$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c172435-444b-39cb-9571-0602bea0a286.roa File: 1c172435-444b-39cb-9571-0602bea0a286.roa (raw, json) Hash identifier: OBr/7zxxjk513EtKBQv94rDLmn22ygqfeca9xc8dtoQ= Subject key identifier: 07:F3:4E:BE:97:69:CA:AC:D4:3C:A6:7C:59:F5:D0:0C:EC:D2:5D:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA4FDBA189B7D22510A88 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c172435-444b-39cb-9571-0602bea0a286.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.72.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a4:fd:ba:18:9b:7d:22:51:0a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=91a47d4b-df0c-4f68-95e9-be8669f01a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:3b:11:73:57:af:1b:07:79:91:b7:a7:c6: 92:f0:80:a3:8d:2e:e5:55:9c:07:22:97:35:3d:43: 91:36:26:c6:27:6a:8c:43:16:14:96:6e:75:b3:28: bc:fc:44:96:37:af:40:8d:c1:33:48:12:1c:b1:9b: e2:f6:32:f0:a7:27:53:41:d9:14:3a:4a:85:ee:55: 09:3c:28:64:e3:57:ea:17:b4:09:e3:5e:97:b2:ef: 28:8b:ac:54:79:93:0e:b6:73:7c:a3:af:9e:45:f2: 25:75:b1:b3:ed:42:d0:24:da:a4:06:45:3c:d1:63: e5:fb:82:8a:fe:e8:21:bc:e9:4f:8c:1f:be:ca:52: 22:36:68:29:fc:03:54:d3:42:00:c5:c6:af:4d:c1: 5d:f8:43:f6:ed:ba:c3:e8:18:d6:03:dd:eb:a7:b2: f6:a1:b2:d1:e3:bf:08:98:a5:ef:25:be:d2:ba:cc: 73:3e:9f:1d:74:78:a1:ea:83:4d:56:a2:e6:93:21: 14:f5:3a:c1:fd:fe:4d:27:2d:ab:d1:d7:94:fa:1e: e7:77:db:bb:d2:1f:a9:9f:90:6a:57:ef:a8:f7:7b: e3:b4:f8:13:d7:73:e8:39:5e:56:89:3a:a7:f9:bf: 85:f5:e9:2f:de:64:65:d6:83:1a:7a:15:b4:08:c9: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F3:4E:BE:97:69:CA:AC:D4:3C:A6:7C:59:F5:D0:0C:EC:D2:5D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c172435-444b-39cb-9571-0602bea0a286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c9:89:68:01:b7:8f:14:0e:8e:a3:ba:3a:19:f7:a4:72:72: 05:93:e3:1e:61:d9:f1:8c:00:3c:ac:c6:e4:78:f6:cc:3f:95: 84:c7:4d:5b:95:98:b6:88:3b:b8:7e:22:fa:d3:a6:ef:e6:ed: 3b:64:e6:50:f3:72:49:93:46:21:c3:5c:f4:55:b6:1d:29:b8: 48:17:f6:28:4c:5a:ad:f0:2d:bb:94:12:d9:ab:fa:98:d3:99: 7c:f6:ea:fb:54:98:77:c9:50:25:51:7a:9e:d6:ff:16:fd:d7: e1:7e:c1:97:fc:03:6d:4d:73:3b:5d:b3:e9:9f:fb:ab:c3:f0: 5c:fd:ce:d6:94:8c:59:52:3f:ac:a2:10:c6:4f:4a:05:04:c9: ff:5c:e2:8e:d6:99:ee:1f:81:b3:0c:33:08:b6:85:ef:5d:4f: ae:d0:2d:99:75:43:f3:37:2a:c7:26:d4:f2:f3:81:1f:3b:fe: f1:30:47:2d:8c:50:6f:80:db:03:dc:e1:e3:00:41:0e:cf:9f: 48:21:c4:53:99:95:0c:42:27:7f:53:de:14:0b:a1:61:44:28: 26:02:a7:e5:81:0e:1d:68:74:0c:04:b9:ec:a3:1c:a4:a3:11: 22:89:d9:aa:e2:e7:62:7c:65:67:8a:83:d4:bc:3a:c9:f2:01: a1:85:ae:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26T9uhibfSJRCogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OTFhNDdkNGItZGYwYy00ZjY4LTk1ZTktYmU4NjY5ZjAxYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyts7EXNXrxsHeZG3p8aS8ICjjS7lVZwHIpc1 PUORNibGJ2qMQxYUlm51syi8/ESWN69AjcEzSBIcsZvi9jLwpydTQdkUOkqF7lUJ PChk41fqF7QJ416Xsu8oi6xUeZMOtnN8o6+eRfIldbGz7ULQJNqkBkU80WPl+4KK /ughvOlPjB++ylIiNmgp/ANU00IAxcavTcFd+EP27brD6BjWA93rp7L2obLR478I mKXvJb7SusxzPp8ddHih6oNNVqLmkyEU9TrB/f5NJy2r0deU+h7nd9u70h+pn5Bq V++o93vjtPgT13PoOV5WiTqn+b+F9ekv3mRl1oMaehW0CMmzRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfzTr6Xacqs1DymfFn10Azs0l09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWMxNzI0MzUtNDQ0Yi0z OWNiLTk1NzEtMDYwMmJlYTBhMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXJiWgBt48UDo6jujoZ96RycgWT4x5h2fGMADysxuR49sw/lYTHTVuV mLaIO7h+IvrTpu/m7Ttk5lDzckmTRiHDXPRVth0puEgX9ihMWq3wLbuUEtmr+pjT mXz26vtUmHfJUCVRep7W/xb91+F+wZf8A21Ncztds+mf+6vD8Fz9ztaUjFlSP6yi EMZPSgUEyf9c4o7Wme4fgbMMMwi2he9dT67QLZl1Q/M3Kscm1PLzgR87/vEwRy2M UG+A2wPc4eMAQQ7Pn0ghxFOZlQxCJ39T3hQLoWFEKCYCp+WBDh1odAwEueyjHKSj ESKJ2ari52J8ZWeKg9S8OsnyAaGFrjc= -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:23 2025 by rpki-client