$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/383349f5-1e47-3dac-8c85-635459902478.roa File: 383349f5-1e47-3dac-8c85-635459902478.roa (raw, json) Hash identifier: c61CnsKAo8pk7j7hvYojgedMmnl1p8s8bh+3ygVGXA8= Subject key identifier: F5:F7:5B:B4:60:EB:A4:07:F7:C9:FE:07:7D:2A:99:CE:16:43:5C:25 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB66771E2353D2FE66F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/383349f5-1e47-3dac-8c85-635459902478.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.94.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b6:67:71:e2:35:3d:2f:e6:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b4fb031a-1b2e-42b3-9fcc-76e73a7f7ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:08:36:51:88:54:06:a2:26:07:f7:30:61: a3:fe:a9:b9:88:1a:21:e3:4f:b0:9e:8d:a0:db:09: e1:31:8f:7e:59:9e:55:cd:1b:ef:8c:6f:d4:cd:0f: 46:19:5b:11:da:f8:66:01:13:cd:52:b9:80:3c:fb: dc:11:48:1a:34:52:b8:8a:74:0b:a7:ea:92:a8:42: 6d:24:29:07:c9:91:4d:5a:d8:e9:a6:1a:15:8e:fd: cf:60:d8:09:e1:2f:8d:62:82:db:e1:4a:34:b2:1f: 71:15:49:5d:d1:05:51:a5:76:f6:d0:42:fe:d0:59: 57:2b:71:a3:8c:40:24:ba:b2:63:47:ef:a3:d1:a7: a3:b7:ca:1c:90:cd:33:78:2a:67:3a:ad:68:9c:5f: 1a:94:01:54:f8:63:d1:f9:dc:01:61:f8:dd:83:bf: 6a:36:33:07:b2:4d:b9:8e:66:fb:68:7d:46:a3:7b: 8d:ca:80:2e:da:68:bd:74:a2:d7:7f:26:79:9e:33: 0d:64:a2:2d:3d:f2:d4:d2:73:b1:ab:67:9d:44:bb: 68:93:42:7a:34:e0:58:ab:82:35:ee:2c:39:50:0d: 51:5a:98:e6:a3:c6:c0:be:c1:76:13:3d:9d:8d:5d: 24:53:a7:68:f0:2c:7c:87:65:8e:0d:fc:43:1c:1e: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F7:5B:B4:60:EB:A4:07:F7:C9:FE:07:7D:2A:99:CE:16:43:5C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/383349f5-1e47-3dac-8c85-635459902478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:41:cd:30:d3:b2:0e:9e:d4:bc:ac:60:58:86:b9:f9:0e:dd: a1:45:87:1e:f2:2d:db:9c:00:aa:5a:90:c0:3f:98:78:ff:f1: 57:13:ca:fa:ad:bf:28:e5:da:be:5c:d9:fd:19:6d:3f:13:b6: fc:dc:c6:54:97:86:68:e8:bd:0c:4a:7a:46:af:67:78:63:e3: b9:aa:85:38:ea:b5:4d:f8:4d:7b:93:c4:4a:07:20:07:8b:f4: 81:1b:d6:f2:ce:4c:ae:a7:c6:8f:4a:86:f6:c3:af:03:0c:28: c3:d8:b0:50:33:2e:3a:c7:6d:cd:7e:22:b1:ac:e3:df:28:cd: 9f:37:a8:a1:44:5e:d1:dc:18:3c:a5:31:12:a3:5e:32:c0:66: b0:94:53:68:15:86:fd:dc:89:93:a2:0b:b0:2e:65:64:45:14: b6:ca:79:61:df:07:f3:1c:73:fd:c1:df:fe:6b:4f:86:0c:16: 35:4f:36:4e:b3:80:bf:a9:ed:00:4d:25:10:67:7b:b2:12:af: 27:a9:c3:84:94:3b:bb:c7:5b:e2:aa:52:09:27:ba:29:f3:fc: 14:64:f0:cf:76:18:eb:11:7a:d2:5b:60:f3:61:09:26:31:79: 60:f2:2e:33:c9:90:ff:31:11:0d:65:b9:58:b5:96:b8:d0:39: b8:2f:e9:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27ZnceI1PS/mb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjRmYjAzMWEtMWIyZS00MmIzLTlmY2MtNzZlNzNhN2Y3ZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5YINlGIVAaiJgf3MGGj/qm5iBoh40+wno2g 2wnhMY9+WZ5VzRvvjG/UzQ9GGVsR2vhmARPNUrmAPPvcEUgaNFK4inQLp+qSqEJt JCkHyZFNWtjpphoVjv3PYNgJ4S+NYoLb4Uo0sh9xFUld0QVRpXb20EL+0FlXK3Gj jEAkurJjR++j0aejt8ockM0zeCpnOq1onF8alAFU+GPR+dwBYfjdg79qNjMHsk25 jmb7aH1Go3uNyoAu2mi9dKLXfyZ5njMNZKItPfLU0nOxq2edRLtok0J6NOBYq4I1 7iw5UA1RWpjmo8bAvsF2Ez2djV0kU6do8Cx8h2WODfxDHB6jYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX3W7Rg66QH98n+B30qmc4WQ1wlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzgzMzQ5ZjUtMWU0Ny0z ZGFjLThjODUtNjM1NDU5OTAyNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVBzTDTsg6e1LysYFiGufkO3aFFhx7yLducAKpakMA/mHj/8VcTyvqt vyjl2r5c2f0ZbT8TtvzcxlSXhmjovQxKekavZ3hj47mqhTjqtU34TXuTxEoHIAeL 9IEb1vLOTK6nxo9KhvbDrwMMKMPYsFAzLjrHbc1+IrGs498ozZ83qKFEXtHcGDyl MRKjXjLAZrCUU2gVhv3ciZOiC7AuZWRFFLbKeWHfB/Mcc/3B3/5rT4YMFjVPNk6z gL+p7QBNJRBne7ISryepw4SUO7vHW+KqUgknuinz/BRk8M92GOsRetJbYPNhCSYx eWDyLjPJkP8xEQ1luVi1lrjQObgv6aE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:25 2025 by rpki-client