$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3afd4069-a658-306e-a6bf-36f942b2600a.roa File: 3afd4069-a658-306e-a6bf-36f942b2600a.roa (raw, json) Hash identifier: EMtAbQturB9Ylw1leNP1qRb307zyDb9hP3Vnktdo/Ng= Subject key identifier: 2D:00:37:BB:C7:0B:45:3F:7B:C1:9D:B9:47:D1:F3:1C:30:7D:64:F4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84119178F3D02E010D1E5980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3afd4069-a658-306e-a6bf-36f942b2600a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.100.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:91:78:f3:d0:2e:01:0d:1e:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4c910a6e-2c91-459d-b17e-6dcbd7ff9d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:4b:24:94:71:25:56:2d:ec:45:c3:4b:47: c5:cf:ff:55:26:12:fd:c6:d2:fd:7c:ca:74:7e:83: aa:de:6d:47:36:06:e5:79:2e:7d:1c:71:7e:3f:71: a5:43:2a:0c:04:bd:d4:24:aa:d5:b5:38:3c:16:a4: 63:d2:e8:27:85:45:91:31:59:00:d7:e3:f1:f7:46: 34:7c:4f:c7:cf:2e:58:a1:2f:ec:72:79:89:5e:19: a2:b3:3d:ca:29:5b:82:e6:b2:84:ce:d7:f8:a5:ff: 6c:3e:68:d4:49:24:b0:f7:fc:f8:17:b4:1d:e3:d8: 25:44:76:b0:d2:9b:5f:a4:5c:f6:ef:70:eb:c7:52: ae:b5:68:32:a5:8b:5b:14:54:a5:24:76:a2:99:0b: 24:66:07:4c:f1:cc:d3:6e:6d:07:2b:f7:65:90:e6: d5:eb:59:2f:b6:64:99:3a:83:1e:d1:5c:dc:90:12: 48:02:2f:65:49:f7:94:2c:2e:34:9b:e2:0a:96:bd: a0:4f:6f:33:b6:4c:e0:3e:90:3d:86:bf:3b:43:13: 8c:84:e2:7b:b8:1d:98:2c:f8:f1:01:cf:93:2a:04: 8d:a9:fb:f0:ec:10:78:94:2d:94:8c:7b:98:3c:61: 8e:aa:d2:94:5a:c7:1d:90:af:8d:27:ed:17:4d:15: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:00:37:BB:C7:0B:45:3F:7B:C1:9D:B9:47:D1:F3:1C:30:7D:64:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3afd4069-a658-306e-a6bf-36f942b2600a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:77:1b:0e:2f:4d:8b:73:d3:c4:0e:1f:76:ed:a1:4f:e4:92: e4:97:b2:17:d9:c3:04:a1:45:16:4c:a9:87:11:56:ab:97:e3: 3e:11:8a:5b:e1:86:3a:b1:75:be:3a:d7:ef:48:d8:a9:d9:74: 39:63:d0:02:ad:4e:b5:f7:f6:f4:cb:12:56:a9:59:d3:bd:1d: 91:a8:cc:03:95:f4:c0:b9:21:db:f0:3b:02:f3:27:c9:13:0b: 51:d5:6c:17:8a:b1:c1:96:98:27:a2:88:4b:93:8e:cf:a1:1b: 97:15:1c:65:82:1c:f0:01:05:cf:16:cd:6d:16:74:aa:ce:f1: ed:d3:50:38:d8:4a:66:e7:2e:eb:9d:52:2e:31:a3:d2:e3:7e: de:bb:d7:4f:d0:b1:a6:af:c5:5c:dd:30:55:a5:be:a6:96:c6: 9d:41:93:dc:40:b2:29:14:8d:a4:70:b6:b2:25:0d:15:85:c1: 1a:1f:f3:d5:5a:7c:33:ab:30:ca:91:60:2c:4b:a1:2e:46:76: 28:be:c1:d1:2c:40:68:ff:f7:c4:2b:0b:b7:1f:83:f9:43:a3: d8:d9:74:7e:6f:81:9e:9f:75:05:58:ee:16:1d:f5:52:99:b1: 7e:d4:13:73:52:c8:8d:ae:98:0a:5b:44:8b:05:77:12:6f:cb: 94:12:20:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZF489AuAQ0eWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGM5MTBhNmUtMmM5MS00NTlkLWIxN2UtNmRjYmQ3ZmY5ZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6RLJJRxJVYt7EXDS0fFz/9VJhL9xtL9fMp0 foOq3m1HNgbleS59HHF+P3GlQyoMBL3UJKrVtTg8FqRj0ugnhUWRMVkA1+Px90Y0 fE/Hzy5YoS/scnmJXhmisz3KKVuC5rKEztf4pf9sPmjUSSSw9/z4F7Qd49glRHaw 0ptfpFz273Drx1KutWgypYtbFFSlJHaimQskZgdM8czTbm0HK/dlkObV61kvtmSZ OoMe0VzckBJIAi9lSfeULC40m+IKlr2gT28ztkzgPpA9hr87QxOMhOJ7uB2YLPjx Ac+TKgSNqfvw7BB4lC2UjHuYPGGOqtKUWscdkK+NJ+0XTRWdjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0AN7vHC0U/e8GduUfR8xwwfWT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2FmZDQwNjktYTY1OC0z MDZlLWE2YmYtMzZmOTQyYjI2MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF3Gw4vTYtz08QOH3btoU/kkuSXshfZwwShRRZMqYcRVquX4z4Rilvh hjqxdb461+9I2KnZdDlj0AKtTrX39vTLElapWdO9HZGozAOV9MC5IdvwOwLzJ8kT C1HVbBeKscGWmCeiiEuTjs+hG5cVHGWCHPABBc8WzW0WdKrO8e3TUDjYSmbnLuud Ui4xo9Ljft6710/QsaavxVzdMFWlvqaWxp1Bk9xAsikUjaRwtrIlDRWFwRof89Va fDOrMMqRYCxLoS5Gdii+wdEsQGj/98QrC7cfg/lDo9jZdH5vgZ6fdQVY7hYd9VKZ sX7UE3NSyI2umApbRIsFdxJvy5QSICI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:57 2025 by rpki-client