$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333db147-456f-3917-81c7-5b38038f2cd8.roa File: 333db147-456f-3917-81c7-5b38038f2cd8.roa (raw, json) Hash identifier: eeb3r7kxBS3H+L7F76dD552RA9OIF1AJKF/eAZ1DPdg= Subject key identifier: 3A:D6:DC:D3:9E:74:1A:F9:EB:8B:5E:BB:CD:63:C0:BB:FE:74:4C:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF28528522A1879F1CA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333db147-456f-3917-81c7-5b38038f2cd8.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.94.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f2:85:28:52:2a:18:79:f1:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ad658287-4fc8-4a7e-8713-efe9116e9ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2d:d1:63:fe:16:70:ae:83:d6:d3:0b:1b:d5: c0:5c:d4:4b:85:04:19:3a:de:5e:a5:3f:b6:b8:9c: 2d:dd:a4:04:91:fc:b7:27:67:03:48:a5:16:45:cd: f3:8c:44:d1:fc:b7:69:a6:e4:ee:b8:a6:7e:e5:f5: 8a:47:7c:82:d4:4a:01:e8:f2:ca:5c:5a:54:2c:69: 16:95:26:44:40:f0:fa:fb:7c:94:aa:c4:a5:27:31: ba:1e:2a:ff:b4:d9:60:bf:f1:4f:1b:1c:6e:38:92: d3:18:c9:e3:b0:05:a5:df:a9:fe:6d:e7:8f:5a:ba: 79:18:0e:d7:c3:c5:b2:63:7e:08:37:0a:1b:87:11: 42:96:f8:0c:70:22:07:a7:dc:b5:76:d8:df:a8:e6: 09:c3:a3:05:d7:8c:6b:80:ae:c4:17:4d:4a:1c:c8: 08:db:01:ae:66:fb:4a:04:9a:13:4d:9b:f5:8c:48: 9f:69:f5:58:5b:35:6f:46:e4:be:43:7a:22:22:c6: c6:78:ae:5c:9a:23:32:c0:44:6e:f6:ca:2f:a9:9c: bd:6b:26:25:af:c0:1d:79:4c:6b:d2:c8:d0:5a:42: 20:76:44:50:e3:59:c2:05:61:7b:2b:55:d1:fd:d7: a6:f2:b9:e7:53:84:b9:a4:c3:ae:5a:53:bc:32:2b: 90:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D6:DC:D3:9E:74:1A:F9:EB:8B:5E:BB:CD:63:C0:BB:FE:74:4C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333db147-456f-3917-81c7-5b38038f2cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a6:8c:35:2f:eb:4b:33:5f:07:af:6c:6b:63:34:c3:53:c9: dd:dc:d0:3a:38:5a:9a:48:e4:cf:a4:1a:8b:66:ee:19:cc:ee: cd:ce:5d:53:5b:71:54:fd:99:b6:a0:6c:43:6a:6d:ef:be:66: e0:59:fd:7f:1f:da:44:0c:ad:d0:a2:df:ba:db:54:ff:1d:08: d9:12:b0:d7:ba:82:4f:68:18:ae:f1:92:a9:1d:d7:16:75:7f: 34:73:dd:7e:e8:d8:78:cb:c5:3f:3d:a5:9b:0f:a1:42:4e:eb: c0:9b:6e:1c:bc:33:a8:28:6b:d2:a0:41:74:09:b8:e7:b6:25: 34:71:23:2f:91:7e:7d:48:c8:78:92:77:69:ea:6f:11:11:aa: db:79:88:b1:99:61:d3:39:52:ca:73:21:11:c9:85:a8:ef:ac: f2:14:f1:53:7d:0c:33:8e:d8:7d:17:98:6c:0d:13:2a:fb:f3: c7:e0:54:2d:5e:24:fb:8d:91:bb:03:8b:74:e7:82:3a:ca:47: 29:bd:da:d8:13:c4:e2:99:30:e1:5a:46:37:cd:62:01:14:08: 95:c0:b6:99:4d:44:b7:3c:7f:86:3e:c3:e6:37:57:9f:97:46: a2:40:5c:af:73:85:10:a0:a4:a9:9b:a0:1f:bc:d3:32:89:f8: 74:d6:36:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/KFKFIqGHnxyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YWQ2NTgyODctNGZjOC00YTdlLTg3MTMtZWZlOTExNmU5ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i3RY/4WcK6D1tMLG9XAXNRLhQQZOt5epT+2 uJwt3aQEkfy3J2cDSKUWRc3zjETR/LdppuTuuKZ+5fWKR3yC1EoB6PLKXFpULGkW lSZEQPD6+3yUqsSlJzG6Hir/tNlgv/FPGxxuOJLTGMnjsAWl36n+beePWrp5GA7X w8WyY34INwobhxFClvgMcCIHp9y1dtjfqOYJw6MF14xrgK7EF01KHMgI2wGuZvtK BJoTTZv1jEifafVYWzVvRuS+Q3oiIsbGeK5cmiMywERu9sovqZy9ayYlr8AdeUxr 0sjQWkIgdkRQ41nCBWF7K1XR/dem8rnnU4S5pMOuWlO8MiuQzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrW3NOedBr564teu81jwLv+dEywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzMzZGIxNDctNDU2Zi0z OTE3LTgxYzctNWIzODAzOGYyY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGmjDUv60szXwevbGtjNMNTyd3c0Do4WppI5M+kGotm7hnM7s3OXVNb cVT9mbagbENqbe++ZuBZ/X8f2kQMrdCi37rbVP8dCNkSsNe6gk9oGK7xkqkd1xZ1 fzRz3X7o2HjLxT89pZsPoUJO68Cbbhy8M6goa9KgQXQJuOe2JTRxIy+Rfn1IyHiS d2nqbxERqtt5iLGZYdM5UspzIRHJhajvrPIU8VN9DDOO2H0XmGwNEyr788fgVC1e JPuNkbsDi3TngjrKRym92tgTxOKZMOFaRjfNYgEUCJXAtplNRLc8f4Y+w+Y3V5+X RqJAXK9zhRCgpKmboB+80zKJ+HTWNlc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:15 2025 by rpki-client