$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa File: 3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa (raw, json) Hash identifier: JD0TQUw+4iWus3F7+VAijmWpGyzS759YbBoV+1fudJQ= Subject key identifier: C6:71:B3:74:FA:77:58:C6:E4:5C:E2:2D:4D:85:C1:8A:90:A6:E1:BF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBA8C5B316DC309ADFD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.85.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ba:8c:5b:31:6d:c3:09:ad:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=273a05b9-eb4b-462a-ad77-25197d2a105a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c3:db:1e:ff:e4:ee:aa:4b:e7:0a:3a:3b:15: 6b:af:8d:3c:be:e8:47:f0:6b:71:01:d5:70:d7:23: e1:39:b7:6a:33:37:f8:df:0b:f9:32:3e:57:fe:e8: c2:07:11:ba:bc:d2:9c:3e:0c:4e:12:b1:a2:4a:2b: 31:e0:0c:1c:4d:a9:75:9b:b6:02:bd:a8:41:97:70: 80:8c:39:d3:09:d1:f6:7d:88:f0:85:10:42:23:a0: 62:e2:69:a0:ad:fa:e3:61:6a:62:bc:4a:8c:6f:11: ec:19:79:3f:26:53:32:ac:64:85:e5:70:61:49:fc: 38:bd:3d:1f:61:c4:60:63:b4:89:01:bc:3e:c7:ad: 58:83:2f:1f:36:94:ad:ae:05:43:e4:50:1c:5f:d8: 34:57:12:b6:83:5c:ea:58:59:84:e9:09:cc:d9:80: ba:5f:83:b6:40:0e:85:a0:00:1e:4f:49:c9:fc:a6: 94:f8:d3:04:11:6f:70:df:69:b2:c6:11:d5:db:3b: c6:43:65:5a:3a:bb:38:d8:1d:2b:20:a3:f2:f2:67: 1b:44:23:c5:94:e6:5a:40:58:dd:c0:9c:60:48:4c: dc:b1:bf:0e:9b:4c:a8:64:da:e2:db:6d:01:d7:29: ed:00:46:cd:39:36:7e:8e:ff:ed:87:a5:2c:0e:9f: 4f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:71:B3:74:FA:77:58:C6:E4:5C:E2:2D:4D:85:C1:8A:90:A6:E1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:49:b4:5e:e1:2a:0c:a4:de:de:d8:7e:c4:b3:9d:e9:e0:05: 1b:94:fc:34:da:e0:c4:3e:d0:91:3f:74:5b:68:32:9e:65:97: da:df:eb:27:8a:f9:78:7c:ad:14:c1:42:dd:f0:40:03:11:e3: 65:b7:ed:2c:a3:dd:fe:71:d4:6a:71:1c:29:d3:41:93:40:73: df:e2:d8:bf:24:d3:83:75:28:c2:b5:c4:c5:c9:b9:97:59:7f: e9:a6:06:81:af:f7:3d:a3:6e:a2:49:9f:4f:cf:1f:6b:a1:81: d8:f7:67:92:ae:40:51:44:33:59:df:cb:10:6a:c7:72:20:48: 74:35:43:f5:71:f6:e1:1b:35:a6:c4:1f:81:ab:38:79:5a:a6: 45:e2:4b:79:40:80:06:05:32:1a:66:30:44:f5:85:c9:2b:a9: 8e:c8:55:3d:16:75:61:a2:d6:f1:3d:b5:b6:cf:79:17:42:5f: fa:0e:96:67:c0:1d:2f:f6:c9:76:b4:4d:c0:38:e9:d2:12:af: 41:83:27:a3:06:ec:9b:0c:2a:ff:0c:db:c2:9f:e6:30:66:8f: 35:10:30:34:a1:ad:a9:bd:e7:46:8b:bf:b5:62:82:1c:2e:fe: d9:d0:27:9c:2c:1c:e2:0f:df:f0:1b:3e:23:fe:bb:a5:f2:a1: b5:41:86:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27qMWzFtwwmt/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MjczYTA1YjktZWI0Yi00NjJhLWFkNzctMjUxOTdkMmExMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsPbHv/k7qpL5wo6OxVrr408vuhH8GtxAdVw 1yPhObdqMzf43wv5Mj5X/ujCBxG6vNKcPgxOErGiSisx4AwcTal1m7YCvahBl3CA jDnTCdH2fYjwhRBCI6Bi4mmgrfrjYWpivEqMbxHsGXk/JlMyrGSF5XBhSfw4vT0f YcRgY7SJAbw+x61Ygy8fNpStrgVD5FAcX9g0VxK2g1zqWFmE6QnM2YC6X4O2QA6F oAAeT0nJ/KaU+NMEEW9w32myxhHV2zvGQ2VaOrs42B0rIKPy8mcbRCPFlOZaQFjd wJxgSEzcsb8Om0yoZNri220B1yntAEbNOTZ+jv/th6UsDp9PLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZxs3T6d1jG5FziLU2FwYqQpuG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NkYmU5YTYtMTAyNC0z NmI1LTg3ZGMtNDA2ZTRkZWI4OWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRJtF7hKgyk3t7YfsSznengBRuU/DTa4MQ+0JE/dFtoMp5ll9rf6yeK +Xh8rRTBQt3wQAMR42W37Syj3f5x1GpxHCnTQZNAc9/i2L8k04N1KMK1xMXJuZdZ f+mmBoGv9z2jbqJJn0/PH2uhgdj3Z5KuQFFEM1nfyxBqx3IgSHQ1Q/Vx9uEbNabE H4GrOHlapkXiS3lAgAYFMhpmMET1hckrqY7IVT0WdWGi1vE9tbbPeRdCX/oOlmfA HS/2yXa0TcA46dISr0GDJ6MG7JsMKv8M28Kf5jBmjzUQMDShram950aLv7Vighwu /tnQJ5wsHOIP3/AbPiP+u6XyobVBhok= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:19 2025 by rpki-client