$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40cc30de-d6b0-3ee6-8367-33e297a46642.roa File: 40cc30de-d6b0-3ee6-8367-33e297a46642.roa (raw, json) Hash identifier: 9H2v2gkYaAb2vKLu5/95zxWAfccURbb+9tv16l6P6h8= Subject key identifier: 68:86:3A:C7:8A:99:20:68:CB:66:50:90:92:14:CD:29:2B:1D:5A:DD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA1A30AB651C5B9932370 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40cc30de-d6b0-3ee6-8367-33e297a46642.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.163.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a1:a3:0a:b6:51:c5:b9:93:23:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=df02c661-6a32-4a32-ac2c-b5f378103ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:c0:96:ea:10:a5:f8:f6:64:53:e1:a2:c7: 14:ef:a8:8f:01:47:05:07:13:0f:94:8c:28:56:0b: 57:13:62:ae:0c:d3:5e:e5:6a:82:21:09:75:ff:db: 4e:3c:5b:b5:8f:c0:de:03:cc:22:dc:c9:6f:06:05: 57:9a:e5:71:1a:7a:9f:ff:16:31:3e:1c:12:d1:7c: 46:3b:4f:0a:65:e1:0e:16:9b:8b:dd:17:0f:9d:43: 04:31:c0:df:3e:dd:ba:be:77:d0:ae:e4:c5:5c:cf: 7d:05:6d:32:26:bf:94:6c:ca:b5:99:2e:c9:05:c0: 20:59:20:1b:8e:ea:94:88:3d:ca:7e:18:d3:8a:25: bd:df:c8:38:77:dc:d3:b1:98:db:8a:86:f7:f3:8b: 5f:60:7e:9f:24:16:a7:8a:3a:be:05:e3:3d:ee:9c: 49:1e:20:fe:1d:7e:13:6d:61:43:1c:e1:75:44:8f: 75:67:71:1d:fe:63:9c:ef:5b:5c:70:d9:e8:47:44: b9:e0:1f:c4:c6:16:cf:f5:0f:97:de:2e:0d:0e:04: ac:82:9d:1b:80:9d:93:e5:09:7c:6b:dc:19:8d:eb: a9:07:f4:1e:19:28:39:20:10:be:f3:86:78:78:bb: 9a:18:cf:e1:f1:56:aa:bf:29:eb:d4:c5:2d:bd:67: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:86:3A:C7:8A:99:20:68:CB:66:50:90:92:14:CD:29:2B:1D:5A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40cc30de-d6b0-3ee6-8367-33e297a46642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.163.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:79:1b:ca:48:12:e8:64:54:09:fb:6f:0a:1d:c4:bc:32:8b: 1d:6f:e5:65:e4:4a:96:6b:46:f0:2c:ad:7e:9c:ce:ab:61:17: 55:47:13:50:6e:0d:37:82:1b:2f:26:2f:4e:54:29:2d:94:5b: 13:c0:e2:fd:64:ee:4d:96:85:a2:33:55:2f:5e:c8:b0:c2:a8: b3:39:c2:fe:f9:42:cd:65:52:18:b3:4a:fd:1d:36:7f:52:d0: 39:50:8c:3f:f3:fd:31:b8:a0:5d:d5:b1:4a:7b:68:61:bd:2d: 00:42:88:ce:eb:19:53:01:b5:05:0b:60:e1:7a:21:6b:e2:87: 49:c6:f3:1d:1f:1d:2c:e4:1f:40:8c:f7:8f:99:ef:ce:d4:7d: 7d:da:60:22:d0:f5:62:ed:09:eb:91:11:7e:78:0e:ad:ad:26: a6:cc:4f:e4:a6:cd:5a:2c:73:cd:21:b1:a1:28:90:e0:59:b3: 78:f1:14:de:ca:e2:d6:02:aa:ca:26:41:74:e6:21:23:b2:bc: d1:2b:4f:08:21:a2:cf:3b:5d:cd:b3:d5:6f:55:0b:36:08:6a: 7f:c4:42:06:01:79:5b:4c:94:a6:88:71:c0:fd:27:3c:48:cd: 21:98:26:c1:1d:81:7d:10:65:9f:29:41:2a:1f:41:de:d6:55: 84:82:94:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26GjCrZRxbmTI3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZGYwMmM2NjEtNmEzMi00YTMyLWFjMmMtYjVmMzc4MTAzYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyHAluoQpfj2ZFPhoscU76iPAUcFBxMPlIwo VgtXE2KuDNNe5WqCIQl1/9tOPFu1j8DeA8wi3MlvBgVXmuVxGnqf/xYxPhwS0XxG O08KZeEOFpuL3RcPnUMEMcDfPt26vnfQruTFXM99BW0yJr+UbMq1mS7JBcAgWSAb juqUiD3KfhjTiiW938g4d9zTsZjbiob384tfYH6fJBanijq+BeM97pxJHiD+HX4T bWFDHOF1RI91Z3Ed/mOc71tccNnoR0S54B/ExhbP9Q+X3i4NDgSsgp0bgJ2T5Ql8 a9wZjeupB/QeGSg5IBC+84Z4eLuaGM/h8Vaqvynr1MUtvWeAMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiGOseKmSBoy2ZQkJIUzSkrHVrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDBjYzMwZGUtZDZiMC0z ZWU2LTgzNjctMzNlMjk3YTQ2NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIqNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC55G8pIEuhkVAn7bwodxLwyix1v5WXkSpZrRvAsrX6czqthF1VHE1Bu DTeCGy8mL05UKS2UWxPA4v1k7k2WhaIzVS9eyLDCqLM5wv75Qs1lUhizSv0dNn9S 0DlQjD/z/TG4oF3VsUp7aGG9LQBCiM7rGVMBtQULYOF6IWvih0nG8x0fHSzkH0CM 94+Z787UfX3aYCLQ9WLtCeuREX54Dq2tJqbMT+SmzVosc80hsaEokOBZs3jxFN7K 4tYCqsomQXTmISOyvNErTwghos87Xc2z1W9VCzYIan/EQgYBeVtMlKaIccD9JzxI zSGYJsEdgX0QZZ8pQSofQd7WVYSClEg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:05 2025 by rpki-client