$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29a2ebce-7a59-320d-857e-91da44ebe49e.roa File: 29a2ebce-7a59-320d-857e-91da44ebe49e.roa (raw, json) Hash identifier: J/FOrqknJ9l74pbsNn5ec4gbXAEflQzEF370LJAJXXU= Subject key identifier: 61:42:8B:B0:90:0E:DC:E2:8E:33:BF:10:82:34:8A:6C:57:50:CB:D7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9F20AA0F36E983346F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29a2ebce-7a59-320d-857e-91da44ebe49e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.64.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9f:20:aa:0f:36:e9:83:34:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=3b6d2b08-8fed-41af-be80-2e4ac762bf83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:e2:b1:95:a2:8a:a2:ad:f0:03:6c:9c:8a: 8c:81:87:f2:07:4d:f2:bc:ca:d0:5a:82:80:54:93: ac:12:98:10:34:77:c0:d6:0a:d2:57:b6:24:c4:4a: e8:1e:74:31:b8:42:1c:a7:9f:15:de:75:39:74:f0: aa:09:ec:2d:a3:c2:66:1d:a6:9e:7d:6b:8c:3c:39: 75:c3:0b:f3:df:3a:85:34:2e:64:4c:f6:26:a3:11: 78:08:9a:23:90:50:3e:8b:4e:c6:fc:f9:28:30:a3: d6:83:cb:0b:39:bd:fe:b0:9a:f6:fa:33:51:64:30: 55:4f:d2:c6:5a:8a:90:ba:33:54:6e:83:3e:25:5e: ac:33:b0:88:b3:31:fc:da:ef:5c:76:6f:20:96:09: 0e:1e:3a:82:d4:4a:4e:c7:b4:05:32:7f:ae:be:18: 6a:6c:1e:da:93:7c:92:82:93:e0:dc:d4:29:3f:9b: ea:8d:08:9b:0e:f9:1e:87:4c:39:b2:eb:62:18:0e: 69:3e:19:63:0d:46:4b:87:4c:4f:84:c5:79:07:de: 76:66:6b:b2:ec:fd:59:79:11:e0:91:29:81:f8:ee: de:2f:46:0b:d1:21:a1:ff:c2:b2:b7:d6:db:06:38: 84:ea:77:03:1c:12:24:0b:31:30:35:53:0e:fd:7c: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:42:8B:B0:90:0E:DC:E2:8E:33:BF:10:82:34:8A:6C:57:50:CB:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29a2ebce-7a59-320d-857e-91da44ebe49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:50:c3:74:5d:00:c0:0d:dc:a5:22:32:4d:eb:6d:66:42:b9: 42:43:88:7b:45:06:f2:5d:06:27:eb:75:94:45:d0:5b:03:b7: a4:ab:10:7c:fb:76:e7:1b:81:d5:0a:5e:74:2f:cf:4e:25:59: 1e:5e:6c:09:85:cf:fd:05:d2:49:92:0d:f0:ed:ca:3f:31:2b: ba:36:b5:d5:8a:66:23:5b:e8:e3:7d:50:f4:bb:a6:f9:eb:de: 8c:ec:bc:15:e6:55:4b:20:50:91:d7:c1:86:ed:87:91:44:90: 8a:1b:57:76:f5:f7:1d:d2:f3:f7:8e:b4:73:c0:24:38:3b:1a: 63:42:48:48:45:e8:7d:09:be:ce:b0:6b:81:c7:31:29:e4:76: 8f:e1:0d:30:d5:03:ba:49:37:d2:5f:65:31:97:e5:0e:63:db: 88:67:ed:f2:cd:e3:33:58:d5:a3:f4:c1:a6:48:26:c8:b6:ac: b1:6a:6a:0a:e0:6d:20:47:6e:d5:7d:d1:bb:5c:da:59:ba:cb: 98:8d:a7:71:30:05:9d:be:7e:d0:ff:ce:41:cd:3a:0f:c4:0a: 26:bd:99:c7:0a:86:62:81:61:fc:7e:32:78:3a:43:9b:a9:cf: d6:71:9c:ba:60:b3:4b:ea:29:c1:b5:84:94:38:4f:30:2c:d0: a2:d3:a9:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG258gqg826YM0b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk M2I2ZDJiMDgtOGZlZC00MWFmLWJlODAtMmU0YWM3NjJiZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj/isZWiiqKt8ANsnIqMgYfyB03yvMrQWoKA VJOsEpgQNHfA1grSV7YkxEroHnQxuEIcp58V3nU5dPCqCewto8JmHaaefWuMPDl1 wwvz3zqFNC5kTPYmoxF4CJojkFA+i07G/PkoMKPWg8sLOb3+sJr2+jNRZDBVT9LG WoqQujNUboM+JV6sM7CIszH82u9cdm8glgkOHjqC1EpOx7QFMn+uvhhqbB7ak3yS gpPg3NQpP5vqjQibDvkeh0w5sutiGA5pPhljDUZLh0xPhMV5B952Zmuy7P1ZeRHg kSmB+O7eL0YL0SGh/8Kyt9bbBjiE6ncDHBIkCzEwNVMO/Xwd3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFCi7CQDtzijjO/EII0imxXUMvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjlhMmViY2UtN2E1OS0z MjBkLTg1N2UtOTFkYTQ0ZWJlNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFQw3RdAMAN3KUiMk3rbWZCuUJDiHtFBvJdBifrdZRF0FsDt6SrEHz7 ducbgdUKXnQvz04lWR5ebAmFz/0F0kmSDfDtyj8xK7o2tdWKZiNb6ON9UPS7pvnr 3ozsvBXmVUsgUJHXwYbth5FEkIobV3b19x3S8/eOtHPAJDg7GmNCSEhF6H0Jvs6w a4HHMSnkdo/hDTDVA7pJN9JfZTGX5Q5j24hn7fLN4zNY1aP0waZIJsi2rLFqagrg bSBHbtV90btc2lm6y5iNp3EwBZ2+ftD/zkHNOg/ECia9mccKhmKBYfx+Mng6Q5up z9ZxnLpgs0vqKcG1hJQ4TzAs0KLTqdE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:36 2025 by rpki-client