$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa File: 3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa (raw, json) Hash identifier: t+1qntsG444VqPYjSv0o37+eRVJbQJRhrEYYClf8Vn0= Subject key identifier: 7D:9B:B8:26:35:69:67:22:42:C6:D8:81:52:50:A3:A6:3D:B3:A8:DB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB94F611C15A70BA3D1600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.70.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:94:f6:11:c1:5a:70:ba:3d:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=416a3c0e-2db8-4ba4-984b-584d544c86af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:73:1f:ff:2c:44:2f:ef:29:ce:8f:1a:b1: 8d:dd:86:ae:6c:37:6c:68:1c:1a:75:4c:5a:cd:c2: 61:db:fb:8a:be:07:36:f2:8f:60:43:12:02:30:db: 55:18:c0:95:d4:70:c6:c4:47:66:05:30:60:2d:bd: e3:0e:f0:de:e3:5f:e9:3b:3a:43:87:2e:d4:57:c6: 24:b9:b7:7a:ae:9f:c7:60:dd:c7:a1:88:9a:a6:79: 86:b2:76:a2:ca:48:c0:7c:70:c4:14:47:6e:64:9e: 1a:f0:a5:d8:3c:19:a9:48:a0:08:16:de:e7:5a:c2: f4:61:03:31:8c:da:12:f0:fc:d1:ce:c5:36:21:80: 5d:a7:d8:d7:a0:88:b6:13:b6:4d:50:c2:f8:02:46: 58:80:d0:16:00:9c:aa:fa:b9:e3:60:19:9d:bd:98: 88:30:44:68:b7:53:ef:ee:06:f5:0c:7a:e8:ca:dc: c5:49:a1:bc:30:8b:01:1a:62:a5:ca:d0:d5:1c:29: 55:2b:30:d6:d3:e9:3a:aa:6a:a9:3b:28:ee:33:3b: c7:4b:b1:a8:79:98:ed:b9:6c:a3:a8:82:70:b2:c6: 8e:e0:f8:f6:e3:69:ab:83:46:ef:59:e5:94:87:a4: cb:77:e1:21:61:9b:f2:24:36:dc:e6:14:28:16:a8: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9B:B8:26:35:69:67:22:42:C6:D8:81:52:50:A3:A6:3D:B3:A8:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e7:09:a1:cf:a2:8c:4e:a6:5c:e2:80:bb:a8:5b:4c:5c:e5: 1e:68:c3:f0:1b:71:dc:69:d2:2d:81:bd:72:ff:87:ab:98:5e: 64:32:c5:3a:7d:aa:c1:95:ca:e6:e7:09:e9:02:79:4b:4f:90: f0:6f:3a:d3:f9:78:42:73:ef:c9:b3:24:51:be:fe:56:0f:9a: e7:f0:7b:4e:32:a2:6b:1c:1d:b9:f9:87:d3:05:80:08:60:68: 42:64:44:8e:82:30:31:5c:dd:8d:8c:0e:f9:94:e7:9c:32:27: ff:41:4e:94:92:79:50:86:8a:ca:17:36:71:a9:63:b5:6f:70: f0:d8:5e:46:72:3c:53:da:c0:1f:5b:d5:83:1c:32:77:84:87: ce:c8:f9:5b:65:29:08:6b:a7:16:c5:75:dd:50:ef:32:ab:6b: 5b:05:5c:c2:b8:1f:37:fe:93:48:2d:49:5b:b9:5e:17:93:51: fa:f6:8d:9d:28:8b:bf:ee:94:e1:66:fb:2a:71:d5:14:b1:ca: 2f:bd:99:2e:3a:0d:1f:af:3f:50:ca:91:49:d9:02:84:5a:d2: 0c:1e:dc:01:2a:37:de:aa:b8:c4:64:eb:7a:2a:55:f0:b3:6f: c5:4c:b7:cc:42:46:1a:7b:f3:4a:29:34:7b:5f:a6:e9:41:93: e0:2a:3d:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25T2EcFacLo9FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDE2YTNjMGUtMmRiOC00YmE0LTk4NGItNTg0ZDU0NGM4NmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBtzH/8sRC/vKc6PGrGN3YaubDdsaBwadUxa zcJh2/uKvgc28o9gQxICMNtVGMCV1HDGxEdmBTBgLb3jDvDe41/pOzpDhy7UV8Yk ubd6rp/HYN3HoYiapnmGsnaiykjAfHDEFEduZJ4a8KXYPBmpSKAIFt7nWsL0YQMx jNoS8PzRzsU2IYBdp9jXoIi2E7ZNUML4AkZYgNAWAJyq+rnjYBmdvZiIMERot1Pv 7gb1DHroytzFSaG8MIsBGmKlytDVHClVKzDW0+k6qmqpOyjuMzvHS7GoeZjtuWyj qIJwssaO4Pj242mrg0bvWeWUh6TLd+EhYZvyJDbc5hQoFqg0iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2buCY1aWciQsbYgVJQo6Y9s6jbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NhOGJjN2QtZTEyNC0z MGM5LWI5NjUtOGUxMmNkOTRlNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjnCaHPooxOplzigLuoW0xc5R5ow/Abcdxp0i2BvXL/h6uYXmQyxTp9 qsGVyubnCekCeUtPkPBvOtP5eEJz78mzJFG+/lYPmufwe04yomscHbn5h9MFgAhg aEJkRI6CMDFc3Y2MDvmU55wyJ/9BTpSSeVCGisoXNnGpY7VvcPDYXkZyPFPawB9b 1YMcMneEh87I+VtlKQhrpxbFdd1Q7zKra1sFXMK4Hzf+k0gtSVu5XheTUfr2jZ0o i7/ulOFm+ypx1RSxyi+9mS46DR+vP1DKkUnZAoRa0gwe3AEqN96quMRk63oqVfCz b8VMt8xCRhp780opNHtfpulBk+AqPbk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:19 2025 by rpki-client