$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa File: 3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa (raw, json) Hash identifier: KM/LaO9YXzL+h4h75OYyLLxG13Y6LGHwSG9Rao4i5+o= Subject key identifier: D3:82:74:3D:41:DF:A1:45:10:9F:BB:1E:99:A4:F7:BB:FE:17:69:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF404F1A06ECC3D1EC520 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.87.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f4:04:f1:a0:6e:cc:3d:1e:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=d65e159c-38b0-4fb1-a776-46ca8575425f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:63:5a:71:b7:56:a8:84:78:2e:42:19:91:8c: 99:45:b2:55:f6:43:21:65:86:ad:c4:c2:f7:98:3d: ad:fe:07:9c:1e:f1:9f:ac:9e:f1:63:bd:14:f2:bc: ed:67:02:cc:85:0f:b5:1d:49:33:f9:79:2a:1b:5e: ac:5b:d5:a1:6e:40:e1:58:43:ba:e8:f8:dd:58:d5: dd:b4:f2:cd:d3:1f:68:65:0f:ab:89:74:74:7d:50: 19:66:4b:2e:c6:5c:8d:ad:ae:b5:12:36:60:75:42: 84:ae:93:df:d1:91:4b:d0:d0:d5:56:85:df:ec:93: c6:d2:20:67:9e:02:f3:6f:62:65:83:ff:ff:0a:7d: 66:54:40:75:c7:4e:0b:6c:54:ee:ac:9e:ac:27:06: fe:10:ab:e5:d4:1c:2d:4d:da:d2:00:1d:91:da:f2: fe:68:47:8a:77:88:63:2a:ca:06:50:ad:d2:21:e5: 7c:ad:18:33:fd:ae:0a:54:70:f1:9e:1e:b2:50:83: 35:16:ae:d9:75:0f:9e:57:a8:e3:69:ba:1f:6a:84: 6a:f7:5a:fa:9b:5e:eb:61:9a:97:9f:91:2a:f9:7a: 70:c5:56:c1:20:be:8f:54:e2:ce:07:4b:ab:c8:11: 0e:84:92:39:cb:f3:5d:88:0b:f0:22:bc:3b:a3:ef: 48:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:82:74:3D:41:DF:A1:45:10:9F:BB:1E:99:A4:F7:BB:FE:17:69:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6c:97:75:c9:fa:55:f4:0c:97:88:b5:d7:d2:54:39:72:a9: 7c:20:2f:82:7d:ca:31:dd:eb:86:6a:ac:75:54:42:47:17:f3: 32:63:2e:e4:8e:28:a3:61:5d:70:88:0d:dd:ec:02:26:21:1b: 15:45:8f:39:4d:33:ce:a7:a7:25:c6:e4:29:7d:ab:b0:81:f5: fc:dd:a7:56:ea:bd:80:9c:2d:58:ed:bb:b2:c9:3e:df:98:e1: 8f:92:6a:dc:0d:5c:49:bd:bf:5f:c4:3d:35:c7:84:5a:5a:2d: f9:09:b9:9d:22:a4:72:1b:5c:b0:83:7b:39:ca:14:97:12:c5: fe:22:93:ed:73:11:eb:4c:e4:98:21:5a:54:6a:22:32:87:bb: c7:40:36:ba:cd:a1:52:8e:56:b4:48:07:90:ed:5f:37:60:70: 94:ca:af:b2:ff:0e:ce:b9:f4:e4:cd:50:0f:27:db:84:9e:ba: 96:8f:83:4c:be:c9:eb:4b:ec:0b:e9:63:90:cd:72:ed:ff:74: d1:0c:46:35:a5:b2:1d:fd:5b:3c:9e:e1:ff:d6:c7:5e:74:1a: cf:6e:75:12:6c:6a:d7:b0:a8:27:ea:55:c6:81:c2:d1:3d:ff: 10:ba:05:de:6a:f0:1c:77:dc:bc:9d:ee:81:3d:59:e3:db:c5: bf:bb:e1:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/QE8aBuzD0exSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZDY1ZTE1OWMtMzhiMC00ZmIxLWE3NzYtNDZjYTg1NzU0MjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2NacbdWqIR4LkIZkYyZRbJV9kMhZYatxML3 mD2t/gecHvGfrJ7xY70U8rztZwLMhQ+1HUkz+XkqG16sW9WhbkDhWEO66PjdWNXd tPLN0x9oZQ+riXR0fVAZZksuxlyNra61EjZgdUKErpPf0ZFL0NDVVoXf7JPG0iBn ngLzb2Jlg///Cn1mVEB1x04LbFTurJ6sJwb+EKvl1BwtTdrSAB2R2vL+aEeKd4hj KsoGUK3SIeV8rRgz/a4KVHDxnh6yUIM1Fq7ZdQ+eV6jjabofaoRq91r6m17rYZqX n5Eq+XpwxVbBIL6PVOLOB0uryBEOhJI5y/NdiAvwIrw7o+9IGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOCdD1B36FFEJ+7Hpmk97v+F2nCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JhOWVjOTYtMGUyNC0z NTMyLWJiZjAtOTg2YzhlZjIwMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANsl3XJ+lX0DJeItdfSVDlyqXwgL4J9yjHd64ZqrHVUQkcX8zJjLuSO KKNhXXCIDd3sAiYhGxVFjzlNM86npyXG5Cl9q7CB9fzdp1bqvYCcLVjtu7LJPt+Y 4Y+SatwNXEm9v1/EPTXHhFpaLfkJuZ0ipHIbXLCDeznKFJcSxf4ik+1zEetM5Jgh WlRqIjKHu8dANrrNoVKOVrRIB5DtXzdgcJTKr7L/Ds659OTNUA8n24SeupaPg0y+ yetL7AvpY5DNcu3/dNEMRjWlsh39Wzye4f/Wx150Gs9udRJsatewqCfqVcaBwtE9 /xC6Bd5q8Bx33Lyd7oE9WePbxb+74dc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:30:33 2025 by rpki-client