$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25fea465-8f7d-3e7b-bab6-927a40f02d4a.roa File: 25fea465-8f7d-3e7b-bab6-927a40f02d4a.roa (raw, json) Hash identifier: +HIltcOYSLcm7jprVqCx8DF3e+1FfuTjWv6jWfpX+cE= Subject key identifier: 99:D5:13:1D:85:6A:43:33:9A:05:3E:83:B0:5B:FE:81:0D:23:E0:95 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBFCA09628D14C0D059C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25fea465-8f7d-3e7b-bab6-927a40f02d4a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.130.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:bf:ca:09:62:8d:14:c0:d0:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=dff6e377-0605-445c-a5b8-751131e6eb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:f9:f3:8f:4e:13:c1:d5:d5:5f:5c:a4:95: b5:f5:ba:4e:3d:a9:cb:90:8f:f0:31:9d:79:b5:e1: 39:09:54:01:d7:6f:d4:98:fa:21:79:72:28:60:02: 0c:dd:a7:99:c6:b4:e3:43:fa:9e:27:17:33:98:f8: 0d:98:df:9a:e3:c9:7b:f8:0d:cb:7f:92:79:3c:90: ab:5b:8d:25:c3:fb:f3:45:e0:84:cd:df:2e:2d:03: 88:9e:9a:b9:dc:f8:f7:62:8f:1b:ac:91:b2:bf:d1: 83:a0:ab:99:12:a1:23:5f:fb:d2:b7:10:76:38:8f: 10:c8:98:28:55:2e:10:28:68:01:c9:6f:c6:a7:bc: 86:5d:3f:4a:33:6d:76:f7:e5:b2:b1:e9:d9:f9:65: 1e:8f:72:96:b0:37:12:fc:38:2a:b3:0e:99:4d:aa: d6:6b:23:87:c8:21:66:6a:b1:29:3f:72:fe:f9:cb: 7e:ea:eb:cf:05:57:92:c4:be:31:1a:82:71:9f:b8: 7c:a7:75:40:0d:eb:62:00:a1:c6:04:e6:b6:99:cf: 9b:d7:df:48:40:1a:aa:ec:b1:4c:2f:49:ce:6d:1d: b0:5f:3f:bf:ca:63:4f:7c:a8:9d:6e:ae:fc:be:51: 76:f6:6d:29:6b:40:92:4a:55:3f:be:10:da:b6:ca: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D5:13:1D:85:6A:43:33:9A:05:3E:83:B0:5B:FE:81:0D:23:E0:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25fea465-8f7d-3e7b-bab6-927a40f02d4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.130.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5d:a9:61:4e:7c:21:83:5b:e7:9c:6b:2f:9d:b1:6f:17:b8: ba:cb:c7:28:0f:6c:ae:ff:66:48:63:73:1a:fb:9c:45:b8:ff: 41:66:96:c3:ec:70:77:d6:a6:2d:08:0d:d1:63:0d:56:fe:db: 48:85:df:ce:ec:94:79:1e:60:8b:5f:b3:c8:3f:4e:eb:1e:f0: 4e:b1:bc:e0:d2:0b:3a:6d:e9:67:0b:b3:03:3f:13:4b:2b:ca: c6:78:88:ab:6e:4b:ea:0d:c7:95:31:67:04:98:fd:b4:ca:96: fd:94:e1:97:22:57:0a:6b:a5:cf:8e:07:53:41:02:4d:19:9b: 19:7f:85:89:74:6c:6e:5b:20:c1:c6:d8:80:73:4a:97:5f:b6: 94:f8:97:8c:6a:3e:5b:f8:4e:2d:33:d5:62:38:2f:e3:cb:51: e8:2a:01:1e:e8:24:b6:0a:45:c8:97:e7:70:ee:81:f9:42:86: c1:78:cd:ec:db:27:af:95:c8:ac:34:81:6e:d3:f3:03:91:8f: 82:f8:48:f9:8e:79:31:a2:d5:09:1c:58:e8:4f:e0:90:62:be: 36:1b:f5:96:5a:38:4e:13:4b:4f:b2:39:4d:c0:7b:9b:38:9e: 68:fc:4e:1f:17:74:57:c9:59:30:0f:4e:ef:ae:81:20:54:90: e9:ca:79:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27/KCWKNFMDQWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZGZmNmUzNzctMDYwNS00NDVjLWE1YjgtNzUxMTMxZTZlYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYj5849OE8HV1V9cpJW19bpOPanLkI/wMZ15 teE5CVQB12/UmPoheXIoYAIM3aeZxrTjQ/qeJxczmPgNmN+a48l7+A3Lf5J5PJCr W40lw/vzReCEzd8uLQOInpq53Pj3Yo8brJGyv9GDoKuZEqEjX/vStxB2OI8QyJgo VS4QKGgByW/Gp7yGXT9KM2129+WysenZ+WUej3KWsDcS/Dgqsw6ZTarWayOHyCFm arEpP3L++ct+6uvPBVeSxL4xGoJxn7h8p3VADetiAKHGBOa2mc+b199IQBqq7LFM L0nObR2wXz+/ymNPfKidbq78vlF29m0pa0CSSlU/vhDatsq2QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnVEx2FakMzmgU+g7Bb/oENI+CVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjVmZWE0NjUtOGY3ZC0z ZTdiLWJhYjYtOTI3YTQwZjAyZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhdqWFOfCGDW+ecay+dsW8XuLrLxygPbK7/Zkhjcxr7nEW4/0FmlsPs cHfWpi0IDdFjDVb+20iF387slHkeYItfs8g/Tuse8E6xvODSCzpt6WcLswM/E0sr ysZ4iKtuS+oNx5UxZwSY/bTKlv2U4ZciVwprpc+OB1NBAk0Zmxl/hYl0bG5bIMHG 2IBzSpdftpT4l4xqPlv4Ti0z1WI4L+PLUegqAR7oJLYKRciX53DugflChsF4zezb J6+VyKw0gW7T8wORj4L4SPmOeTGi1QkcWOhP4JBivjYb9ZZaOE4TS0+yOU3Ae5s4 nmj8Th8XdFfJWTAPTu+ugSBUkOnKebI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:12 2025 by rpki-client