$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a108a20-129f-3303-bb7f-dc4fb05c8d97.roa File: 0a108a20-129f-3303-bb7f-dc4fb05c8d97.roa (raw, json) Hash identifier: PbPaXELVInQzzBqqvoe7PNyqeYNaRpCDlYrhgk65Fag= Subject key identifier: 09:15:C0:D8:3C:FE:99:CE:4E:DD:5F:DD:DA:98:17:D1:65:00:47:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A87879ADC45FFC73EBE1FB9E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a108a20-129f-3303-bb7f-dc4fb05c8d97.roa Signing time: Tue 15 Jul 2025 18:48:07 +0000 ROA not before: Tue 15 Jul 2025 18:48:07 +0000 ROA not after: Mon 13 Oct 2025 18:48:07 +0000 asID: 396982 IP address blocks: 34.13.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:87:9a:dc:45:ff:c7:3e:be:1f:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 18:48:07 2025 GMT Not After : Oct 13 18:48:07 2025 GMT Subject: CN=99a735da-636b-482e-ae0b-a0a4ed31ca54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:a0:2b:c6:da:91:77:22:43:46:82:a4:fd: 12:d8:4b:7c:68:41:c6:ca:bd:24:a9:67:68:95:6d: ac:0d:d0:4c:38:7a:8b:04:1c:2c:6b:91:15:6e:28: 7b:03:94:66:8d:b3:57:5d:a6:52:a0:1c:fd:8a:33: 3a:b5:fd:9b:a7:bd:96:87:22:20:d0:df:d0:a6:7d: 85:8d:44:04:dd:f1:43:5e:d5:2d:a2:4b:ab:5f:44: 5a:c9:ef:03:18:dd:cb:6a:4a:ac:78:96:28:f5:53: 8e:55:14:70:2c:cf:04:fd:90:45:d7:c3:fa:39:a6: a4:63:86:ff:eb:40:11:1a:5d:13:c5:08:66:cb:31: 90:6f:e8:e1:c3:2b:4d:ec:77:8d:a1:4d:b7:2f:15: 03:6b:12:93:41:2f:1a:3f:f8:44:7d:45:0a:2d:84: 4f:eb:dd:d6:95:7a:d1:f8:16:6f:fb:be:b5:cb:81: d3:90:6f:b2:67:8a:fa:a3:f7:fe:04:aa:17:c1:37: 25:86:07:ee:e5:c8:24:1e:8b:63:d6:ce:1f:14:f7: 86:14:1d:21:3f:8f:44:62:df:32:79:51:90:14:83: 66:3c:a2:11:77:c2:b8:e5:11:4b:76:50:b9:9d:37: aa:53:e5:2b:5f:c7:25:95:27:ba:9f:d5:88:28:ee: 5b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:C0:D8:3C:FE:99:CE:4E:DD:5F:DD:DA:98:17:D1:65:00:47:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a108a20-129f-3303-bb7f-dc4fb05c8d97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:42:50:c7:ce:84:07:03:7c:74:0a:a3:de:32:a6:69:ed:dc: 67:68:5b:e1:44:f4:c5:e6:41:52:35:7d:42:07:8a:17:03:bf: bd:0f:ed:f8:21:4a:01:3e:d6:1e:d5:ad:4d:1f:7d:d2:c6:a8: 0e:42:be:4c:a3:09:2e:c3:8e:66:fe:ac:6c:c6:67:d5:9d:a9: c9:43:9e:39:6a:67:1b:5b:67:58:30:db:7c:33:dd:d8:16:c5: 06:52:5b:85:5c:55:53:32:06:77:6b:64:b1:52:e4:51:f0:1f: a9:44:71:b8:e2:ee:2d:79:13:eb:2d:56:22:4f:d6:5b:6e:a4: af:10:bf:d0:a1:6e:05:cd:6f:b9:7b:11:85:76:79:47:d0:cb: a4:83:f1:c4:91:f0:85:31:0e:c1:43:0c:dd:15:b3:da:eb:d9: 5c:4b:45:08:27:6c:f5:ff:2c:46:62:2b:b8:80:9d:7c:2a:c8: 76:ea:8d:32:53:8a:c0:69:0e:0c:9e:31:30:35:6f:12:23:03: 73:44:aa:9d:79:b3:71:71:a7:5f:01:9c:e5:9c:05:71:84:3c: 07:20:51:d7:e8:2d:f9:cd:dd:01:a8:e8:20:a0:a4:e7:60:19: c3:d8:00:24:5a:7b:15:1c:76:29:ea:94:42:9b:27:02:66:49: c2:13:af:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHh5rcRf/HPr4fueAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTE4NDgwN1oXDTI1MTAxMzE4NDgwN1owLzEtMCsGA1UEAxMk OTlhNzM1ZGEtNjM2Yi00ODJlLWFlMGItYTBhNGVkMzFjYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhWgK8bakXciQ0aCpP0S2Et8aEHGyr0kqWdo lW2sDdBMOHqLBBwsa5EVbih7A5RmjbNXXaZSoBz9ijM6tf2bp72WhyIg0N/Qpn2F jUQE3fFDXtUtokurX0Raye8DGN3LakqseJYo9VOOVRRwLM8E/ZBF18P6OaakY4b/ 60ARGl0TxQhmyzGQb+jhwytN7HeNoU23LxUDaxKTQS8aP/hEfUUKLYRP693WlXrR +BZv+761y4HTkG+yZ4r6o/f+BKoXwTclhgfu5cgkHotj1s4fFPeGFB0hP49EYt8y eVGQFINmPKIRd8K45RFLdlC5nTeqU+UrX8cllSe6n9WIKO5b6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkVwNg8/pnOTt1f3dqYF9FlAEdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGExMDhhMjAtMTI5Zi0z MzAzLWJiN2YtZGM0ZmIwNWM4ZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIg1uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhCUMfOhAcDfHQKo94ypmnt3GdoW+FE9MXmQVI1fUIHihcDv70P7fgh SgE+1h7VrU0ffdLGqA5CvkyjCS7Djmb+rGzGZ9WdqclDnjlqZxtbZ1gw23wz3dgW xQZSW4VcVVMyBndrZLFS5FHwH6lEcbji7i15E+stViJP1ltupK8Qv9ChbgXNb7l7 EYV2eUfQy6SD8cSR8IUxDsFDDN0Vs9rr2VxLRQgnbPX/LEZiK7iAnXwqyHbqjTJT isBpDgyeMTA1bxIjA3NEqp15s3Fxp18BnOWcBXGEPAcgUdfoLfnN3QGo6CCgpOdg GcPYACRaexUcdinqlEKbJwJmScITr0k= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:05 2025 by rpki-client