$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d8cd703-c00e-3fe5-8a01-cabe76c4850a.roa File: 1d8cd703-c00e-3fe5-8a01-cabe76c4850a.roa (raw, json) Hash identifier: LWzUc3dPhwq1EvGCVeyw3z1SiBdt+TLrCmtSg0IM3VI= Subject key identifier: 20:B5:D1:48:99:9E:C9:90:60:AE:71:15:37:6B:AA:B9:2C:75:F6:FB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84118CAEB04877DF8CAC8AA8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d8cd703-c00e-3fe5-8a01-cabe76c4850a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.122.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8c:ae:b0:48:77:df:8c:ac:8a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d1730eae-651c-4252-8da1-d06798e758ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4e:ef:25:0e:83:40:8d:45:47:41:45:21:c3: 69:10:df:77:af:4a:10:88:d7:c6:b1:bc:56:47:48: 74:fc:45:00:00:45:e1:25:cb:2a:25:f6:01:52:ad: 58:06:65:6e:a5:fb:2b:11:5b:c6:56:4a:44:58:4a: 7a:47:99:e4:ab:93:a0:35:39:80:2d:4d:91:03:c0: f6:eb:be:ed:ed:d7:e9:a7:b0:f7:db:43:1f:05:f3: 98:2c:6d:b2:8c:b9:f3:b5:17:f2:d9:ff:79:dc:cd: 7d:46:54:8e:6c:b7:05:3e:f0:32:48:47:b7:b5:ac: 15:b0:7c:d1:f0:f0:b3:0e:56:83:12:0a:ca:89:c4: c6:0d:e7:df:09:e9:e0:cd:20:39:29:5b:54:72:2c: fc:3e:d4:2f:2d:f7:38:08:4d:ae:a0:11:ed:61:be: 80:7a:2b:3c:23:d9:a5:86:f1:58:f6:c4:64:bf:39: 45:b8:c0:b7:53:d2:16:4b:88:c0:35:b2:e1:cb:80: c0:ce:f7:e7:53:b4:55:71:f6:ad:2c:85:e3:b0:f0: 1e:a3:04:55:33:8a:c2:a8:c6:95:b2:16:86:2e:80: 64:ba:a9:1d:36:a8:b0:42:93:57:03:23:67:15:da: 4b:8e:ea:55:9c:47:0e:96:0c:cd:2b:35:b4:6c:7c: 91:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B5:D1:48:99:9E:C9:90:60:AE:71:15:37:6B:AA:B9:2C:75:F6:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d8cd703-c00e-3fe5-8a01-cabe76c4850a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:73:55:ec:8b:0b:87:11:49:9f:ca:6c:60:79:c3:8e:23:4c: 9b:f6:e7:0c:b3:e2:17:28:42:8b:e6:af:87:9c:47:37:34:ab: b4:a2:2e:9e:9d:02:06:63:65:d2:99:68:47:a0:f9:b8:94:47: c5:4b:8e:49:e3:3e:e5:a4:56:0f:17:41:90:8e:e4:79:4b:0d: f4:de:82:bd:b5:05:79:0f:62:25:d9:1f:08:c9:59:bc:b0:5d: dc:06:4e:10:a5:f2:33:25:37:38:63:04:e2:07:65:05:cb:65: 19:a6:f2:c2:be:14:79:60:1b:a0:e5:1a:dd:ef:c7:a1:41:01: 90:64:c5:2a:fa:2f:a0:72:61:d1:6f:ab:65:84:04:f0:21:c9: 5b:be:82:c3:ed:42:54:23:52:81:c5:ac:39:ed:23:80:0b:09: 8a:fc:3b:3a:4e:28:72:8d:c6:d3:9d:bb:bc:e9:aa:b0:5e:0d: 46:66:b9:c1:1e:2a:85:3f:22:bd:0d:17:04:bd:f2:c6:0e:3f: ab:97:83:1d:03:c1:a8:87:e0:31:1a:e1:77:a9:9d:a7:79:19: 1c:5a:31:38:48:32:60:ed:30:5a:2b:94:2a:df:08:47:9e:99: b6:19:47:02:39:c3:c9:80:97:17:67:a1:66:07:f9:21:84:bc: 62:72:88:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYyusEh334ysiqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDE3MzBlYWUtNjUxYy00MjUyLThkYTEtZDA2Nzk4ZTc1OGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE7vJQ6DQI1FR0FFIcNpEN93r0oQiNfGsbxW R0h0/EUAAEXhJcsqJfYBUq1YBmVupfsrEVvGVkpEWEp6R5nkq5OgNTmALU2RA8D2 677t7dfpp7D320MfBfOYLG2yjLnztRfy2f953M19RlSObLcFPvAySEe3tawVsHzR 8PCzDlaDEgrKicTGDeffCengzSA5KVtUciz8PtQvLfc4CE2uoBHtYb6Aeis8I9ml hvFY9sRkvzlFuMC3U9IWS4jANbLhy4DAzvfnU7RVcfatLIXjsPAeowRVM4rCqMaV shaGLoBkuqkdNqiwQpNXAyNnFdpLjupVnEcOlgzNKzW0bHyRawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC10UiZnsmQYK5xFTdrqrksdfb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ4Y2Q3MDMtYzAwZS0z ZmU1LThhMDEtY2FiZTc2YzQ4NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlzVeyLC4cRSZ/KbGB5w44jTJv25wyz4hcoQovmr4ecRzc0q7SiLp6d AgZjZdKZaEeg+biUR8VLjknjPuWkVg8XQZCO5HlLDfTegr21BXkPYiXZHwjJWbyw XdwGThCl8jMlNzhjBOIHZQXLZRmm8sK+FHlgG6DlGt3vx6FBAZBkxSr6L6ByYdFv q2WEBPAhyVu+gsPtQlQjUoHFrDntI4ALCYr8OzpOKHKNxtOdu7zpqrBeDUZmucEe KoU/Ir0NFwS98sYOP6uXgx0DwaiH4DEa4Xepnad5GRxaMThIMmDtMForlCrfCEee mbYZRwI5w8mAlxdnoWYH+SGEvGJyiIg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:38:11 2025 by rpki-client