$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fe9311e-fede-30e2-8d1e-5ab3f9ff14d3.roa File: 0fe9311e-fede-30e2-8d1e-5ab3f9ff14d3.roa (raw, json) Hash identifier: Owr+omTxwnmJTq6pG8uvQMbJa13nFE1YSO/OlnDrRJU= Subject key identifier: EC:4E:FE:08:C9:B2:29:01:C1:B1:AC:CD:BE:B0:B1:20:31:29:44:0A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEBFCC41F2595952A0740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fe9311e-fede-30e2-8d1e-5ab3f9ff14d3.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.141.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:eb:fc:c4:1f:25:95:95:2a:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=eea298f4-c2c0-4f82-9caf-8e33c4ab6337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3a:9c:ac:b6:33:d0:e1:14:c0:d5:da:f6:3b: 51:a7:3e:ed:47:10:55:27:b7:27:bb:2f:51:06:91: 9d:b9:c2:19:ea:ed:ed:2a:f8:3f:0d:0f:a9:65:27: 02:31:c7:ef:69:96:2b:03:f4:d5:e5:60:58:13:ff: 0f:1e:70:d6:77:6d:b6:b8:9d:ad:48:3a:55:60:30: 3d:ea:6e:04:5a:0e:b5:80:c5:16:b8:3e:4b:4a:07: 30:ec:88:d7:29:bd:82:b8:a2:ad:c0:fb:d3:19:11: d5:ce:28:31:fd:b7:64:5c:4a:93:f0:18:7b:05:55: d6:75:69:a8:dc:0d:d8:3e:eb:f6:12:58:c6:cc:00: 02:cb:c8:ee:0d:1b:bd:98:14:69:07:61:55:01:3a: c5:17:23:6d:82:d8:0a:3a:15:71:e1:f8:1f:09:9f: 10:29:05:3d:92:83:3c:07:b0:59:52:52:f5:8e:06: 93:86:e3:85:33:71:22:26:98:dc:de:34:76:cf:79: 64:8c:c9:ac:43:55:92:93:91:3e:e1:97:ad:b1:8f: 49:a4:24:a0:ff:1f:cb:82:44:12:c7:c4:f1:ff:10: 8a:4c:2c:69:3d:69:85:9f:0e:da:80:67:66:e2:f4: d6:83:99:99:ea:31:f7:42:56:13:90:06:55:5e:15: c0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4E:FE:08:C9:B2:29:01:C1:B1:AC:CD:BE:B0:B1:20:31:29:44:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fe9311e-fede-30e2-8d1e-5ab3f9ff14d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.141.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:61:3d:b3:ff:24:71:80:05:e1:04:d6:ac:df:37:b2:a6:58: 3f:ae:e6:8e:da:d2:7f:f0:1d:30:7c:20:34:3a:99:39:d1:a4: 38:d2:89:56:bc:2e:a9:9e:80:0d:56:b9:9a:16:26:8e:56:95: ec:b7:50:7b:08:d5:42:49:97:ea:02:3d:09:4f:7e:06:1b:16: 78:cb:21:e8:0e:e2:e5:f9:ef:c3:af:2d:fc:15:27:32:ab:6f: 9e:6d:60:a1:e3:42:79:86:6a:21:b4:6a:da:5a:f1:10:8b:d4: e4:47:36:76:9a:91:68:ff:b7:da:8a:3c:0a:39:9d:f0:d4:fa: fe:fa:4d:b6:c2:92:dc:04:5a:a9:e7:83:45:41:84:86:02:1f: 05:01:61:44:1b:52:e0:7d:7d:86:42:8c:f2:71:47:09:96:e0: 26:94:ea:18:ce:33:f6:49:aa:af:f9:9f:54:a9:da:c9:89:f0: 58:96:1e:99:ef:1d:ef:1e:3b:6f:02:9d:0f:86:0d:a2:76:bc: 7f:43:90:57:95:c1:23:87:a5:34:e8:05:3f:c2:d6:29:b2:62: 71:71:6a:5b:5d:48:85:19:76:7a:c8:36:33:1d:2a:4b:7b:a5: a2:8d:78:06:14:9f:74:6d:5c:ca:d8:e1:28:40:b4:d1:1c:c8: fd:73:ef:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+v8xB8llZUqB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZWVhMjk4ZjQtYzJjMC00ZjgyLTljYWYtOGUzM2M0YWI2MzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzqcrLYz0OEUwNXa9jtRpz7tRxBVJ7cnuy9R BpGducIZ6u3tKvg/DQ+pZScCMcfvaZYrA/TV5WBYE/8PHnDWd222uJ2tSDpVYDA9 6m4EWg61gMUWuD5LSgcw7IjXKb2CuKKtwPvTGRHVzigx/bdkXEqT8Bh7BVXWdWmo 3A3YPuv2EljGzAACy8juDRu9mBRpB2FVATrFFyNtgtgKOhVx4fgfCZ8QKQU9koM8 B7BZUlL1jgaThuOFM3EiJpjc3jR2z3lkjMmsQ1WSk5E+4ZetsY9JpCSg/x/LgkQS x8Tx/xCKTCxpPWmFnw7agGdm4vTWg5mZ6jH3QlYTkAZVXhXAUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxO/gjJsikBwbGszb6wsSAxKUQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGZlOTMxMWUtZmVkZS0z MGUyLThkMWUtNWFiM2Y5ZmYxNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZhPbP/JHGABeEE1qzfN7KmWD+u5o7a0n/wHTB8IDQ6mTnRpDjSiVa8 LqmegA1WuZoWJo5Wley3UHsI1UJJl+oCPQlPfgYbFnjLIegO4uX578OvLfwVJzKr b55tYKHjQnmGaiG0atpa8RCL1ORHNnaakWj/t9qKPAo5nfDU+v76TbbCktwEWqnn g0VBhIYCHwUBYUQbUuB9fYZCjPJxRwmW4CaU6hjOM/ZJqq/5n1Sp2smJ8FiWHpnv He8eO28CnQ+GDaJ2vH9DkFeVwSOHpTToBT/C1imyYnFxaltdSIUZdnrINjMdKkt7 paKNeAYUn3RtXMrY4ShAtNEcyP1z74A= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:17 2025 by rpki-client