$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa File: 2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa (raw, json) Hash identifier: 90IOgHM5EtA5mQzIngXobfJXhqcBKHR1L0ShWAiIWDY= Subject key identifier: AD:85:6B:6D:98:0F:86:80:7D:88:67:94:AB:4F:BC:C5:CD:95:11:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC0C02570127F7225B200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.77.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c0:c0:25:70:12:7f:72:25:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=86ff44b7-7536-49ab-96f0-182e6f5524ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0c:79:0c:22:d9:06:21:23:5c:c0:7f:7b:93: 2b:18:59:bc:76:e9:8e:3e:c7:de:6d:aa:15:96:47: 70:68:e7:2a:3a:52:39:bf:42:f0:8b:b4:b8:e1:74: 4b:fe:d8:4c:2d:fe:07:50:fe:9a:1f:c3:ed:0c:f8: c1:2b:3c:50:2e:7e:5b:eb:cb:a2:61:10:90:25:78: ec:1f:62:17:90:ec:6c:4e:6d:26:8e:4c:be:1c:1a: 59:43:9a:cc:9b:e8:15:9d:46:dd:83:4a:5f:3b:a5: 7f:29:d7:5d:a5:24:3e:c5:0b:3a:1b:f4:c6:23:ca: 94:27:7f:11:60:54:8c:cd:47:86:d0:6d:c6:bb:90: b3:66:1c:66:2e:66:39:f6:33:b8:d0:2d:11:c2:6c: e1:3b:16:62:53:ff:96:52:10:91:a9:dc:5c:70:da: 12:0c:ab:20:db:b6:f6:12:82:05:58:8b:71:74:d1: 0e:20:5b:83:47:1d:e1:6e:1f:f1:e1:6e:78:c8:8f: 03:03:c3:c4:27:12:a0:3d:4f:9e:14:cb:6a:a7:cb: 31:b9:8f:a0:ef:26:b9:f2:29:72:56:f6:10:6b:d0: 11:7d:19:16:69:6d:87:84:6a:62:78:56:56:bf:fc: 7c:2d:53:6b:ec:22:a6:57:e6:b5:33:8d:73:d5:f0: b9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:85:6B:6D:98:0F:86:80:7D:88:67:94:AB:4F:BC:C5:CD:95:11:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.77.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:38:4b:2d:11:3f:39:20:3c:3b:13:a0:22:d5:6c:49:65:da: d6:84:05:83:8d:ab:9a:58:39:9d:97:2b:19:a1:9a:44:81:d0: ce:b0:3d:f0:ab:d1:08:3e:c8:95:60:67:1b:32:d1:61:5f:53: 8f:7e:3d:68:f9:27:fc:29:16:78:4c:88:0b:05:d0:b2:34:47: 76:dd:4f:a3:ae:b1:c2:e0:bc:a0:14:e4:83:e9:7e:9e:61:d9: e9:c7:7d:3a:54:d7:ee:40:c0:fa:c8:2f:4f:98:3b:c0:45:cf: 44:19:1c:50:3e:34:b6:b2:ae:1e:6d:ec:5b:f2:01:24:d9:41: 24:74:ec:9a:16:6b:55:d2:29:46:bb:6f:bc:66:b4:7c:4d:39: 8b:84:6f:cb:57:97:3e:2a:68:fe:fe:3e:af:3c:ab:68:0a:8a: 45:a4:31:63:c8:76:da:62:b1:c7:36:88:24:3c:59:54:4b:6f: fb:83:d7:72:e9:8a:32:2c:0a:df:76:1f:ad:f8:aa:2a:58:16: 5e:c6:b7:c2:0e:38:47:6e:ec:02:c1:83:51:2d:58:7d:ee:5d: 6e:54:e0:2d:28:61:a6:23:3c:e6:dd:dc:cb:55:65:ec:d7:76: 68:83:32:01:40:8d:c9:f4:6d:c3:50:5d:21:c5:fd:fa:72:1b: 58:cf:17:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28DAJXASf3IlsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODZmZjQ0YjctNzUzNi00OWFiLTk2ZjAtMTgyZTZmNTUyNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwx5DCLZBiEjXMB/e5MrGFm8dumOPsfebaoV lkdwaOcqOlI5v0Lwi7S44XRL/thMLf4HUP6aH8PtDPjBKzxQLn5b68uiYRCQJXjs H2IXkOxsTm0mjky+HBpZQ5rMm+gVnUbdg0pfO6V/KdddpSQ+xQs6G/TGI8qUJ38R YFSMzUeG0G3Gu5CzZhxmLmY59jO40C0RwmzhOxZiU/+WUhCRqdxccNoSDKsg27b2 EoIFWItxdNEOIFuDRx3hbh/x4W54yI8DA8PEJxKgPU+eFMtqp8sxuY+g7ya58ily VvYQa9ARfRkWaW2HhGpieFZWv/x8LVNr7CKmV+a1M41z1fC5KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2Fa22YD4aAfYhnlKtPvMXNlRFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmU3OGY3ZmYtN2M1Ni0z N2YxLThlYTAtZWUzMzRiMWFkMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE4Sy0RPzkgPDsToCLVbEll2taEBYONq5pYOZ2XKxmhmkSB0M6wPfCr 0Qg+yJVgZxsy0WFfU49+PWj5J/wpFnhMiAsF0LI0R3bdT6OuscLgvKAU5IPpfp5h 2enHfTpU1+5AwPrIL0+YO8BFz0QZHFA+NLayrh5t7FvyASTZQSR07JoWa1XSKUa7 b7xmtHxNOYuEb8tXlz4qaP7+Pq88q2gKikWkMWPIdtpiscc2iCQ8WVRLb/uD13Lp ijIsCt92H634qipYFl7Gt8IOOEdu7ALBg1EtWH3uXW5U4C0oYaYjPObd3MtVZezX dmiDMgFAjcn0bcNQXSHF/fpyG1jPF3c= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:45 2025 by rpki-client