$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa File: 230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa (raw, json) Hash identifier: 2NFWKV3YBwkKa6CAcBT6bx+YcBJ6EPZrZ91lCnLsMi4= Subject key identifier: 24:F1:52:D2:CA:B1:4C:7C:CD:04:04:D7:1A:85:B7:A1:87:09:D3:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB0506351471DB0D4FA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.99.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b0:50:63:51:47:1d:b0:d4:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c41b1f07-d0cd-4a1c-98eb-fa3c8ef1a492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:9e:8b:7a:e6:16:09:0d:8c:85:96:ea:49: 72:9a:c3:e2:09:89:14:28:24:17:fc:8c:8f:8d:d6: 30:e2:e9:7b:c6:78:0e:50:33:c8:0b:98:6c:8b:c8: 44:d7:c7:ff:0a:31:21:5b:1b:b6:10:36:a4:f6:88: 9c:70:32:b0:bf:45:06:e7:83:37:5d:a9:95:a6:fe: 08:a1:c0:64:1b:0f:bd:65:08:40:3f:e3:9f:b7:f5: 9a:a3:29:5c:9e:ca:60:d6:7e:42:be:1d:97:a5:18: 0e:70:88:ec:e3:ef:bb:93:7c:4e:a7:9b:fd:96:a9: 87:7f:ae:f6:8a:0c:16:8d:f0:c1:62:f9:0a:47:e6: f5:95:82:49:08:57:b9:97:81:65:32:bd:09:51:4b: 15:1f:eb:33:4c:b3:15:b9:16:21:3c:ca:29:8b:42: e0:5c:27:14:96:49:3e:f4:67:67:47:9d:8e:37:ca: 5a:97:3d:8f:f1:f0:6b:37:95:b8:b0:55:a4:41:42: f9:0a:16:01:cc:d6:f0:74:74:57:f9:c4:35:c9:76: 50:18:98:02:a8:f2:f5:bf:b9:a9:00:20:56:1b:43: 9c:46:99:e6:b6:d8:62:b2:bf:d6:60:ed:7a:bf:72: 11:e6:4f:59:a0:27:7c:bb:ee:c5:00:8b:3f:52:c0: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F1:52:D2:CA:B1:4C:7C:CD:04:04:D7:1A:85:B7:A1:87:09:D3:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:11:fc:e5:89:30:b1:69:f7:b8:7c:71:74:86:46:8a:e2:ef: 83:8e:83:a0:77:62:f9:21:c0:80:60:36:e3:ad:12:4e:40:ad: 7e:9d:a1:38:9e:88:8d:d9:93:26:60:cd:ce:59:0b:cf:72:83: 23:6b:3b:05:e1:79:d4:52:a0:77:72:c4:45:7d:39:52:1c:e2: 83:0c:fc:ca:55:d4:79:0d:81:c2:c2:bb:8b:9d:74:bb:a6:f8: a4:c5:cf:02:26:ae:f1:49:d6:7a:2f:23:2f:a0:09:90:1e:db: 3f:7b:11:2e:bd:01:d0:a5:1a:bb:18:2c:6c:c2:eb:50:a9:34: db:67:68:c5:be:f7:93:de:ec:01:c5:3f:cb:ae:fb:6e:89:40: 93:15:06:24:80:b3:13:13:85:a1:49:af:7c:93:cd:c4:29:f8: a2:cf:7f:c5:1f:38:ca:61:97:0a:3f:89:b8:31:35:3a:f0:9d: f2:5b:ae:fa:29:af:96:d9:2b:bf:bd:99:ea:b2:f7:9c:96:74: 27:b2:ad:de:59:8d:75:58:01:52:e9:1a:ea:32:3a:8a:66:bf: 20:d3:7c:46:7e:e7:00:0f:7f:80:99:38:54:31:03:05:a9:9e: aa:a8:58:cb:78:40:81:d0:e7:33:51:3d:94:b3:28:22:ae:6e: 63:44:ba:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27BQY1FHHbDU+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzQxYjFmMDctZDBjZC00YTFjLTk4ZWItZmEzYzhlZjFhNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7mei3rmFgkNjIWW6klymsPiCYkUKCQX/IyP jdYw4ul7xngOUDPIC5hsi8hE18f/CjEhWxu2EDak9oiccDKwv0UG54M3XamVpv4I ocBkGw+9ZQhAP+Oft/Waoylcnspg1n5Cvh2XpRgOcIjs4++7k3xOp5v9lqmHf672 igwWjfDBYvkKR+b1lYJJCFe5l4FlMr0JUUsVH+szTLMVuRYhPMopi0LgXCcUlkk+ 9GdnR52ON8palz2P8fBrN5W4sFWkQUL5ChYBzNbwdHRX+cQ1yXZQGJgCqPL1v7mp ACBWG0OcRpnmtthisr/WYO16v3IR5k9ZoCd8u+7FAIs/UsCpmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTxUtLKsUx8zQQE1xqFt6GHCdPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjMwZjZkYmMtMWYyNC0z YjUwLWI5M2ItYmM2NzBkNGE1YzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYR/OWJMLFp97h8cXSGRori74OOg6B3YvkhwIBgNuOtEk5ArX6doTie iI3ZkyZgzc5ZC89ygyNrOwXhedRSoHdyxEV9OVIc4oMM/MpV1HkNgcLCu4uddLum +KTFzwImrvFJ1novIy+gCZAe2z97ES69AdClGrsYLGzC61CpNNtnaMW+95Pe7AHF P8uu+26JQJMVBiSAsxMThaFJr3yTzcQp+KLPf8UfOMphlwo/ibgxNTrwnfJbrvop r5bZK7+9meqy95yWdCeyrd5ZjXVYAVLpGuoyOopmvyDTfEZ+5wAPf4CZOFQxAwWp nqqoWMt4QIHQ5zNRPZSzKCKubmNEuks= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:16 2025 by rpki-client