$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bbeb244-6ca2-34c7-bcff-5657e0defff4.roa File: 3bbeb244-6ca2-34c7-bcff-5657e0defff4.roa (raw, json) Hash identifier: HafVrXTXaJZacWHlWzIgpqhm0N0cLs4ORPfVxeEGmDA= Subject key identifier: 03:0A:38:ED:BE:E0:F2:0D:47:26:BD:B1:D9:E4:94:16:95:C0:67:E6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB8DFFA255622B1434F500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bbeb244-6ca2-34c7-bcff-5657e0defff4.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.131.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:8d:ff:a2:55:62:2b:14:34:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=7c1ae2f8-7192-4c57-b14a-a8e8d7220d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:c8:2c:1f:be:74:cd:a6:bc:00:6d:36:32: cb:a8:26:0f:01:75:ac:bc:d2:d1:13:b3:7b:5a:91: e1:3a:4e:3b:36:a3:26:03:36:b0:a4:ec:ec:7b:e8: a9:de:57:5c:b6:21:2c:43:f8:07:0d:a1:7a:01:44: 85:37:63:a8:15:3a:a4:51:65:d3:95:0d:a1:90:88: ac:03:62:04:88:f8:89:5e:a0:a4:5c:63:b0:6d:b7: a0:31:1e:d5:fc:39:77:da:b1:09:33:be:05:8d:8c: 99:56:91:13:99:cd:9b:2d:03:11:9b:ed:96:27:01: 0f:f4:ee:fd:44:18:cf:0b:39:85:e7:d1:f2:88:a0: 0a:ed:77:74:5d:90:14:5b:a9:8e:9e:eb:62:35:1d: 6f:ea:2b:6f:8f:81:53:dc:48:f8:03:90:80:be:a3: c3:e4:b3:c8:2a:93:8c:45:a7:ce:0d:72:59:59:0f: d2:cf:9d:b2:f9:79:7f:59:13:9e:05:60:a2:8f:bf: cb:2a:d7:0b:6d:af:9c:85:1e:f0:7c:ee:84:e6:1c: d3:3b:79:e3:93:92:42:a6:5f:05:96:85:b3:41:89: 23:cc:0f:b7:ea:3b:40:29:d1:6e:81:33:a2:d7:fc: 84:93:0b:77:37:83:62:1e:c1:2f:44:fe:74:b4:06: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0A:38:ED:BE:E0:F2:0D:47:26:BD:B1:D9:E4:94:16:95:C0:67:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bbeb244-6ca2-34c7-bcff-5657e0defff4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5e:52:30:cf:17:d2:9b:86:a4:42:97:81:95:1f:16:3c:20: c3:60:f1:a1:14:a9:25:37:ce:60:38:6e:e3:78:2a:cb:07:3d: 62:b4:28:4d:ad:ed:05:5a:00:af:09:e6:7e:89:b3:a4:f8:33: ca:69:50:a9:75:dc:20:1b:61:54:16:22:2e:d8:f3:3f:45:aa: fd:b4:01:9a:e0:b7:17:5b:e2:3d:67:b2:72:cc:cf:c7:fe:25: f3:a4:c4:e0:67:c6:3f:37:c0:d6:2e:84:f3:24:03:4b:4f:6f: 06:b6:34:45:5c:2f:dc:b2:5b:6b:93:39:89:2c:4f:26:4e:94: 31:ed:1b:70:f1:1a:9f:1d:fc:c3:a5:4d:07:f4:cb:ce:b9:b1: 62:bf:50:7c:23:d7:b4:e9:34:86:46:22:67:54:22:7c:9b:ef: b0:fe:53:70:c6:76:52:5f:f2:1d:4c:02:f3:e3:d9:70:48:be: d2:e3:a2:0e:3e:1d:a5:2b:6e:2d:c2:99:f6:f6:00:29:a8:f0: d4:f6:8a:72:75:40:4d:29:7e:10:c1:6f:0e:11:5a:75:c4:ff: f0:0d:c0:e7:f3:89:35:b2:71:db:29:ae:a3:92:48:7a:e7:97: 57:34:ee:fd:4d:17:00:8a:eb:44:d4:ee:ff:fb:18:7e:46:28: 6f:5c:c9:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG243/olViKxQ09QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk N2MxYWUyZjgtNzE5Mi00YzU3LWIxNGEtYThlOGQ3MjIwZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5XILB++dM2mvABtNjLLqCYPAXWsvNLRE7N7 WpHhOk47NqMmAzawpOzse+ip3ldctiEsQ/gHDaF6AUSFN2OoFTqkUWXTlQ2hkIis A2IEiPiJXqCkXGOwbbegMR7V/Dl32rEJM74FjYyZVpETmc2bLQMRm+2WJwEP9O79 RBjPCzmF59HyiKAK7Xd0XZAUW6mOnutiNR1v6itvj4FT3Ej4A5CAvqPD5LPIKpOM RafODXJZWQ/Sz52y+Xl/WROeBWCij7/LKtcLba+chR7wfO6E5hzTO3njk5JCpl8F loWzQYkjzA+36jtAKdFugTOi1/yEkwt3N4NiHsEvRP50tAYUPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMKOO2+4PINRya9sdnklBaVwGfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JiZWIyNDQtNmNhMi0z NGM3LWJjZmYtNTY1N2UwZGVmZmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNeUjDPF9KbhqRCl4GVHxY8IMNg8aEUqSU3zmA4buN4KssHPWK0KE2t 7QVaAK8J5n6Js6T4M8ppUKl13CAbYVQWIi7Y8z9Fqv20AZrgtxdb4j1nsnLMz8f+ JfOkxOBnxj83wNYuhPMkA0tPbwa2NEVcL9yyW2uTOYksTyZOlDHtG3DxGp8d/MOl TQf0y865sWK/UHwj17TpNIZGImdUInyb77D+U3DGdlJf8h1MAvPj2XBIvtLjog4+ HaUrbi3Cmfb2ACmo8NT2inJ1QE0pfhDBbw4RWnXE//ANwOfziTWycdsprqOSSHrn l1c07v1NFwCK60TU7v/7GH5GKG9cyQs= -----END CERTIFICATE-----Generated at Tue Jul 22 04:26:42 2025 by rpki-client