$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa File: 3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa (raw, json) Hash identifier: /zWbnXAJ4WVofMC8JxDoRkxkA4rZdwy2EY/mDKI0efk= Subject key identifier: D4:10:FA:15:78:E1:EB:C0:F8:10:26:B5:A9:59:DC:CE:0F:E6:EE:0B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEB6D21070041C3076300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.86.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:eb:6d:21:07:00:41:c3:07:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2795379c-d6d8-4f0d-a8e4-f1503b00cfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:63:2b:01:b0:9b:58:6d:cc:40:bd:9a:40:42: d1:68:e1:7a:9a:8e:4b:a1:60:0c:a8:2f:61:aa:0f: c4:47:44:de:09:47:ac:2c:0b:c9:ff:67:37:f5:23: e7:5e:c2:dc:45:84:de:94:13:8f:87:f5:58:d1:7f: 7f:38:e3:ea:14:64:9a:aa:f5:10:ae:21:00:af:21: bd:61:c1:a5:17:24:de:4b:ab:e4:45:22:bf:97:98: 1d:78:7d:0c:5f:e7:7c:7d:27:43:88:7e:2f:60:b5: 32:44:08:28:6a:fb:10:99:9d:19:a6:4a:43:44:14: 0e:d9:cf:8e:77:6f:3d:c1:af:d9:71:9b:06:37:90: 98:32:ea:a2:3e:19:af:65:42:36:8d:fe:38:50:22: 7f:35:a6:71:5b:00:18:23:65:18:8f:45:90:19:b6: 69:38:47:31:d3:c9:9b:6b:89:dd:78:8e:e1:70:39: f1:ed:e8:ae:1c:bd:ab:05:06:92:db:aa:50:f7:c7: 28:e8:48:bc:f2:a6:e1:38:d0:87:96:42:0e:4c:51: 6f:5f:e3:e3:62:66:0a:7c:0e:8f:56:80:15:39:80: a7:7f:85:6f:5a:27:e6:48:c5:44:58:54:05:a9:61: 41:a3:20:b5:79:08:09:77:2c:35:9d:d5:d0:2d:4e: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:10:FA:15:78:E1:EB:C0:F8:10:26:B5:A9:59:DC:CE:0F:E6:EE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2a:9e:45:4b:f8:92:c3:39:2a:f6:5d:9d:3f:8f:56:7f:a3: f2:6c:82:c7:91:b3:89:e8:dd:7c:7a:ac:80:7b:5b:d2:89:b0: 1a:42:32:f6:bd:2a:8b:e7:9c:24:f2:43:db:33:03:6e:18:14: f6:0f:be:37:ed:4d:52:e8:b6:93:13:11:be:87:ab:15:21:e2: ad:27:ca:7c:22:34:a0:4c:bd:56:34:90:b9:02:a9:bc:6a:40: 08:6f:40:83:0a:cb:92:ed:88:b9:fa:97:9a:81:8f:e7:2e:de: 02:ae:31:3f:90:25:fc:d5:5c:f2:aa:2f:a5:1f:1f:71:97:61: f3:9d:29:97:53:4b:91:a2:7a:19:ff:e1:a2:36:71:62:5c:52: 1a:36:c5:c0:8a:28:03:1d:a3:fd:2d:48:d8:3f:34:3a:a9:55: a0:69:11:b2:05:7d:4c:17:e8:7b:82:f8:9b:ab:fa:d7:51:7d: 55:da:d6:43:dc:a3:49:a7:72:1d:cb:87:00:ed:c9:38:fa:10: 49:66:0f:f0:0e:6e:79:f4:da:31:64:9a:d0:98:2b:64:de:c3: f3:a6:cf:f9:ab:ed:40:f2:1f:56:ee:63:89:cb:0e:30:38:69: 24:26:ff:a8:b1:18:76:a4:98:c7:42:99:9c:fe:fd:ce:51:69: 35:44:e9:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+ttIQcAQcMHYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Mjc5NTM3OWMtZDZkOC00ZjBkLWE4ZTQtZjE1MDNiMDBjZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22MrAbCbWG3MQL2aQELRaOF6mo5LoWAMqC9h qg/ER0TeCUesLAvJ/2c39SPnXsLcRYTelBOPh/VY0X9/OOPqFGSaqvUQriEAryG9 YcGlFyTeS6vkRSK/l5gdeH0MX+d8fSdDiH4vYLUyRAgoavsQmZ0ZpkpDRBQO2c+O d289wa/ZcZsGN5CYMuqiPhmvZUI2jf44UCJ/NaZxWwAYI2UYj0WQGbZpOEcx08mb a4ndeI7hcDnx7eiuHL2rBQaS26pQ98co6Ei88qbhONCHlkIOTFFvX+PjYmYKfA6P VoAVOYCnf4VvWifmSMVEWFQFqWFBoyC1eQgJdyw1ndXQLU6D8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQQ+hV44evA+BAmtalZ3M4P5u4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2UyM2Q3MGItNzVmMS0z NjBkLWFmODQtYmQxNTY4YWQyZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsqnkVL+JLDOSr2XZ0/j1Z/o/JsgseRs4no3Xx6rIB7W9KJsBpCMva9 KovnnCTyQ9szA24YFPYPvjftTVLotpMTEb6HqxUh4q0nynwiNKBMvVY0kLkCqbxq QAhvQIMKy5LtiLn6l5qBj+cu3gKuMT+QJfzVXPKqL6UfH3GXYfOdKZdTS5Giehn/ 4aI2cWJcUho2xcCKKAMdo/0tSNg/NDqpVaBpEbIFfUwX6HuC+Jur+tdRfVXa1kPc o0mnch3LhwDtyTj6EElmD/AObnn02jFkmtCYK2Tew/Omz/mr7UDyH1buY4nLDjA4 aSQm/6ixGHakmMdCmZz+/c5RaTVE6Xg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:50 2025 by rpki-client