$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34a289a9-455f-3b9a-a243-3a2cc416acee.roa File: 34a289a9-455f-3b9a-a243-3a2cc416acee.roa (raw, json) Hash identifier: VNjhdVkSOvfyxATLVMbHc+OlJVGx8zscyT2eSHAATFc= Subject key identifier: C6:76:6A:C5:B3:50:66:A9:7A:8D:F4:77:7E:4D:50:68:BD:88:BD:77 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B6B9CDA06670F52065580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34a289a9-455f-3b9a-a243-3a2cc416acee.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.155.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6b:9c:da:06:67:0f:52:06:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=f945585f-478c-4e26-937a-7bbcbaa58fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:03:44:3a:c0:e3:a0:6e:ad:6a:08:34:4c: 4c:eb:05:57:3d:c2:58:a7:54:4e:67:33:a7:d2:3f: 9e:f3:f1:1e:89:c0:3e:e3:ad:fb:98:e5:88:de:40: 7f:3e:c2:25:03:a4:a3:3a:4d:4d:12:21:bc:12:4e: d1:81:87:17:71:b4:d5:98:b9:f6:d2:dd:2c:31:d2: 66:f3:b8:5f:2d:88:84:52:24:4c:41:b3:16:29:f6: 43:91:07:20:79:3b:56:af:0b:18:07:29:68:6f:33: e0:68:56:6c:c1:38:fa:dd:62:d5:33:69:36:6e:2a: 84:91:59:64:e5:0d:33:d0:9e:1e:5c:28:ba:18:22: 1c:42:f2:3a:14:9d:d2:8f:ab:25:45:04:a3:76:a3: 2a:53:22:ae:81:24:4d:f6:12:18:d2:9e:12:10:7b: 95:05:c7:26:8d:39:a1:81:71:79:d8:a0:86:cb:52: 0d:09:92:d4:45:03:e1:36:da:8a:b4:19:b3:b1:6b: 0e:1a:d5:91:71:ca:61:81:c5:fd:d1:ad:27:71:48: a5:4c:1a:16:9c:1a:e5:76:b3:e6:4f:d0:67:37:f4: dc:b7:e1:95:36:54:4d:8c:47:95:84:0e:39:81:a6: cd:3c:c7:04:a2:9b:aa:95:f8:6c:70:b0:eb:ab:7f: 51:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:76:6A:C5:B3:50:66:A9:7A:8D:F4:77:7E:4D:50:68:BD:88:BD:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34a289a9-455f-3b9a-a243-3a2cc416acee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.155.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:45:32:42:21:3c:28:1f:37:4e:6f:5f:19:bd:b6:88:0a:dc: 88:2f:b6:00:a9:47:e5:7d:82:1e:fc:c4:b9:9f:de:61:6e:39: 9d:16:36:2a:04:7c:a3:f9:78:51:88:8a:22:f5:4d:3b:7e:02: 0f:1d:e7:6a:ac:93:00:c7:d5:ef:c7:63:99:f7:bc:83:cb:c7: 96:bf:90:5c:e3:2f:a7:47:32:e7:12:4a:36:14:47:78:eb:ff: 52:ac:0b:9d:28:c2:7f:63:7c:5b:51:c0:9a:f4:cd:c0:b2:a8: 66:46:c4:8e:30:ae:27:93:9e:e7:71:dc:27:5d:3b:e1:f2:04: 85:48:91:8b:6f:11:26:4f:d2:47:65:2e:14:3a:20:64:25:00: cb:c5:b8:3a:74:4f:b4:1d:e9:c1:fd:e1:0c:00:b4:a6:4d:f3: 6a:a5:d8:b4:d3:26:33:7f:ec:cb:d6:1d:23:14:d3:15:77:e8: 73:d6:c5:ed:2a:80:97:f9:a1:af:e5:f5:32:94:b9:5f:2e:1a: ed:56:2b:bb:66:a8:5a:9e:ae:d0:31:06:e9:8c:af:a2:46:85: ae:8c:4d:0e:7c:b3:0a:f4:35:3d:81:bd:a7:69:a5:21:42:09: 08:7a:27:f3:a4:42:32:03:63:da:bf:b3:9a:3b:c4:f4:0f:4f: 8e:d6:47:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2uc2gZnD1IGVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk Zjk0NTU4NWYtNDc4Yy00ZTI2LTkzN2EtN2JiY2JhYTU4ZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzsDRDrA46BurWoINExM6wVXPcJYp1ROZzOn 0j+e8/EeicA+4637mOWI3kB/PsIlA6SjOk1NEiG8Ek7RgYcXcbTVmLn20t0sMdJm 87hfLYiEUiRMQbMWKfZDkQcgeTtWrwsYBylobzPgaFZswTj63WLVM2k2biqEkVlk 5Q0z0J4eXCi6GCIcQvI6FJ3Sj6slRQSjdqMqUyKugSRN9hIY0p4SEHuVBccmjTmh gXF52KCGy1INCZLURQPhNtqKtBmzsWsOGtWRccphgcX90a0ncUilTBoWnBrldrPm T9BnN/Tct+GVNlRNjEeVhA45gabNPMcEopuqlfhscLDrq39R+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ2asWzUGapeo30d35NUGi9iL13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzRhMjg5YTktNDU1Zi0z YjlhLWEyNDMtM2EyY2M0MTZhY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpFMkIhPCgfN05vXxm9togK3IgvtgCpR+V9gh78xLmf3mFuOZ0WNioE fKP5eFGIiiL1TTt+Ag8d52qskwDH1e/HY5n3vIPLx5a/kFzjL6dHMucSSjYUR3jr /1KsC50own9jfFtRwJr0zcCyqGZGxI4wrieTnudx3CddO+HyBIVIkYtvESZP0kdl LhQ6IGQlAMvFuDp0T7Qd6cH94QwAtKZN82ql2LTTJjN/7MvWHSMU0xV36HPWxe0q gJf5oa/l9TKUuV8uGu1WK7tmqFqertAxBumMr6JGha6MTQ58swr0NT2BvadppSFC CQh6J/OkQjIDY9q/s5o7xPQPT47WRxI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:50 2025 by rpki-client