$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b8a98d-c1a0-3317-b565-a74b705cd609.roa File: 23b8a98d-c1a0-3317-b565-a74b705cd609.roa (raw, json) Hash identifier: zbiYZceBLvxmsX1tXhg+cLaiKV/dvjqIUlizdGda/mw= Subject key identifier: 91:B2:7E:C2:26:49:99:0E:C5:A7:90:79:5F:0A:88:46:7B:69:BD:41 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF300BC02465B9531DA10 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b8a98d-c1a0-3317-b565-a74b705cd609.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.176.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f3:00:bc:02:46:5b:95:31:da:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=f206af1f-f8ba-46b8-939a-d37abcc0b5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:57:fb:ed:9d:01:a8:09:1d:18:49:ee:74:64: 5a:a5:fd:30:8c:20:ea:e3:4f:82:df:53:b9:6e:2e: 8c:87:d6:2e:e9:1a:24:a8:11:1f:c1:b4:e0:b3:b1: 54:89:91:fe:62:93:19:95:53:a8:0a:17:98:47:cc: 17:ed:f5:8b:6f:d9:06:a3:96:eb:29:d2:ba:35:6b: c3:1e:ea:4f:d3:a7:7d:d7:40:5f:04:b4:74:fc:6c: ea:6f:c9:94:fc:88:00:33:1d:0f:25:b2:96:b3:c8: ed:ff:c4:ff:83:73:18:61:af:27:7b:c8:17:28:2d: db:80:4b:2f:29:bc:c2:bb:5a:9e:45:b5:01:00:39: 66:55:d5:98:e8:2c:5d:d3:c9:c8:5a:4d:57:8b:e6: 43:26:e1:af:df:35:4b:9c:ec:58:6d:fc:63:c9:c4: 41:d2:18:86:ca:15:78:38:ac:65:29:95:97:82:c3: 4f:3f:da:cc:a8:1f:ef:ef:94:8e:bd:9d:0b:d1:e3: f8:48:79:3d:2d:f5:93:16:35:0a:14:3b:e5:77:62: c9:92:ce:c0:86:c0:f0:66:7f:92:f6:67:92:0d:f8: 91:80:49:64:d3:85:f2:94:0c:c5:ea:14:b9:97:bc: 4f:39:73:e9:b0:e0:65:83:83:8e:ca:ac:7c:81:f8: 01:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B2:7E:C2:26:49:99:0E:C5:A7:90:79:5F:0A:88:46:7B:69:BD:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b8a98d-c1a0-3317-b565-a74b705cd609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ef:af:fa:28:f7:3d:53:fa:30:74:17:6a:ce:8b:75:74:19: 9e:36:a3:f9:88:b0:3d:8b:9b:7b:ba:9d:dd:a3:ab:b2:bf:5c: c4:98:4b:69:96:1f:d6:81:bd:8c:d3:e7:ca:b2:32:56:7f:16: 74:f5:c5:4a:8c:22:35:46:b1:01:a1:68:97:c5:1d:fc:bf:0a: 0d:97:50:ed:a6:66:5d:5d:89:27:c7:95:bf:ff:41:b0:2e:66: f0:e1:cf:ea:14:5d:40:a3:47:2e:62:ee:c0:49:25:43:cd:8e: e2:eb:ec:f6:2e:de:c7:3b:3e:cd:02:49:bd:3c:3e:b9:0f:6f: 08:ee:96:7b:f1:ea:44:90:79:0e:9a:4c:43:6c:79:d6:7d:72: 7f:48:0d:a8:f1:74:ec:ae:1d:c4:fb:b7:fa:53:2d:f6:6e:fd: bb:7b:a8:3f:bd:51:bf:81:6c:d4:67:15:0f:6e:50:f8:2d:51: 69:c0:75:63:40:0b:c7:a3:1a:06:37:d8:97:c6:ae:fd:a4:00: cf:b9:55:b6:10:51:4d:be:f6:87:e7:11:4c:3c:13:99:06:c2: 8f:32:e8:a9:8c:bc:12:91:7f:e9:31:d0:d6:cf:87:34:5a:7a: 8a:66:9d:f8:7d:7d:36:dd:b2:33:39:aa:e3:23:7d:bb:1c:89: 56:73:9a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/MAvAJGW5Ux2hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjIwNmFmMWYtZjhiYS00NmI4LTkzOWEtZDM3YWJjYzBiNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVf77Z0BqAkdGEnudGRapf0wjCDq40+C31O5 bi6Mh9Yu6RokqBEfwbTgs7FUiZH+YpMZlVOoCheYR8wX7fWLb9kGo5brKdK6NWvD HupP06d910BfBLR0/Gzqb8mU/IgAMx0PJbKWs8jt/8T/g3MYYa8ne8gXKC3bgEsv KbzCu1qeRbUBADlmVdWY6Cxd08nIWk1Xi+ZDJuGv3zVLnOxYbfxjycRB0hiGyhV4 OKxlKZWXgsNPP9rMqB/v75SOvZ0L0eP4SHk9LfWTFjUKFDvld2LJks7AhsDwZn+S 9meSDfiRgElk04XylAzF6hS5l7xPOXPpsOBlg4OOyqx8gfgBlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGyfsImSZkOxaeQeV8KiEZ7ab1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjNiOGE5OGQtYzFhMC0z MzE3LWI1NjUtYTc0YjcwNWNkNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/vr/oo9z1T+jB0F2rOi3V0GZ42o/mIsD2Lm3u6nd2jq7K/XMSYS2mW H9aBvYzT58qyMlZ/FnT1xUqMIjVGsQGhaJfFHfy/Cg2XUO2mZl1diSfHlb//QbAu ZvDhz+oUXUCjRy5i7sBJJUPNjuLr7PYu3sc7Ps0CSb08PrkPbwjulnvx6kSQeQ6a TENsedZ9cn9IDajxdOyuHcT7t/pTLfZu/bt7qD+9Ub+BbNRnFQ9uUPgtUWnAdWNA C8ejGgY32JfGrv2kAM+5VbYQUU2+9ofnEUw8E5kGwo8y6KmMvBKRf+kx0NbPhzRa eopmnfh9fTbdsjM5quMjfbsciVZzmks= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:51 2025 by rpki-client