$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa File: 0f78b3fd-1445-384b-b208-6396a085dcb3.roa (raw, json) Hash identifier: QsUp1IdXRfi5IEXjq0m7F6Tp+hwiJkqXvuktVHOH6uE= Subject key identifier: 1D:87:12:4D:D5:DD:89:3B:E2:0A:70:36:60:A3:AD:9A:A7:4E:F8:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8411869ADDC43F044AE1E6E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.108.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:86:9a:dd:c4:3f:04:4a:e1:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=af184b95-0f2a-404b-b549-19bcb587abde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:81:98:d1:c6:61:e4:3c:f7:19:a7:f6:41:84: 26:ff:54:e4:fb:71:93:11:16:5b:ae:b0:b5:f6:d7: 93:d2:17:47:7a:4b:f9:e1:61:a7:cb:10:aa:af:72: 5e:ad:6e:e1:a7:10:eb:dc:3a:1f:3b:27:16:52:54: 99:ba:e8:2e:41:32:71:ee:61:2b:2b:b1:d6:a8:6e: 38:9e:61:2d:1e:62:f9:1c:cb:ea:0f:47:4c:24:e4: 9e:f6:8b:b8:1e:37:94:58:a8:40:04:1b:1f:0c:59: cf:6b:6f:ab:28:48:38:6d:23:44:ab:9c:fb:ca:13: 92:d2:c7:67:28:68:5f:8d:d1:91:9c:3e:6b:0d:9e: 58:d4:a8:81:19:22:fc:af:3b:a6:ca:59:26:ee:c3: 02:96:79:e9:16:1e:d3:1c:71:67:58:a8:e3:60:c0: d8:2a:78:db:2c:b7:59:aa:2e:4c:68:7d:9c:07:6e: d4:81:53:1d:8a:6f:a4:98:6e:99:d9:59:f1:bf:36: 40:99:a5:3c:01:14:c4:7f:3f:2f:80:0f:0f:86:a0: 10:23:22:6c:96:9e:90:cb:43:02:33:98:b2:32:33: ab:03:03:f2:91:7f:59:82:16:b8:63:29:0a:d2:36: 9f:d8:fb:51:f2:18:c0:79:d2:64:b6:60:5c:0d:40: ef:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:87:12:4D:D5:DD:89:3B:E2:0A:70:36:60:A3:AD:9A:A7:4E:F8:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:23:07:74:e9:b1:1b:ef:33:36:fc:d8:24:3b:94:27:4f:44: c0:5d:1f:82:2f:01:14:ab:7a:c0:26:0b:3d:7e:fa:81:5b:cf: 5a:92:40:71:28:2d:69:2d:a4:8a:bb:c1:eb:3e:9d:c8:0b:6e: c2:6e:f5:0b:e9:08:87:81:70:7a:a7:d5:f3:6c:73:87:d3:8e: b6:be:3d:13:89:a8:3a:82:1d:ba:9f:8f:8c:1b:cb:26:2d:24: d2:a8:3b:fb:85:c0:01:2e:8c:d7:46:1d:12:5a:ff:25:f3:a7: e3:87:84:47:e0:47:7d:d0:5c:2a:21:6c:ed:bf:32:94:ee:52: a5:45:cb:4a:bd:70:88:25:84:19:4e:1c:27:16:a9:e7:fa:e4: 46:ff:7b:1b:ee:df:51:db:92:5d:94:34:7d:d0:16:a1:ba:61: 7c:8f:31:dd:a0:67:2b:34:5f:e8:a1:3a:41:8f:b7:e7:0c:f7: 15:b4:4c:20:08:a8:45:51:e3:9b:ff:ad:3e:44:cd:a8:17:df: 0c:43:28:75:1b:7a:15:0e:83:d1:67:ad:e9:8e:6d:ce:96:dd: 1d:10:98:1d:3f:68:e5:07:66:f9:25:c9:bd:1f:84:60:85:5d: 7f:d5:db:74:ad:3f:e8:d6:3c:2a:4d:f7:f0:06:b7:b3:03:2c: af:10:af:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYaa3cQ/BErh5uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWYxODRiOTUtMGYyYS00MDRiLWI1NDktMTliY2I1ODdhYmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYGY0cZh5Dz3Gaf2QYQm/1Tk+3GTERZbrrC1 9teT0hdHekv54WGnyxCqr3JerW7hpxDr3DofOycWUlSZuuguQTJx7mErK7HWqG44 nmEtHmL5HMvqD0dMJOSe9ou4HjeUWKhABBsfDFnPa2+rKEg4bSNEq5z7yhOS0sdn KGhfjdGRnD5rDZ5Y1KiBGSL8rzumylkm7sMClnnpFh7THHFnWKjjYMDYKnjbLLdZ qi5MaH2cB27UgVMdim+kmG6Z2VnxvzZAmaU8ARTEfz8vgA8PhqAQIyJslp6Qy0MC M5iyMjOrAwPykX9Zgha4YykK0jaf2PtR8hjAedJktmBcDUDvDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2HEk3V3Yk74gpwNmCjrZqnTvjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY3OGIzZmQtMTQ0NS0z ODRiLWIyMDgtNjM5NmEwODVkY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEjB3TpsRvvMzb82CQ7lCdPRMBdH4IvARSresAmCz1++oFbz1qSQHEo LWktpIq7wes+ncgLbsJu9QvpCIeBcHqn1fNsc4fTjra+PROJqDqCHbqfj4wbyyYt JNKoO/uFwAEujNdGHRJa/yXzp+OHhEfgR33QXCohbO2/MpTuUqVFy0q9cIglhBlO HCcWqef65Eb/exvu31Hbkl2UNH3QFqG6YXyPMd2gZys0X+ihOkGPt+cM9xW0TCAI qEVR45v/rT5EzagX3wxDKHUbehUOg9FnremObc6W3R0QmB0/aOUHZvklyb0fhGCF XX/V23StP+jWPCpN9/AGt7MDLK8Qr68= -----END CERTIFICATE-----Generated at Tue Jul 22 04:34:36 2025 by rpki-client