$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18cdc339-7103-378b-8bb0-6a4b44f1df27.roa File: 18cdc339-7103-378b-8bb0-6a4b44f1df27.roa (raw, json) Hash identifier: vPIs6Kr0f6a2mBdmK6XWR6HMLdAh9ch0n058YtAZ0x4= Subject key identifier: E1:E5:EA:7D:3E:F3:FC:4A:C8:0E:56:1A:A5:F7:E8:A9:CE:B8:07:8F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8411808EA10BC1EF9C0E8B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18cdc339-7103-378b-8bb0-6a4b44f1df27.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.107.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:80:8e:a1:0b:c1:ef:9c:0e:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f9c61be9-f44e-4e45-a2e5-fe03f8a79dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:ff:4b:1a:4f:c1:29:78:3a:87:50:b4:e3: c7:17:2e:91:20:d2:c6:45:ee:66:3b:a3:66:6c:8a: 81:57:a4:63:b1:95:c7:b5:e4:e8:a4:8e:5f:c6:74: a6:91:57:90:c6:df:8e:f6:57:65:99:77:06:21:28: 1b:0c:d1:f5:5f:da:af:ab:d6:f4:a4:c4:b4:bf:74: 56:4a:0d:d9:f9:39:30:2b:4a:b9:ce:44:2c:48:58: 60:e9:b2:c5:88:d8:e9:f8:78:27:51:40:05:ad:e6: 2b:75:98:78:73:b7:d6:38:7e:5b:a9:39:82:d1:74: e6:8a:04:ff:fb:18:2e:4c:86:16:b0:8f:bb:b8:27: 7d:d4:94:93:b6:74:b5:bc:21:f5:9e:f1:d9:65:37: fa:d7:02:83:08:72:50:8a:97:53:85:e1:3a:4a:82: fe:6a:4b:7e:ec:b4:ec:ad:01:d6:53:8e:95:56:a4: 34:55:3a:42:82:74:3e:b8:7c:b8:6a:f1:21:5a:5e: 2d:48:f9:90:7a:4e:35:db:bc:88:91:17:b9:4a:2b: 58:bc:58:c7:10:a6:8b:45:21:84:c9:b5:3c:2f:18: 7d:fa:cb:f6:da:8e:dd:0b:08:20:18:37:7b:8d:45: a9:4d:1c:75:57:af:d6:0d:f8:f8:75:2f:87:80:02: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E5:EA:7D:3E:F3:FC:4A:C8:0E:56:1A:A5:F7:E8:A9:CE:B8:07:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18cdc339-7103-378b-8bb0-6a4b44f1df27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.107.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:08:ea:34:68:e1:ae:fc:da:dd:0e:41:29:09:f2:ed:5b:ea: d8:a9:b8:4e:80:ff:00:26:ed:51:24:92:62:4e:ee:f8:75:8e: 70:f8:2f:78:a6:66:04:da:47:4e:7e:7f:82:43:ad:5c:ca:50: 01:51:9a:6a:ab:65:fc:6f:94:c4:05:42:bc:54:24:0a:8a:ab: e6:9f:96:8f:20:74:87:9c:51:ec:37:93:02:e2:61:3c:41:2a: a8:ba:eb:2f:9d:87:d6:87:ad:6f:38:8b:18:fa:34:e3:b5:e7: d0:35:c7:ba:1c:e7:11:5d:29:6f:9b:76:f1:e4:72:8d:d5:6b: 3a:0a:e9:5f:49:0b:6d:fd:c4:c2:41:47:64:e0:fc:e9:84:18: f0:b7:d9:46:ff:75:67:97:0e:f0:93:5a:ae:3e:40:f5:e5:0b: 75:6e:49:e8:12:41:8e:0c:bb:c2:1e:97:e1:f9:7b:20:47:20: 0c:4f:7b:be:a1:4c:ca:42:89:72:04:09:b4:1a:24:ec:dd:d9: 7b:eb:6e:62:cd:e7:e8:0a:9c:7e:95:cd:18:da:40:1f:49:28: c7:fc:80:e2:5b:31:e8:d0:41:51:17:c2:07:dc:97:fc:84:34: 7f:b9:c9:01:2e:69:dd:77:d5:79:09:e0:b8:25:ec:c2:69:2e: 6c:03:84:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYCOoQvB75wOi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjljNjFiZTktZjQ0ZS00ZTQ1LWEyZTUtZmUwM2Y4YTc5ZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOn/SxpPwSl4OodQtOPHFy6RINLGRe5mO6Nm bIqBV6RjsZXHteTopI5fxnSmkVeQxt+O9ldlmXcGISgbDNH1X9qvq9b0pMS0v3RW Sg3Z+TkwK0q5zkQsSFhg6bLFiNjp+HgnUUAFreYrdZh4c7fWOH5bqTmC0XTmigT/ +xguTIYWsI+7uCd91JSTtnS1vCH1nvHZZTf61wKDCHJQipdTheE6SoL+akt+7LTs rQHWU46VVqQ0VTpCgnQ+uHy4avEhWl4tSPmQek4127yIkRe5SitYvFjHEKaLRSGE ybU8Lxh9+sv22o7dCwggGDd7jUWpTRx1V6/WDfj4dS+HgAIAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHl6n0+8/xKyA5WGqX36KnOuAePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMThjZGMzMzktNzEwMy0z NzhiLThiYjAtNmE0YjQ0ZjFkZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoI6jRo4a782t0OQSkJ8u1b6tipuE6A/wAm7VEkkmJO7vh1jnD4L3im ZgTaR05+f4JDrVzKUAFRmmqrZfxvlMQFQrxUJAqKq+aflo8gdIecUew3kwLiYTxB Kqi66y+dh9aHrW84ixj6NOO159A1x7oc5xFdKW+bdvHkco3VazoK6V9JC239xMJB R2Tg/OmEGPC32Ub/dWeXDvCTWq4+QPXlC3VuSegSQY4Mu8Iel+H5eyBHIAxPe76h TMpCiXIECbQaJOzd2XvrbmLN5+gKnH6VzRjaQB9JKMf8gOJbMejQQVEXwgfcl/yE NH+5yQEuad131XkJ4Lgl7MJpLmwDhC0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:26 2025 by rpki-client