:60:0f:4e:1f:96:f9:f0:ca:16: c1:80:20:3c:64:d8:88:52:9d:ae:2e:e0:17:01:63:34:55:f3: 96:5f:11:67:d8:42:f9:19:21:36:19:c9:7e:69:a1:8c:ed:98: c8:82:b6:89:9e:97:fa:da:26:72:87:b3:9b:c8:cb:2b:88:df: bd:b4:09:87:d6:dc:ba:08:e4:0b:4d:8b:1b:02:85:a5:7d:7d: 7e:e8:0e:67:f4:ac:f4:cf:b9:bd:6a:f1:d5:e8:eb:b8:2e:59: 45:c7:f6:9e:95:8e:9f:2c:bf:d8:7d:38:27:06:99:67:60:97: 7c:59:bb:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcFO7y+12noAlqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MjdlNThlNTAtOTYyZi00YTZkLTljNTYtM2IyN2JlNTc1N2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpbYTmMC1RSVQfHtBEkRekGcoIH829X6NEVQ JHiW0nK3WZ7ZF49Y6PUphIaKrwLG/cTXcJ88VOh6xeS8AJNwabaTYq6LovoGQ5IX Wt99wBOvWvz4St/E8qp11llsrrFh0SlsrUNjONXC3qIc9Mu1uX9nYZBrKpRqnihe hs1toZV3Qlv7SVXYcsJEQ2fthuJ4m2Nz+xMzTy0AwQzDGXTFeK7/2EIx/PWnP6Ps aM9xwgVaImwurDgzjtV835J8APAYpgsSi9SE+05TvDA41iRiWasslBdKUB36pVg0 gz8d9wAZDNukbXaAgBrDvcckXcmaOOI8h/5ta2hMSvn+FYS+UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmoFAZzcDgQcccnfAt8KkUkvv2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmExMWE5MWYtNTY3OS0z ZTEyLTlkOWUtOWQ3N2FmNWE3NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0eZTxDjuwGmuxJPm/vGASzlYBuBKsvf4uC7hbt8LVaPrhDBSVbZQmL 4idjDDNdK+uHGB78Fn7HcvIGqxdVN00GKLdQjILKpzp5IGlT9MZ9EhZntJDPxi7W FR1AL5vX29c+If9YWWHlATAf97MrHY28gSK5oj835I3DG+NSPaB4h8PTYh2I8GAP Th+W+fDKFsGAIDxk2IhSna4u4BcBYzRV85ZfEWfYQvkZITYZyX5poYztmMiCtome l/raJnKHs5vIyyuI3720CYfW3LoI5AtNixsChaV9fX7oDmf0rPTPub1q8dXo67gu WUXH9p6Vjp8sv9h9OCcGmWdgl3xZu6w= -----END CERTIFICATE-----Generated at Mon Jun 30 13:35:24 2025 by rpki-client