$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa File: 0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa (raw, json) Hash identifier: K34Lj8fcafxOBHdz06ehs89fF3NoR7dNncgYFaVqYl0= Subject key identifier: 95:87:02:79:09:0F:14:D4:D5:DA:C4:C4:53:D2:55:7A:38:59:6A:B6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841192AA267A6A2100376B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.121.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:92:aa:26:7a:6a:21:00:37:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8edca0a8-0d1e-41b7-8766-0661c9c9f906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:63:54:c6:b8:f1:64:0f:98:5b:11:4c:eb: 6b:18:2d:83:5c:a9:15:fe:fd:89:d1:0f:f8:7a:ef: 74:10:b5:b7:fb:45:4c:9c:a5:0e:fb:4b:5e:6c:66: 0e:c6:87:66:81:e6:9d:64:e3:72:d8:37:a7:98:fc: fe:fa:b2:a3:0b:86:6e:92:f1:71:51:41:bf:7f:c5: 95:79:a8:71:73:33:1d:df:71:40:f2:85:2c:e1:49: b7:02:8e:e6:5e:7a:7d:6a:c2:14:ae:35:72:cd:a3: 31:ab:ce:d9:68:dd:20:0e:2a:27:80:05:63:e3:f6: ac:59:43:63:92:c3:4a:94:f4:ad:2c:f6:33:77:84: c5:7b:01:73:68:09:b2:96:39:2f:29:57:9b:67:ac: 01:22:b3:4f:95:70:90:f7:01:00:77:a2:77:00:ab: 20:7e:7d:6a:05:b9:26:7a:cf:07:b6:de:4e:15:b2: 4b:8a:9c:2f:7e:68:b7:6d:70:83:6e:8f:ae:fa:26: 44:55:14:37:5b:c1:ba:f4:d7:ca:d0:8c:bf:72:80: c7:2e:54:d5:0a:0b:3d:b6:bd:6b:74:17:a5:a1:db: a1:37:a0:20:16:ea:59:6a:48:40:8d:7e:d0:3a:11: c8:5b:00:f8:f6:6a:bc:54:95:fd:89:65:46:3c:fe: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:87:02:79:09:0F:14:D4:D5:DA:C4:C4:53:D2:55:7A:38:59:6A:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:37:c1:b1:57:b1:cd:47:3e:74:cf:ad:c4:69:0c:4d:0a:88: 1f:04:2d:3d:99:1c:9c:9a:37:d8:88:73:71:45:a5:8a:e3:19: 79:45:0f:40:88:32:fa:5f:46:31:b9:40:85:77:f1:d7:f6:e9: 22:61:a1:a5:99:89:8f:a9:75:94:43:57:ab:23:a5:46:f0:21: 25:9d:62:c1:f9:23:65:cc:7b:d2:22:36:f9:ce:14:5d:b9:d2: d2:ab:3f:9c:b2:a9:de:97:b5:b0:b2:cf:d5:ed:1b:cb:2d:e9: 78:cc:b6:2e:bd:6a:1c:6b:77:19:4a:89:b7:13:a2:c4:c8:1d: 80:12:56:3c:54:ec:37:4a:e5:14:cd:42:ab:86:2f:a5:6a:e5: a5:8f:b6:07:5e:88:13:90:06:87:9c:28:f3:ea:43:75:a5:9e: 74:2c:4e:a2:46:b8:29:43:4a:c4:5f:e4:e0:fd:08:fe:17:f2: 47:0e:04:ec:29:40:47:b9:5f:72:0f:07:54:b9:bb:e6:47:9b: 89:10:71:e7:0a:a9:76:ee:bf:d4:1d:3d:64:7e:e7:e4:b8:31: 63:f3:e2:4c:12:f9:93:b1:64:cb:97:23:73:b4:c7:84:1d:7c: 91:34:60:9c:b7:ec:e4:10:d9:a5:68:a8:97:e7:66:60:95:3e: 8f:3f:01:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZKqJnpqIQA3awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGVkY2EwYTgtMGQxZS00MWI3LTg3NjYtMDY2MWM5YzlmOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst5jVMa48WQPmFsRTOtrGC2DXKkV/v2J0Q/4 eu90ELW3+0VMnKUO+0tebGYOxodmgeadZONy2DenmPz++rKjC4ZukvFxUUG/f8WV eahxczMd33FA8oUs4Um3Ao7mXnp9asIUrjVyzaMxq87ZaN0gDiongAVj4/asWUNj ksNKlPStLPYzd4TFewFzaAmyljkvKVebZ6wBIrNPlXCQ9wEAd6J3AKsgfn1qBbkm es8Htt5OFbJLipwvfmi3bXCDbo+u+iZEVRQ3W8G69NfK0Iy/coDHLlTVCgs9tr1r dBeloduhN6AgFupZakhAjX7QOhHIWwD49mq8VJX9iWVGPP6vqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWHAnkJDxTU1drExFPSVXo4WWq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGZhOGY5NDQtMDBkMS0z ZmJjLThjZDctOWE2Zjg3OWZkYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI3wbFXsc1HPnTPrcRpDE0KiB8ELT2ZHJyaN9iIc3FFpYrjGXlFD0CI MvpfRjG5QIV38df26SJhoaWZiY+pdZRDV6sjpUbwISWdYsH5I2XMe9IiNvnOFF25 0tKrP5yyqd6XtbCyz9XtG8st6XjMti69ahxrdxlKibcTosTIHYASVjxU7DdK5RTN QquGL6Vq5aWPtgdeiBOQBoecKPPqQ3WlnnQsTqJGuClDSsRf5OD9CP4X8kcOBOwp QEe5X3IPB1S5u+ZHm4kQcecKqXbuv9QdPWR+5+S4MWPz4kwS+ZOxZMuXI3O0x4Qd fJE0YJy37OQQ2aVoqJfnZmCVPo8/ATc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:34 2025 by rpki-client