$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1fa480ff-0d94-3dd3-ace4-f77dbe5b0add.roa File: 1fa480ff-0d94-3dd3-ace4-f77dbe5b0add.roa (raw, json) Hash identifier: VnsBb7TRIrafhdnUwpHqhV3YuJaH5gFnmKD9okglrDo= Subject key identifier: 1E:17:53:7E:80:8F:3B:CE:59:13:D6:FF:49:6F:21:17:0B:BA:3A:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD5B4388A9709F44F1A30 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1fa480ff-0d94-3dd3-ace4-f77dbe5b0add.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.132.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d5:b4:38:8a:97:09:f4:4f:1a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ba11a14b-44cb-4cb7-a9a6-a79dd67737a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:51:c9:4a:2f:0a:a5:02:a1:c1:00:68:cd:d4: 94:2f:67:ce:a2:3d:a0:bc:38:af:60:a9:db:34:dd: 24:cf:ac:8f:77:a8:3a:ad:31:c0:22:66:d6:77:f2: fa:9b:a1:97:ad:d2:55:9e:4f:cb:ff:a8:4c:08:8f: 4a:6d:64:d1:f5:b2:b8:ef:5f:d8:63:53:99:69:44: 46:13:8b:1e:18:0a:f2:3f:7a:31:08:70:d4:26:f3: 89:ba:fb:86:62:d5:df:96:43:09:c1:89:a6:ee:fd: 70:a6:7d:87:6a:46:c2:be:b6:9d:fe:d4:2b:10:58: f4:1b:68:8b:d9:3b:d2:79:e6:ad:a1:bd:c4:28:f4: 47:ee:af:f2:56:a0:7e:6b:04:a8:dd:d3:a6:31:81: 04:97:32:44:ad:76:40:dc:ef:b8:e1:fd:01:90:cc: 80:69:50:88:53:68:7a:5a:3e:d4:ff:25:1c:7a:3c: 86:b7:25:d0:f8:db:c8:1f:9c:d7:aa:07:a4:f1:30: 22:4f:a3:b0:01:3d:26:65:6a:5b:dd:42:17:2f:db: bf:2e:4b:04:8a:e8:7f:46:25:6a:a0:d7:6e:70:00: 53:61:78:bf:11:29:37:60:f5:07:b4:0d:6f:6d:cf: f2:ff:36:b3:4a:c7:ad:50:52:fa:9b:39:70:60:55: 9a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:17:53:7E:80:8F:3B:CE:59:13:D6:FF:49:6F:21:17:0B:BA:3A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1fa480ff-0d94-3dd3-ace4-f77dbe5b0add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d2:65:b3:f8:a3:88:93:9a:81:f6:45:4c:a2:ec:ad:17:ae: c4:bd:cb:cd:82:84:9f:d3:37:09:56:25:ac:d5:c4:19:02:36: af:59:1c:8f:2c:da:f6:4a:44:8e:b2:7c:3b:20:b1:21:75:3e: 9d:ad:bc:0d:e7:4b:c2:d2:a1:d8:09:b5:56:31:ef:2d:9d:70: 7e:43:3b:53:22:f9:27:e4:2d:a0:0b:d4:ba:00:ae:ac:ea:73: b3:ca:8f:ac:90:a4:79:76:c4:80:e9:7f:bd:67:1e:2f:5e:26: 7e:ab:2d:c7:9c:df:e4:2d:5c:99:33:48:36:68:dc:19:6d:4c: f6:f3:9f:67:b8:96:c3:01:40:6d:49:92:3e:17:d9:6d:73:1d: 2b:76:4f:8d:0d:32:dc:c3:26:4f:fe:4c:9a:9f:3f:8f:c3:77: de:0b:33:bb:44:56:8d:e8:96:5a:62:e0:27:a7:55:bb:e5:68: a9:bf:72:d3:0b:cb:29:b5:0e:6e:bb:c4:4c:66:02:92:c3:82: 67:50:d4:d0:1f:8a:b1:3f:68:1f:71:6b:1e:18:8e:b4:a2:30: 9c:1f:38:62:3f:de:e9:e0:a9:80:fc:d1:f8:d8:20:b9:7a:de: 22:57:80:7b:3f:2a:67:e5:de:54:68:6b:19:ca:61:b7:72:6a: e9:3d:8c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29W0OIqXCfRPGjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YmExMWExNGItNDRjYi00Y2I3LWE5YTYtYTc5ZGQ2NzczN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1HJSi8KpQKhwQBozdSUL2fOoj2gvDivYKnb NN0kz6yPd6g6rTHAImbWd/L6m6GXrdJVnk/L/6hMCI9KbWTR9bK471/YY1OZaURG E4seGAryP3oxCHDUJvOJuvuGYtXflkMJwYmm7v1wpn2HakbCvrad/tQrEFj0G2iL 2TvSeeatob3EKPRH7q/yVqB+awSo3dOmMYEElzJErXZA3O+44f0BkMyAaVCIU2h6 Wj7U/yUcejyGtyXQ+NvIH5zXqgek8TAiT6OwAT0mZWpb3UIXL9u/LksEiuh/RiVq oNducABTYXi/ESk3YPUHtA1vbc/y/zazSsetUFL6mzlwYFWabQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4XU36AjzvOWRPW/0lvIRcLujrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWZhNDgwZmYtMGQ5NC0z ZGQzLWFjZTQtZjc3ZGJlNWIwYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjSZbP4o4iTmoH2RUyi7K0XrsS9y82ChJ/TNwlWJazVxBkCNq9ZHI8s 2vZKRI6yfDsgsSF1Pp2tvA3nS8LSodgJtVYx7y2dcH5DO1Mi+SfkLaAL1LoArqzq c7PKj6yQpHl2xIDpf71nHi9eJn6rLcec3+QtXJkzSDZo3BltTPbzn2e4lsMBQG1J kj4X2W1zHSt2T40NMtzDJk/+TJqfP4/Dd94LM7tEVo3ollpi4CenVbvlaKm/ctML yym1Dm67xExmApLDgmdQ1NAfirE/aB9xax4YjrSiMJwfOGI/3ungqYD80fjYILl6 3iJXgHs/Kmfl3lRoaxnKYbdyauk9jJ4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:25 2025 by rpki-client