$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05966a6d-6b53-350c-b8a2-4f280fef5e90.roa File: 05966a6d-6b53-350c-b8a2-4f280fef5e90.roa (raw, json) Hash identifier: qFwMPZxoO4E1lQphhrjSrPSK2+Ly0VIhBMlBCPkdtiA= Subject key identifier: 51:BF:1A:64:3E:17:41:0F:00:40:C5:FD:83:CC:00:6C:B0:EB:8D:19 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF0FD343F9AAC33E3B780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05966a6d-6b53-350c-b8a2-4f280fef5e90.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.29.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f0:fd:34:3f:9a:ac:33:e3:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=858be4ac-212f-420e-8f3f-f7850aaefca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e8:ca:a3:c7:4f:a4:f4:06:35:5a:c0:ec:75: de:2a:94:42:99:bb:8e:08:1d:c9:df:fc:3a:1e:fc: 1c:1c:fe:ab:c8:61:cf:2c:e5:04:47:ba:ab:9d:30: 0f:12:bc:15:76:ef:7d:6d:25:ca:eb:e7:ec:01:7c: 54:f3:00:23:c6:d6:77:6d:59:00:a3:60:69:29:d5: 1c:57:3f:a9:a4:e7:ae:33:14:0f:92:db:63:f4:d8: bb:b8:10:e7:e5:e2:ad:6c:d1:9a:6f:55:56:92:a2: 9f:39:84:a5:a8:b4:e9:6a:3e:c5:43:65:f9:0a:28: 22:fb:e7:1f:a8:65:c4:6f:32:09:b8:79:e3:80:5d: 04:aa:f6:f8:e5:18:18:fc:67:f2:44:19:73:c1:9e: 1a:5d:27:ba:1e:93:69:06:2f:8b:ca:77:6b:8e:3f: 8c:05:8e:8b:66:8e:5c:8c:40:74:50:f2:6a:e6:ae: 77:56:97:5b:d5:02:46:2d:10:0d:21:50:74:66:ba: 12:87:f9:79:93:d3:11:28:51:c0:e1:d5:78:cf:f5: c0:7b:09:a6:2f:fe:8e:b7:c8:97:6f:77:b2:80:ec: ef:8c:bf:48:5e:19:a5:34:ca:05:ee:2d:0d:a1:db: 1b:81:44:9c:05:f0:b2:26:65:63:dc:4c:5f:f3:c9: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BF:1A:64:3E:17:41:0F:00:40:C5:FD:83:CC:00:6C:B0:EB:8D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05966a6d-6b53-350c-b8a2-4f280fef5e90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8e:1a:e1:6c:8c:f8:2e:b9:7f:07:49:23:ae:89:7c:2f:a4: 3b:9c:93:2a:cc:74:93:d7:9f:ba:49:3c:03:5a:b9:1b:d1:55: a4:76:4d:c5:9a:88:03:7c:da:ec:e1:8d:5d:26:81:82:07:e1: 56:3e:35:07:68:ba:96:f0:75:76:bd:b8:ff:83:18:9a:0e:c2: 2c:ee:15:eb:b7:9d:0f:a3:a1:a8:0c:16:03:fe:f9:35:fb:05: c5:7c:19:2b:21:e7:d0:4d:96:17:70:a0:ae:e6:af:f2:9a:ad: 94:04:f9:78:ae:ae:26:90:6b:7a:f3:c9:e1:61:2d:9d:d2:ba: 36:4b:b2:3b:59:f1:85:ca:bf:27:f9:99:b6:d0:0c:16:5d:d8: e9:d2:58:15:a3:0a:08:c0:ec:6f:86:5b:94:db:27:6c:f2:74: 60:1b:8e:9e:3b:68:85:6e:79:6f:f1:6d:8d:9f:33:34:44:b7: 5e:8e:4e:62:8d:28:b4:d9:79:a0:af:87:61:ad:e0:f5:40:a1: ea:71:3e:9a:40:71:9f:fc:1a:b8:76:2a:be:60:73:50:82:ad: f5:a9:fa:7d:e4:cd:8e:5c:fe:60:d9:7c:1f:a2:aa:e5:81:49: 98:9a:f6:e3:5e:3e:77:d6:e9:ea:a7:e2:54:f8:8e:c6:98:35: ca:21:10:ac -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqG2/D9ND+arDPjt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODU4YmU0YWMtMjEyZi00MjBlLThmM2YtZjc4NTBhYWVmY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+jKo8dPpPQGNVrA7HXeKpRCmbuOCB3J3/w6 HvwcHP6ryGHPLOUER7qrnTAPErwVdu99bSXK6+fsAXxU8wAjxtZ3bVkAo2BpKdUc Vz+ppOeuMxQPkttj9Ni7uBDn5eKtbNGab1VWkqKfOYSlqLTpaj7FQ2X5Cigi++cf qGXEbzIJuHnjgF0Eqvb45RgY/GfyRBlzwZ4aXSe6HpNpBi+Lyndrjj+MBY6LZo5c jEB0UPJq5q53Vpdb1QJGLRANIVB0ZroSh/l5k9MRKFHA4dV4z/XAewmmL/6Ot8iX b3eygOzvjL9IXhmlNMoF7i0NodsbgUScBfCyJmVj3Exf88lMJwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFG/GmQ+F0EPAEDF/YPMAGyw640ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDU5NjZhNmQtNmI1My0z NTBjLWI4YTItNGYyODBmZWY1ZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIh0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQY4a4WyM+C65fwdJI66JfC+kO5yTKsx0k9efukk8A1q5G9FVpHZNxZqI A3za7OGNXSaBggfhVj41B2i6lvB1dr24/4MYmg7CLO4V67edD6OhqAwWA/75NfsF xXwZKyHn0E2WF3Cgruav8pqtlAT5eK6uJpBrevPJ4WEtndK6NkuyO1nxhcq/J/mZ ttAMFl3Y6dJYFaMKCMDsb4ZblNsnbPJ0YBuOnjtohW55b/FtjZ8zNES3Xo5OYo0o tNl5oK+HYa3g9UCh6nE+mkBxn/wauHYqvmBzUIKt9an6feTNjlz+YNl8H6Kq5YFJ mJr2414+d9bp6qfiVPiOxpg1yiEQrA== -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:32 2025 by rpki-client