$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/140e9da5-b666-3d37-a1cb-b54f95bce64b.roa File: 140e9da5-b666-3d37-a1cb-b54f95bce64b.roa (raw, json) Hash identifier: d9irf3kkJMkC4RjCqw7jxkOcI4H8tR9xN8FZtrUols0= Subject key identifier: 69:DB:1B:9F:8F:B5:FB:10:D3:EB:5D:F7:28:D2:F2:51:90:52:B0:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841185B6A9DC79ADB6293F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/140e9da5-b666-3d37-a1cb-b54f95bce64b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.104.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:85:b6:a9:dc:79:ad:b6:29:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=626f2aa4-3bf1-4873-93e5-c7b33ecc29af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:5a:79:c1:14:41:20:81:59:b7:50:6e:62: fc:2a:59:76:ba:ff:bb:6a:a8:d5:82:18:1c:52:86: 9b:39:03:37:cf:68:65:39:95:9b:23:74:ff:b5:1e: 37:ec:f0:6e:c7:54:27:62:73:f0:57:0b:be:c7:e7: b7:c4:a1:53:85:f4:63:bd:42:e4:00:f6:24:a2:4f: 9a:65:ff:b8:f2:b7:11:7f:04:f4:8b:9c:06:8d:f7: b4:57:81:06:08:34:7b:f9:c4:c7:5e:29:eb:43:bd: bf:d6:a5:f5:56:51:aa:13:19:2e:bc:0d:6d:fc:b4: 8e:c4:11:42:71:53:21:b7:7e:ce:50:c1:af:b8:43: 63:1f:98:d5:0b:18:30:2f:ba:c2:4c:2d:17:63:4a: 0f:e7:b3:34:85:ad:80:61:13:a8:75:94:a5:62:82: a9:bd:32:74:98:8b:44:3d:de:32:d3:47:22:7a:9e: 39:f0:f4:6f:bf:b4:b3:75:26:95:6a:29:f3:8f:de: 77:13:16:00:be:80:dd:ce:5f:ec:c2:a4:eb:31:62: 12:b5:ef:82:bd:a3:3e:00:36:07:a3:df:67:0b:b4: 2c:dd:4b:48:16:d2:65:b7:be:bc:d1:58:00:12:e3: 56:a7:01:29:2c:08:bc:6f:c6:c2:8f:c3:82:9e:11: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DB:1B:9F:8F:B5:FB:10:D3:EB:5D:F7:28:D2:F2:51:90:52:B0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/140e9da5-b666-3d37-a1cb-b54f95bce64b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a5:94:f7:b6:0e:c3:1a:52:04:5a:1d:1e:64:8d:ed:02:48: 4f:d6:98:8a:c6:6e:c4:4f:02:a1:d0:5c:62:ca:73:ae:9c:ef: 23:3b:9d:4b:f5:1c:a7:ef:27:73:9f:04:d8:b1:90:f6:13:85: 21:09:1d:ed:b8:dd:fd:46:22:4b:d9:a7:ae:b7:c3:74:2f:04: aa:8e:cc:8e:9e:94:5f:a7:b5:3d:a4:51:b7:e8:89:e8:12:4f: 63:67:ec:dd:6e:48:25:a1:1d:f3:39:c9:78:66:ec:86:de:8c: ad:05:b9:d7:db:d3:f9:63:ab:37:2d:08:df:ac:a1:a2:29:6c: ca:01:89:bf:64:eb:92:96:6b:5c:88:3a:e4:3c:c0:ad:f0:6f: 39:08:4a:5e:06:33:0c:05:0b:93:af:0f:2d:83:7c:1a:ec:14: 91:92:fd:cf:e7:e6:de:eb:89:a8:69:ec:d4:b2:1a:c2:cb:36: 67:05:e4:8f:97:00:f8:11:f1:96:c1:d4:52:92:4b:58:ec:75: 83:1a:2c:bd:11:61:86:39:2b:81:5a:15:a4:50:43:f0:fb:ef: 73:0a:de:7c:85:3b:86:a3:5e:37:6c:dd:01:82:d5:89:db:3a: a3:fa:40:3c:9a:22:f2:99:49:06:de:cc:0f:1b:fd:30:e5:71: 5d:4e:d8:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYW2qdx5rbYpP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjI2ZjJhYTQtM2JmMS00ODczLTkzZTUtYzdiMzNlY2MyOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjdaecEUQSCBWbdQbmL8Kll2uv+7aqjVghgc UoabOQM3z2hlOZWbI3T/tR437PBux1QnYnPwVwu+x+e3xKFThfRjvULkAPYkok+a Zf+48rcRfwT0i5wGjfe0V4EGCDR7+cTHXinrQ72/1qX1VlGqExkuvA1t/LSOxBFC cVMht37OUMGvuENjH5jVCxgwL7rCTC0XY0oP57M0ha2AYROodZSlYoKpvTJ0mItE Pd4y00ciep458PRvv7SzdSaVainzj953ExYAvoDdzl/swqTrMWISte+CvaM+ADYH o99nC7Qs3UtIFtJlt7680VgAEuNWpwEpLAi8b8bCj8OCnhGmqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnbG5+PtfsQ0+td9yjS8lGQUrBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTQwZTlkYTUtYjY2Ni0z ZDM3LWExY2ItYjU0Zjk1YmNlNjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqllPe2DsMaUgRaHR5kje0CSE/WmIrGbsRPAqHQXGLKc66c7yM7nUv1 HKfvJ3OfBNixkPYThSEJHe243f1GIkvZp663w3QvBKqOzI6elF+ntT2kUbfoiegS T2Nn7N1uSCWhHfM5yXhm7IbejK0Fudfb0/ljqzctCN+soaIpbMoBib9k65KWa1yI OuQ8wK3wbzkISl4GMwwFC5OvDy2DfBrsFJGS/c/n5t7riahp7NSyGsLLNmcF5I+X APgR8ZbB1FKSS1jsdYMaLL0RYYY5K4FaFaRQQ/D773MK3nyFO4ajXjds3QGC1Ynb OqP6QDyaIvKZSQbezA8b/TDlcV1O2H4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:21 2025 by rpki-client