$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa File: 07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa (raw, json) Hash identifier: NH0ETLMwqhi6bX5WfkvAat+zQukxsZYCmWi+nkStngE= Subject key identifier: 2E:86:53:24:DA:AE:64:93:D1:5D:72:DB:A1:3C:3A:85:CA:53:80:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7B10B19C87F9E2CDC9C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.122.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7b:10:b1:9c:87:f9:e2:cd:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=6a257d5a-8f35-47dc-9e59-00daf56375f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:03:bd:3d:69:b2:65:75:12:c6:9b:56:91:18: 72:22:82:75:7a:98:79:24:63:25:b7:2e:4c:f0:d3: 87:a5:5d:05:15:e9:88:b7:69:29:33:61:5a:6e:2d: bf:d9:95:72:c1:a6:3d:b6:31:af:bb:ab:e3:2c:9c: 43:bc:7e:78:a8:ef:a7:75:0d:a0:58:1d:f4:d3:2d: 5a:83:ed:09:2e:63:6c:14:d5:66:a7:16:90:4a:30: 95:f0:bb:0d:eb:6c:c0:9d:c8:bc:ab:77:99:2f:1f: 88:92:8d:8a:2f:e7:48:d7:39:e9:ff:91:ce:fe:38: 9b:c7:02:d2:4d:ce:44:72:1d:e2:4a:26:34:93:a8: 9e:09:99:9a:47:b7:18:c8:a3:9b:d4:1c:8e:dc:41: 4a:c1:28:09:6c:16:91:af:ab:5f:64:63:ed:4f:14: 5c:7d:dc:50:e2:e2:69:14:ce:e1:d8:a7:95:c6:6d: e4:1b:4d:60:4b:91:26:78:c4:c3:ad:9a:60:f0:1b: 44:9a:ae:40:7d:2c:40:bc:af:6d:1e:03:e7:7f:a8: 87:5d:e9:94:09:5a:96:39:71:74:41:7e:5b:e1:79: af:4e:64:64:a9:27:9a:e3:40:c9:04:b3:9b:3c:2e: 32:b3:5b:b3:a6:c6:f3:93:d6:60:c5:26:07:c6:6f: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:86:53:24:DA:AE:64:93:D1:5D:72:DB:A1:3C:3A:85:CA:53:80:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:47:3e:3c:e1:2a:f0:cd:7e:d3:89:0b:24:c7:6d:17:d8:d0: 98:04:54:9c:76:c7:a8:1c:7c:62:98:64:b2:e0:36:c3:f9:b7: d9:d8:24:f7:ea:c7:f4:62:06:b5:1e:f2:f9:9e:ea:47:84:61: 7d:2e:8e:5c:34:cd:c1:5b:05:9b:18:4b:a1:2f:12:98:9d:84: 22:60:e5:19:e0:d8:3c:36:ae:bf:ea:ec:9b:be:da:64:df:f1: 7f:aa:30:47:7a:d4:f6:07:e3:62:02:cf:de:5c:2c:e4:19:f1: dc:97:d5:34:12:11:59:13:38:a1:7d:97:3a:57:c3:a0:3b:f8: 42:fc:e4:cf:4d:f5:5f:67:5d:63:a9:2f:4d:f6:34:02:2d:06: 55:ab:1b:51:1a:fd:d1:bc:7c:3b:66:b2:cd:90:14:a6:4e:db: 51:60:e3:9f:2e:31:44:51:f2:94:d1:2d:e3:87:11:c8:79:25: cd:a5:ad:9a:a7:31:52:4a:9b:15:a9:e3:9d:29:32:3d:d5:6e: ec:86:3a:2b:0d:ce:43:7c:b9:ac:95:15:55:88:9b:f1:7a:8f: cc:23:0e:4d:48:89:cf:db:46:59:67:d6:15:66:f4:80:55:c7: 9a:72:ee:60:bf:6b:8f:e8:bd:98:94:a3:f8:d2:65:21:c6:49: c3:25:b1:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23sQsZyH+eLNycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NmEyNTdkNWEtOGYzNS00N2RjLTllNTktMDBkYWY1NjM3NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wO9PWmyZXUSxptWkRhyIoJ1eph5JGMlty5M 8NOHpV0FFemIt2kpM2Fabi2/2ZVywaY9tjGvu6vjLJxDvH54qO+ndQ2gWB300y1a g+0JLmNsFNVmpxaQSjCV8LsN62zAnci8q3eZLx+Iko2KL+dI1znp/5HO/jibxwLS Tc5Ech3iSiY0k6ieCZmaR7cYyKOb1ByO3EFKwSgJbBaRr6tfZGPtTxRcfdxQ4uJp FM7h2KeVxm3kG01gS5EmeMTDrZpg8BtEmq5AfSxAvK9tHgPnf6iHXemUCVqWOXF0 QX5b4XmvTmRkqSea40DJBLObPC4ys1uzpsbzk9ZgxSYHxm+2DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6GUyTarmST0V1y26E8OoXKU4AyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDdlY2Y1YmMtMmFlNy0z ZGExLWJlZDQtN2ZlZGY1ZjQyMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFHPjzhKvDNftOJCyTHbRfY0JgEVJx2x6gcfGKYZLLgNsP5t9nYJPfq x/RiBrUe8vme6keEYX0ujlw0zcFbBZsYS6EvEpidhCJg5Rng2Dw2rr/q7Ju+2mTf 8X+qMEd61PYH42ICz95cLOQZ8dyX1TQSEVkTOKF9lzpXw6A7+EL85M9N9V9nXWOp L032NAItBlWrG1Ea/dG8fDtmss2QFKZO21Fg458uMURR8pTRLeOHEch5Jc2lrZqn MVJKmxWp450pMj3VbuyGOisNzkN8uayVFVWIm/F6j8wjDk1Iic/bRlln1hVm9IBV x5py7mC/a4/ovZiUo/jSZSHGScMlsew= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:40 2025 by rpki-client