$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/240b7b1e-5ac1-3530-9208-59ae94dede8d.roa File: 240b7b1e-5ac1-3530-9208-59ae94dede8d.roa (raw, json) Hash identifier: j2KE69kkOBcA9zHEB6g/SrC0cn8RojRdt8cxOQl42vQ= Subject key identifier: B7:BF:D4:EE:9C:F4:92:5E:D2:F5:F6:B9:50:52:DD:19:CC:25:A1:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB6AC4FC727EACAAAC300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/240b7b1e-5ac1-3530-9208-59ae94dede8d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.76.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b6:ac:4f:c7:27:ea:ca:aa:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c0b8b1df-29ff-4281-bc9e-c53c82fa2631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ef:05:58:e8:db:7b:ce:a6:e5:cf:89:b6:4e: ff:4f:ca:54:ca:58:3a:ab:a7:60:db:c9:62:ba:38: 64:69:1a:69:42:86:12:71:69:0c:f1:39:1c:07:84: 8b:9a:44:db:f9:bf:13:8a:5c:88:4c:f0:2c:6c:22: a6:99:c4:85:e9:5d:4e:44:84:78:b3:ad:d3:77:0b: 10:d1:97:5b:06:9d:30:07:68:92:dd:d7:89:06:10: 8b:aa:48:7b:2e:10:13:01:03:cc:75:a3:bc:da:ab: 52:9a:5e:80:c7:c5:67:1d:55:8f:53:ab:4f:ed:ae: 78:37:15:23:87:23:e9:13:53:31:4d:6e:be:73:9b: a7:8d:e6:d7:f9:9c:08:88:26:66:92:9c:5b:6a:a9: 5a:fc:1c:0b:d3:07:fc:68:54:e0:92:bb:cd:82:1b: 5b:b8:c5:25:c6:d6:fc:e6:c7:c8:5e:4f:18:46:1d: 95:b3:58:0b:51:90:e0:d6:58:10:31:cb:a5:55:30: e0:e4:61:d1:4f:b3:01:11:59:c1:66:a0:b3:1e:72: 4f:8e:85:90:ca:ab:77:e8:27:f6:89:90:30:ee:f7: 6c:a6:e1:ab:6a:5d:6a:68:72:0d:53:f0:2b:a2:5f: e9:98:da:19:6f:00:07:81:62:a4:db:f1:b3:a4:0f: 66:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BF:D4:EE:9C:F4:92:5E:D2:F5:F6:B9:50:52:DD:19:CC:25:A1:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/240b7b1e-5ac1-3530-9208-59ae94dede8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:54:46:f8:73:3f:e2:47:a3:ba:d0:5c:45:15:59:40:9d:69: 20:d0:27:ad:17:51:ab:02:ab:e2:66:fc:02:f2:de:38:90:a1: ea:c0:f7:94:f1:09:71:36:c3:64:45:5c:f7:a1:1a:10:29:ea: fa:6e:14:17:e3:7c:8b:aa:f8:d8:b1:4c:97:6d:5a:95:92:12: f0:6f:78:2c:fe:e7:7a:bb:cf:82:f4:a3:a3:52:c8:e5:ea:c9: 21:d9:73:8e:48:2a:8b:c3:66:ee:ee:64:9e:60:45:62:7b:80: c3:15:71:58:69:c1:c5:1e:8c:16:9b:0e:6a:96:1b:07:73:08: 18:1c:31:86:f1:f6:56:03:33:09:02:41:58:68:66:07:ec:b1: f9:22:d4:01:0c:80:64:99:2b:65:9a:bf:77:44:c8:50:5f:ee: 11:2a:34:2b:43:b0:c8:77:ef:1b:f1:6c:4f:9a:6b:ad:07:61: 7e:6f:ee:38:8c:20:78:22:c9:0e:61:62:8c:d9:a6:1b:47:cc: a1:46:48:af:30:4a:51:da:e1:88:e2:e6:64:57:2f:06:1e:e9: f0:48:45:9f:53:39:21:80:fe:ea:f4:0b:f1:0e:0c:6d:77:fe: 25:35:d7:16:7f:dc:e4:30:ce:97:18:d1:10:77:16:71:c6:57: 64:18:da:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27asT8cn6sqqwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzBiOGIxZGYtMjlmZi00MjgxLWJjOWUtYzUzYzgyZmEyNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO8FWOjbe86m5c+Jtk7/T8pUylg6q6dg28li ujhkaRppQoYScWkM8TkcB4SLmkTb+b8TilyITPAsbCKmmcSF6V1ORIR4s63TdwsQ 0ZdbBp0wB2iS3deJBhCLqkh7LhATAQPMdaO82qtSml6Ax8VnHVWPU6tP7a54NxUj hyPpE1MxTW6+c5unjebX+ZwIiCZmkpxbaqla/BwL0wf8aFTgkrvNghtbuMUlxtb8 5sfIXk8YRh2Vs1gLUZDg1lgQMculVTDg5GHRT7MBEVnBZqCzHnJPjoWQyqt36Cf2 iZAw7vdspuGral1qaHINU/Arol/pmNoZbwAHgWKk2/GzpA9m9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe/1O6c9JJe0vX2uVBS3RnMJaHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjQwYjdiMWUtNWFjMS0z NTMwLTkyMDgtNTlhZTk0ZGVkZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9URvhzP+JHo7rQXEUVWUCdaSDQJ60XUasCq+Jm/ALy3jiQoerA95Tx CXE2w2RFXPehGhAp6vpuFBfjfIuq+NixTJdtWpWSEvBveCz+53q7z4L0o6NSyOXq ySHZc45IKovDZu7uZJ5gRWJ7gMMVcVhpwcUejBabDmqWGwdzCBgcMYbx9lYDMwkC QVhoZgfssfki1AEMgGSZK2Wav3dEyFBf7hEqNCtDsMh37xvxbE+aa60HYX5v7jiM IHgiyQ5hYozZphtHzKFGSK8wSlHa4Yji5mRXLwYe6fBIRZ9TOSGA/ur0C/EODG13 /iU11xZ/3OQwzpcY0RB3FnHGV2QY2ic= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:16 2025 by rpki-client