$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a01d371-aa74-3e24-ac59-c55952438899.roa File: 3a01d371-aa74-3e24-ac59-c55952438899.roa (raw, json) Hash identifier: hmRtBlUN02DiN2k/ks+ca5sh+VJaQy66geR/WaQKqG4= Subject key identifier: FB:96:52:52:78:25:FD:0A:ED:06:AB:C5:91:64:ED:AE:9D:23:72:77 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA93CADC3F80D21D48B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a01d371-aa74-3e24-ac59-c55952438899.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.131.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a9:3c:ad:c3:f8:0d:21:d4:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=4f3b01c3-4dbb-4f09-b6b9-044962f11907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:80:06:08:18:0f:f8:1b:82:fb:db:5b:13: d5:c4:9f:ac:06:5a:91:00:43:ef:7d:ed:d3:3d:2e: 72:7c:89:d3:cc:fe:03:ae:3a:31:2e:9f:6a:89:89: a7:41:1e:02:a8:6e:06:21:85:de:40:fd:7a:37:a0: cd:11:e1:75:ef:d5:da:ba:81:76:dd:ce:b2:67:cd: f8:d1:7b:85:e6:aa:dc:ad:8f:2d:50:f4:f1:59:06: d1:eb:d0:ca:d8:47:29:d4:01:b9:52:22:a8:0f:4d: 8b:62:0a:c4:6b:2f:54:f1:03:4a:0b:58:47:79:ca: 1c:e8:a7:3b:a0:05:11:0c:76:fa:7b:b0:f6:1f:c4: e5:db:18:30:c0:ff:cb:13:d4:ec:f0:3a:d2:3a:64: cc:1a:58:1b:ff:35:23:30:63:de:52:4d:ba:41:93: 5a:54:b6:94:f3:7e:3a:42:0d:61:64:58:5b:10:b9: da:a6:a6:dd:aa:6e:1c:b2:57:cd:66:f0:a3:8f:fc: cd:47:91:90:27:1a:3f:ef:e6:e1:a9:69:e8:05:d7: 7f:e1:09:1a:9c:5d:ec:19:b9:9e:c8:c1:2b:c8:85: 2a:11:a2:cf:b5:6c:9e:be:72:54:9a:95:63:af:ee: 61:ef:47:a5:93:ee:d7:1a:56:da:16:a1:2c:89:d1: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:96:52:52:78:25:FD:0A:ED:06:AB:C5:91:64:ED:AE:9D:23:72:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a01d371-aa74-3e24-ac59-c55952438899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fd:c1:c2:b3:f7:17:c3:b5:4f:74:ba:03:c5:a3:08:90:f3: 86:bd:c1:5b:35:00:bb:c1:44:23:01:f0:83:b3:5f:e8:ce:cf: a0:ce:42:ce:f0:a2:d0:7d:ab:00:e0:4c:09:d1:ae:72:c2:61: c3:67:e1:2f:72:17:1d:8b:5a:6e:c9:50:77:ad:2b:88:6a:6d: e4:57:11:2f:a9:3f:6a:42:77:a3:1b:be:46:ce:e4:7e:fe:45: 29:9e:67:ba:83:73:d4:90:0f:56:14:39:92:e6:f3:18:48:f1: ac:2b:b0:ad:fc:5d:ed:0c:ef:51:99:66:25:e2:7a:0d:8b:84: f3:ac:17:d0:5f:09:2e:6d:d5:2c:05:9b:d1:cd:ab:da:e7:f5: 3b:9d:4d:da:56:92:6c:10:e0:58:80:a9:fa:bb:3e:28:a4:0b: b4:92:cb:30:10:6a:ae:65:32:49:bf:5a:cf:21:cd:93:51:1f: cc:ce:46:97:78:e4:ce:42:a8:63:ab:94:88:da:4e:97:27:2a: ce:70:42:34:23:f5:fd:2e:93:60:b0:b1:6f:d2:cf:9c:8f:f3: 9c:93:4a:c4:4b:88:74:a0:bd:6e:80:28:fa:10:68:57:71:9d: b8:32:fe:f6:29:0e:4f:9b:dc:4a:8b:27:c9:a4:88:b5:4d:c4: 76:c8:7e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26k8rcP4DSHUi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NGYzYjAxYzMtNGRiYi00ZjA5LWI2YjktMDQ0OTYyZjExOTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgKABggYD/gbgvvbWxPVxJ+sBlqRAEPvfe3T PS5yfInTzP4DrjoxLp9qiYmnQR4CqG4GIYXeQP16N6DNEeF179XauoF23c6yZ834 0XuF5qrcrY8tUPTxWQbR69DK2Ecp1AG5UiKoD02LYgrEay9U8QNKC1hHecoc6Kc7 oAURDHb6e7D2H8Tl2xgwwP/LE9Ts8DrSOmTMGlgb/zUjMGPeUk26QZNaVLaU8346 Qg1hZFhbELnapqbdqm4cslfNZvCjj/zNR5GQJxo/7+bhqWnoBdd/4QkanF3sGbme yMEryIUqEaLPtWyevnJUmpVjr+5h70elk+7XGlbaFqEsidHInQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuWUlJ4Jf0K7QarxZFk7a6dI3J3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2EwMWQzNzEtYWE3NC0z ZTI0LWFjNTktYzU1OTUyNDM4ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf9wcKz9xfDtU90ugPFowiQ84a9wVs1ALvBRCMB8IOzX+jOz6DOQs7w otB9qwDgTAnRrnLCYcNn4S9yFx2LWm7JUHetK4hqbeRXES+pP2pCd6MbvkbO5H7+ RSmeZ7qDc9SQD1YUOZLm8xhI8awrsK38Xe0M71GZZiXieg2LhPOsF9BfCS5t1SwF m9HNq9rn9TudTdpWkmwQ4FiAqfq7PiikC7SSyzAQaq5lMkm/Ws8hzZNRH8zORpd4 5M5CqGOrlIjaTpcnKs5wQjQj9f0uk2CwsW/Sz5yP85yTSsRLiHSgvW6AKPoQaFdx nbgy/vYpDk+b3EqLJ8mkiLVNxHbIfgI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:11 2025 by rpki-client