$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa File: 33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa (raw, json) Hash identifier: bGVlVaXa0sVlKkiH/L6W9f5vWeouLuwYK52jk35V5GQ= Subject key identifier: 9F:82:EE:6B:33:D1:EC:93:A1:80:5D:87:3D:4B:BE:CC:83:8D:8C:E1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9B6A5973773606A2BEE0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.69.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9b:6a:59:73:77:36:06:a2:be:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=195b2c41-327c-4fc0-b731-086cec68faa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:31:af:09:54:4d:3d:a7:42:fa:6a:ad:47: d7:80:86:c0:b1:a5:78:ca:22:84:08:3b:ac:82:cf: 68:54:60:77:5e:d7:e9:3a:55:a4:c2:9a:08:08:f4: b9:87:05:c6:87:58:3c:5c:65:c1:d9:32:5a:57:a6: 0d:33:9c:f0:18:30:de:b4:e1:19:d2:1b:51:89:f4: 1e:bc:e9:d7:e1:31:c1:79:44:cd:00:9b:5f:91:b1: 49:0c:cc:7e:39:5a:21:f6:3a:07:33:7d:be:e9:01: 71:a6:75:aa:b7:4d:0e:01:66:12:1b:f4:0d:79:62: a5:9d:fa:65:b3:ab:28:1f:b5:ac:75:23:98:71:98: f2:65:a4:a9:5e:43:06:c2:40:44:95:b5:58:3f:14: 4c:40:b7:15:95:06:18:27:69:8c:a4:ca:d1:56:8e: 26:1f:22:fb:57:1f:f8:16:d0:1c:21:a6:a2:fc:39: e7:76:54:ff:6b:67:4e:c1:ca:33:26:34:39:cd:b7: 9a:bf:dc:12:d6:3d:c4:53:86:c4:73:4a:52:19:d0: fb:78:64:1d:a8:ad:1e:1d:72:ea:fc:0e:c5:b4:e6: c3:d6:f9:6f:af:ec:ab:f4:4f:dc:25:da:43:e6:21: 84:bd:09:6b:96:a9:22:54:14:91:20:33:93:fb:b0: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:82:EE:6B:33:D1:EC:93:A1:80:5D:87:3D:4B:BE:CC:83:8D:8C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:40:b6:3b:91:bb:2b:bf:1c:34:a9:26:6c:7f:b6:6f:05:7b: 36:2b:89:4a:89:2e:89:5d:84:d6:b6:47:9a:6e:0a:6a:57:15: ee:2d:de:50:ee:92:ae:be:dc:d3:31:2e:d6:75:34:a6:11:98: a6:72:58:69:75:96:bc:03:1b:31:71:0a:43:55:27:35:6a:e4: f7:d3:4c:be:69:a5:52:6a:59:4f:fc:7e:2b:77:41:c4:6e:28: fe:58:d0:0b:b4:e5:45:f5:4f:19:a5:c4:cb:4a:e0:37:d9:6b: 12:70:a8:e9:0c:55:4c:dc:9a:50:5c:27:63:8a:de:f8:aa:27: 53:f3:d8:33:f9:2e:1a:b0:a6:40:3b:50:5a:05:43:12:3c:45: 57:b3:39:69:82:50:cc:51:d1:b2:9e:d4:10:22:b8:bd:f4:88: 0d:bd:91:93:13:a0:37:49:38:55:34:5e:2d:f0:91:bb:09:61: a3:95:5e:05:ae:7c:74:83:60:d0:1e:34:3d:bd:68:82:11:86: ae:2c:82:32:ce:05:0f:02:5b:8b:bf:5d:ce:cf:8c:24:92:11: 95:12:eb:c5:0c:30:b9:ac:ed:00:58:05:17:c7:48:f3:5d:eb: b5:35:2d:ee:d4:45:92:e7:aa:42:53:fb:8e:7d:d6:98:0e:67: 4e:26:9c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25tqWXN3NgaivuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTk1YjJjNDEtMzI3Yy00ZmMwLWI3MzEtMDg2Y2VjNjhmYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVQxrwlUTT2nQvpqrUfXgIbAsaV4yiKECDus gs9oVGB3XtfpOlWkwpoICPS5hwXGh1g8XGXB2TJaV6YNM5zwGDDetOEZ0htRifQe vOnX4THBeUTNAJtfkbFJDMx+OVoh9joHM32+6QFxpnWqt00OAWYSG/QNeWKlnfpl s6soH7WsdSOYcZjyZaSpXkMGwkBElbVYPxRMQLcVlQYYJ2mMpMrRVo4mHyL7Vx/4 FtAcIaai/DnndlT/a2dOwcozJjQ5zbeav9wS1j3EU4bEc0pSGdD7eGQdqK0eHXLq /A7FtObD1vlvr+yr9E/cJdpD5iGEvQlrlqkiVBSRIDOT+7C2QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+C7msz0eyToYBdhz1LvsyDjYzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNmYTMzNjgtMzJiYi0z ZWUyLTk2NmUtMmE4Y2U3NjU5OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERAtjuRuyu/HDSpJmx/tm8FezYriUqJLoldhNa2R5puCmpXFe4t3lDu kq6+3NMxLtZ1NKYRmKZyWGl1lrwDGzFxCkNVJzVq5PfTTL5ppVJqWU/8fit3QcRu KP5Y0Au05UX1TxmlxMtK4DfZaxJwqOkMVUzcmlBcJ2OK3viqJ1Pz2DP5LhqwpkA7 UFoFQxI8RVezOWmCUMxR0bKe1BAiuL30iA29kZMToDdJOFU0Xi3wkbsJYaOVXgWu fHSDYNAeND29aIIRhq4sgjLOBQ8CW4u/Xc7PjCSSEZUS68UMMLms7QBYBRfHSPNd 67U1Le7URZLnqkJT+4591pgOZ04mnBE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:25 2025 by rpki-client