$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c73c0f-5a56-35db-aec9-f816488f7467.roa File: 35c73c0f-5a56-35db-aec9-f816488f7467.roa (raw, json) Hash identifier: LSbEI/XVnDq4Hgth7CH1oC27CBtKBTrTX134bj5hG5A= Subject key identifier: F9:7C:B9:5C:09:74:94:BD:CC:00:77:2E:7E:A8:3F:03:DA:8E:29:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB18D856EB13BA8394980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c73c0f-5a56-35db-aec9-f816488f7467.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.97.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b1:8d:85:6e:b1:3b:a8:39:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=dee41f32-c544-4f56-be80-5a3b557def7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:c5:90:4f:de:1d:df:28:dc:57:52:a5:0c: 6a:e1:53:d5:3b:79:07:97:0a:5b:92:93:9b:64:0f: 93:d3:67:83:22:94:18:e0:07:77:94:2a:ec:b5:36: 2f:20:8d:10:ad:93:f5:25:58:84:4a:ac:55:4e:9d: 5a:be:a7:39:54:7c:9c:c5:29:53:5d:a9:95:09:80: cd:31:d8:a2:1e:49:01:0f:ad:af:31:43:ea:e1:62: f9:f1:6d:30:a2:96:33:69:58:e8:e5:2e:f3:45:37: 25:44:df:cc:99:b1:a6:9f:bf:ea:ab:98:c0:19:6d: 9d:c0:f6:d5:48:e7:f5:f0:dd:98:55:30:c0:e7:7e: 93:4e:c8:52:5b:3d:d8:8c:22:63:96:ca:10:f2:63: fc:55:19:65:e3:3f:ab:56:33:97:75:c8:16:8c:61: 57:7b:bd:74:bc:c9:86:9e:93:5f:e8:fb:84:85:a7: e7:6f:a2:a9:bc:5e:16:0e:0c:20:dc:c0:fe:66:99: d9:d0:a5:07:4e:f6:6e:5b:e0:47:e5:d2:66:fb:8a: 85:21:ef:88:02:8d:5c:a9:5b:1b:61:9d:c8:d4:20: 16:78:0d:84:70:b3:35:2f:88:4e:c8:2a:7d:bf:0a: 47:6c:ce:6f:7e:b4:58:66:15:0b:79:7f:0a:01:71: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7C:B9:5C:09:74:94:BD:CC:00:77:2E:7E:A8:3F:03:DA:8E:29:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c73c0f-5a56-35db-aec9-f816488f7467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.97.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:75:12:09:f6:6f:fa:4e:15:88:33:21:37:56:f4:09:30:29: c3:16:08:e0:2b:30:7a:01:8c:40:0f:15:28:bf:df:05:17:6f: 56:ed:0c:2e:c2:ee:96:ee:84:2e:6e:a6:e3:8b:7e:0d:83:4f: bb:06:60:e5:6a:95:0e:ce:1f:cf:e5:39:95:ae:16:39:00:7b: 1b:e6:5e:31:49:bf:b9:e1:8e:3b:cb:18:ac:3a:a2:25:0f:fa: 1f:c4:4c:13:37:08:ec:ca:73:68:3c:a9:1d:00:89:9b:b1:e1: e3:17:db:9d:fd:9f:1c:43:84:84:fe:90:6d:2e:6e:30:a0:f6: 3e:92:8a:e7:0f:18:e9:de:1d:36:69:b8:0c:03:d9:2b:17:99: a3:1b:7f:f5:80:92:ff:c1:88:63:1e:bd:6d:ed:f4:57:da:33: 7d:c2:c4:91:20:dd:e6:9b:cd:30:cd:30:07:93:13:b2:c5:a0: 6f:01:b4:38:d7:c5:6b:e6:32:0c:2f:3b:df:e6:04:8d:e6:1e: 82:88:70:85:d4:1e:21:60:d3:0d:7e:ce:a7:52:39:c6:00:da: 34:c3:a9:af:47:6a:22:c2:48:5e:57:be:7b:7f:a3:11:8f:ab: d6:94:60:12:af:92:81:99:62:9a:eb:a0:8f:62:cf:59:7a:2c: e9:6f:17:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27GNhW6xO6g5SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZGVlNDFmMzItYzU0NC00ZjU2LWJlODAtNWEzYjU1N2RlZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTfFkE/eHd8o3FdSpQxq4VPVO3kHlwpbkpOb ZA+T02eDIpQY4Ad3lCrstTYvII0QrZP1JViESqxVTp1avqc5VHycxSlTXamVCYDN MdiiHkkBD62vMUPq4WL58W0wopYzaVjo5S7zRTclRN/MmbGmn7/qq5jAGW2dwPbV SOf18N2YVTDA536TTshSWz3YjCJjlsoQ8mP8VRll4z+rVjOXdcgWjGFXe710vMmG npNf6PuEhafnb6KpvF4WDgwg3MD+ZpnZ0KUHTvZuW+BH5dJm+4qFIe+IAo1cqVsb YZ3I1CAWeA2EcLM1L4hOyCp9vwpHbM5vfrRYZhULeX8KAXGhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl8uVwJdJS9zAB3Ln6oPwPajimDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzVjNzNjMGYtNWE1Ni0z NWRiLWFlYzktZjgxNjQ4OGY3NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt1Egn2b/pOFYgzITdW9AkwKcMWCOArMHoBjEAPFSi/3wUXb1btDC7C 7pbuhC5upuOLfg2DT7sGYOVqlQ7OH8/lOZWuFjkAexvmXjFJv7nhjjvLGKw6oiUP +h/ETBM3COzKc2g8qR0AiZux4eMX2539nxxDhIT+kG0ubjCg9j6SiucPGOneHTZp uAwD2SsXmaMbf/WAkv/BiGMevW3t9FfaM33CxJEg3eabzTDNMAeTE7LFoG8BtDjX xWvmMgwvO9/mBI3mHoKIcIXUHiFg0w1+zqdSOcYA2jTDqa9HaiLCSF5Xvnt/oxGP q9aUYBKvkoGZYprroI9iz1l6LOlvFws= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:06 2025 by rpki-client