$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21198b25-2dce-3f15-af93-c4b257298ff9.roa File: 21198b25-2dce-3f15-af93-c4b257298ff9.roa (raw, json) Hash identifier: 6IO2Z0jUVIXn7zogc1o0cOgtFl0x+Al1ULtuAPVFwb4= Subject key identifier: A9:48:F9:F6:2C:09:E7:60:10:EF:D9:6E:1E:B1:F0:4F:07:72:1C:9B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841238C4892ADF66FFD70140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21198b25-2dce-3f15-af93-c4b257298ff9.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.108.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:38:c4:89:2a:df:66:ff:d7:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4bb8e8c7-bbeb-4204-9507-dceff4d91f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:55:31:68:23:fe:85:b3:b5:47:db:04:38: 06:d9:23:3b:60:27:58:01:95:7a:21:99:9b:ae:7a: 17:fd:68:87:78:6b:e8:32:55:e1:fb:d5:b1:12:c7: f2:32:b5:3c:be:2d:04:24:bd:ec:e7:fd:c5:b0:82: 68:97:5c:ed:3f:2e:3f:df:18:48:c2:16:62:0c:6a: f2:ad:3d:42:58:3c:c3:38:77:59:51:34:e4:0f:4a: 53:a3:ec:4c:9c:ef:8a:7e:54:79:89:eb:8b:51:b6: 19:bc:14:24:2e:f3:19:b1:13:17:2a:bc:be:e2:8e: eb:0d:ff:97:97:03:10:11:e2:79:28:a9:ef:12:51: a1:5c:af:11:e0:cd:6c:ff:91:f4:c5:5e:6f:2e:6e: 02:12:c9:14:3f:0b:99:52:fb:71:32:27:3d:c6:c1: 47:6f:a7:ae:13:73:79:05:1f:5e:ee:f4:45:1a:15: 86:21:7d:0e:a3:e9:ce:77:91:ba:a7:df:03:2e:a9: 88:fa:ab:22:75:b1:75:6e:40:9a:9e:07:6b:b5:95: 56:13:0a:95:e5:84:ed:98:65:61:87:c0:84:e7:d8: 1f:24:48:d8:03:4e:ee:3e:06:bd:d2:2b:49:5d:f0: 96:0b:c7:6c:6d:45:94:63:c4:ba:43:c8:df:64:d3: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:48:F9:F6:2C:09:E7:60:10:EF:D9:6E:1E:B1:F0:4F:07:72:1C:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21198b25-2dce-3f15-af93-c4b257298ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e9:dc:b0:88:41:3b:77:3b:10:5e:7f:53:87:67:1d:51:7c: 59:2d:3a:53:7c:13:b8:e3:65:e0:cb:cc:80:b7:37:38:c6:13: 81:31:18:8a:e6:3d:93:a6:45:4a:4c:4f:33:5c:4c:9b:1c:6b: c8:09:5b:73:37:37:0a:ea:2f:23:ca:92:e3:8d:eb:a2:67:5f: f6:74:02:70:1f:ce:b3:61:ed:64:a9:29:49:8f:23:9e:7a:89: af:4d:d6:01:f8:8e:63:72:ca:b0:93:96:8d:89:65:4e:22:2b: 95:6b:30:27:85:9f:63:72:bd:bc:eb:27:8d:5a:7a:5c:49:bb: cb:40:38:53:ba:ac:9a:c7:0a:c9:53:06:56:19:49:10:4f:b2: b5:09:39:e2:44:f7:49:3f:2d:0b:30:a9:89:07:01:d3:88:ff: b6:91:43:81:a0:8b:25:c0:3c:59:ec:06:5a:97:c0:7d:e9:e6: 02:fe:a9:fa:58:d9:69:83:7b:ec:7f:c1:b3:89:af:6c:f1:fd: 6f:04:3a:8b:bc:6a:58:cb:28:b5:ca:bb:17:8f:54:a0:20:e9: 31:dc:5d:53:8c:1e:11:84:8d:55:5c:7f:df:6f:79:dc:2d:43: 2e:9e:60:96:1c:6b:bc:f5:1e:b6:82:07:cb:d4:da:68:8b:b4: 29:5d:dc:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjjEiSrfZv/XAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGJiOGU4YzctYmJlYi00MjA0LTk1MDctZGNlZmY0ZDkxZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb1VMWgj/oWztUfbBDgG2SM7YCdYAZV6IZmb rnoX/WiHeGvoMlXh+9WxEsfyMrU8vi0EJL3s5/3FsIJol1ztPy4/3xhIwhZiDGry rT1CWDzDOHdZUTTkD0pTo+xMnO+KflR5ieuLUbYZvBQkLvMZsRMXKry+4o7rDf+X lwMQEeJ5KKnvElGhXK8R4M1s/5H0xV5vLm4CEskUPwuZUvtxMic9xsFHb6euE3N5 BR9e7vRFGhWGIX0Oo+nOd5G6p98DLqmI+qsidbF1bkCangdrtZVWEwqV5YTtmGVh h8CE59gfJEjYA07uPga90itJXfCWC8dsbUWUY8S6Q8jfZNPkkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlI+fYsCedgEO/Zbh6x8E8HchybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjExOThiMjUtMmRjZS0z ZjE1LWFmOTMtYzRiMjU3Mjk4ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHp3LCIQTt3OxBef1OHZx1RfFktOlN8E7jjZeDLzIC3NzjGE4ExGIrm PZOmRUpMTzNcTJsca8gJW3M3NwrqLyPKkuON66JnX/Z0AnAfzrNh7WSpKUmPI556 ia9N1gH4jmNyyrCTlo2JZU4iK5VrMCeFn2NyvbzrJ41aelxJu8tAOFO6rJrHCslT BlYZSRBPsrUJOeJE90k/LQswqYkHAdOI/7aRQ4GgiyXAPFnsBlqXwH3p5gL+qfpY 2WmDe+x/wbOJr2zx/W8EOou8aljLKLXKuxePVKAg6THcXVOMHhGEjVVcf99vedwt Qy6eYJYca7z1HraCB8vU2miLtCld3Pw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:57 2025 by rpki-client