$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/31ed773d-5560-3c43-a6b1-71c17a00b6ba.roa File: 31ed773d-5560-3c43-a6b1-71c17a00b6ba.roa (raw, json) Hash identifier: cq01rmK9qJIE6ANWXBZfvmF8aKaP7VzEwuLO/iI2Sxc= Subject key identifier: 2D:DB:E0:3D:FB:3E:04:07:F3:AF:67:47:25:B3:D7:2B:B7:24:24:31 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7AAE08DE0D9537929400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/31ed773d-5560-3c43-a6b1-71c17a00b6ba.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.91.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7a:ae:08:de:0d:95:37:92:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=02147ecf-af66-4a50-b53d-271fab1f3609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:bd:18:f0:25:10:13:5e:18:ac:9a:9a:7a: 39:f5:2a:2f:82:c3:71:e8:ec:d1:cb:e9:72:5a:7b: 44:a5:b8:50:ed:0c:fb:f6:80:98:54:41:b6:f8:0e: 61:7a:b0:22:5c:b5:c3:94:ba:b6:0f:59:de:15:a4: 44:5d:b0:65:be:11:87:e4:2e:1f:ba:11:7b:be:b8: 5f:0b:c3:a6:52:18:44:97:d1:ce:c8:39:b6:49:58: 97:3b:9e:de:12:f1:c3:dd:02:d1:5c:ec:3c:3f:cd: 25:dd:8c:dd:90:3f:39:13:58:4f:49:9d:5b:d8:b3: b0:33:8a:53:4c:40:50:dd:bf:a7:f5:8a:00:cb:1a: 1f:c5:ba:2a:dc:96:cb:16:99:d4:bc:ca:f4:e7:89: 40:b2:b0:ff:ef:47:e4:71:d5:83:b9:a3:5a:33:da: dd:d8:77:f6:f0:33:b6:2d:4f:d0:9b:88:21:85:ac: 2e:1c:dd:dd:68:67:a1:3f:a3:46:5c:76:fc:b8:49: f1:01:98:c0:47:20:5c:d3:1c:2e:07:2d:da:5f:0c: 4d:35:46:a3:dd:e5:7d:16:62:3a:32:d6:c8:9d:65: da:68:77:5a:55:01:4f:5f:a7:90:d6:b7:86:1b:bf: 04:ae:b2:77:28:82:a0:7f:0a:94:0e:0f:97:a4:78: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DB:E0:3D:FB:3E:04:07:F3:AF:67:47:25:B3:D7:2B:B7:24:24:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/31ed773d-5560-3c43-a6b1-71c17a00b6ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.91.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:20:d1:63:fa:69:20:4b:b5:a0:83:58:9c:1e:47:eb:74:de: 79:70:48:a1:0e:a5:5d:59:98:00:5c:22:3e:c2:f6:1b:95:da: 24:a7:dc:a1:2b:37:a0:6c:10:a5:94:27:4c:de:90:b4:a7:89: 50:85:29:35:bd:0b:23:b6:35:2c:ff:a2:31:bd:06:9c:f8:87: 03:80:be:69:5b:72:5c:5c:97:db:2a:dd:99:33:26:ef:c2:c5: ab:21:a0:5b:49:be:fe:aa:c1:9e:92:5b:50:40:6a:f2:db:24: 33:22:67:b3:0d:c6:a5:7a:a9:c9:d0:bd:8d:59:7e:51:06:7b: 29:14:ad:c2:06:60:2f:a6:f5:8a:4d:64:74:7d:9d:71:f6:f8: d3:66:da:e6:ff:8c:ec:47:c2:00:0b:eb:ec:cc:6f:62:b8:47: cc:60:a4:ed:40:a4:d7:5b:29:58:6f:6a:fc:a7:1a:30:ec:69: 43:ba:12:14:73:b5:1b:ed:ef:55:36:c2:93:95:ba:b7:81:bc: 12:44:ca:45:07:2b:2c:f2:47:ef:1a:08:b7:cb:d9:31:70:e1: e8:15:00:fb:d0:aa:8d:d2:99:44:8a:f4:20:c1:db:f4:89:4a: 48:44:ba:00:c7:84:36:66:0f:1d:15:36:3b:39:dd:16:fb:b4: 91:99:25:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23quCN4NlTeSlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MDIxNDdlY2YtYWY2Ni00YTUwLWI1M2QtMjcxZmFiMWYzNjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8m9GPAlEBNeGKyamno59SovgsNx6OzRy+ly WntEpbhQ7Qz79oCYVEG2+A5herAiXLXDlLq2D1neFaREXbBlvhGH5C4fuhF7vrhf C8OmUhhEl9HOyDm2SViXO57eEvHD3QLRXOw8P80l3YzdkD85E1hPSZ1b2LOwM4pT TEBQ3b+n9YoAyxofxboq3JbLFpnUvMr054lAsrD/70fkcdWDuaNaM9rd2Hf28DO2 LU/Qm4ghhawuHN3daGehP6NGXHb8uEnxAZjARyBc0xwuBy3aXwxNNUaj3eV9FmI6 MtbInWXaaHdaVQFPX6eQ1reGG78ErrJ3KIKgfwqUDg+XpHg3TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3b4D37PgQH869nRyWz1yu3JCQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzFlZDc3M2QtNTU2MC0z YzQzLWE2YjEtNzFjMTdhMDBiNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIluAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQg0WP6aSBLtaCDWJweR+t03nlwSKEOpV1ZmABcIj7C9huV2iSn3KEr N6BsEKWUJ0zekLSniVCFKTW9CyO2NSz/ojG9Bpz4hwOAvmlbclxcl9sq3ZkzJu/C xashoFtJvv6qwZ6SW1BAavLbJDMiZ7MNxqV6qcnQvY1ZflEGeykUrcIGYC+m9YpN ZHR9nXH2+NNm2ub/jOxHwgAL6+zMb2K4R8xgpO1ApNdbKVhvavynGjDsaUO6EhRz tRvt71U2wpOVureBvBJEykUHKyzyR+8aCLfL2TFw4egVAPvQqo3SmUSK9CDB2/SJ SkhEugDHhDZmDx0VNjs53Rb7tJGZJVo= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:38 2025 by rpki-client