$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa File: 4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa (raw, json) Hash identifier: pVRRahjWltDrFaTo0wE36asevUKtWy5gF3/l7oitHJo= Subject key identifier: 63:8E:4D:AF:A9:85:1B:E6:7B:22:51:7A:FF:21:F5:78:26:21:26:D2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB845FC7BA453EE2B7B100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:84:5f:c7:ba:45:3e:e2:b7:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=58d4b58d-e2a7-44bf-8a3b-63b3efa5405f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:31:c2:51:07:0b:81:6e:dd:0f:d7:1d:0d: 0e:62:9f:3e:0a:33:f2:f8:b6:7f:22:fe:51:c3:f6: 8d:0d:82:99:87:b2:59:14:89:e8:dd:04:77:f7:51: f5:f4:05:3c:27:d1:bc:ac:47:94:ce:3a:46:e1:53: 16:6d:88:2e:cc:ed:c9:a0:2e:a8:e2:a5:b1:fd:4e: 06:79:a1:7b:08:9a:8c:cf:c3:88:2e:44:32:c7:a5: b1:06:cd:85:61:01:38:6a:65:57:41:dd:9e:c3:88: 00:8b:4e:ef:1a:cf:2b:01:46:d4:67:17:5c:03:a3: ad:44:a4:4c:0c:4b:4b:2b:b1:c0:4a:2e:9d:42:09: 7a:53:f3:90:79:3e:d8:77:a1:da:98:34:9f:f5:6e: c1:a6:70:99:ef:38:90:a9:cb:99:58:b9:c4:dd:f3: e8:fd:ca:3b:5e:23:bf:31:28:b9:5e:13:9c:87:5e: c0:00:a1:b8:46:4d:7b:ea:34:05:25:18:39:be:6c: 47:29:97:c4:f9:a3:0a:ab:c9:d7:69:8c:46:f3:24: 68:48:5e:98:8c:48:20:41:d9:1d:4e:b9:79:ce:fb: 51:41:2d:9b:ff:03:d4:8b:b9:4f:ea:17:13:5f:62: 11:33:92:8e:ec:99:3e:a0:bd:d9:ff:01:6b:5c:ef: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8E:4D:AF:A9:85:1B:E6:7B:22:51:7A:FF:21:F5:78:26:21:26:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:36:f6:52:72:b6:6b:57:41:9b:1e:f3:4b:ce:88:b4:34:11: 5f:dd:f9:ba:0d:47:c2:ee:8c:45:7a:b1:9d:0e:a1:73:06:59: 3a:86:ad:44:4d:ec:98:9e:fe:72:a2:43:c4:a9:61:bd:2b:ad: 59:67:62:38:8e:46:0d:41:a1:c1:5b:d3:5f:69:c5:54:76:e1: 38:dc:02:af:c8:67:d7:c3:9e:4b:21:b7:40:91:a1:ea:f7:9c: 26:e0:9f:c9:ba:4a:5c:85:8c:81:33:e4:f7:ab:48:3f:99:fb: a7:c9:9f:d7:a6:1f:f8:6b:1f:04:eb:3c:5b:64:af:25:5e:ca: 2e:89:8f:7f:f0:b5:a4:ab:38:1b:d5:ec:1d:27:44:ee:30:70: 9f:7b:47:57:67:ba:ed:86:94:1c:3a:bd:5c:6b:91:1d:cd:91: 62:19:d9:9a:f4:e2:cd:dd:2d:77:7d:b9:57:33:2a:8d:6b:28: e9:b0:12:c6:9a:8f:64:69:24:c1:f0:0f:ec:41:1f:15:bf:ba: 65:92:d2:62:a3:29:1b:f8:25:b5:7c:fa:df:8d:d9:c9:d3:60: 3f:8a:3e:ae:ff:d1:00:ff:2b:4f:b5:8e:98:9b:1e:fb:d4:20: cb:ab:44:c4:e4:4d:85:14:08:c0:c0:b2:45:ff:94:a0:f9:7c: ca:b6:f0:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24Rfx7pFPuK3sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NThkNGI1OGQtZTJhNy00NGJmLThhM2ItNjNiM2VmYTU0MDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgQxwlEHC4Fu3Q/XHQ0OYp8+CjPy+LZ/Iv5R w/aNDYKZh7JZFIno3QR391H19AU8J9G8rEeUzjpG4VMWbYguzO3JoC6o4qWx/U4G eaF7CJqMz8OILkQyx6WxBs2FYQE4amVXQd2ew4gAi07vGs8rAUbUZxdcA6OtRKRM DEtLK7HASi6dQgl6U/OQeT7Yd6HamDSf9W7BpnCZ7ziQqcuZWLnE3fPo/co7XiO/ MSi5XhOch17AAKG4Rk176jQFJRg5vmxHKZfE+aMKq8nXaYxG8yRoSF6YjEggQdkd Trl5zvtRQS2b/wPUi7lP6hcTX2IRM5KO7Jk+oL3Z/wFrXO8InwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOOTa+phRvmeyJRev8h9XgmISbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDUxNWYxYTAtYjZmZi0z M2JlLWI2M2ItNWU3NDkzY2Q2NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH029lJytmtXQZse80vOiLQ0EV/d+boNR8LujEV6sZ0OoXMGWTqGrURN 7Jie/nKiQ8SpYb0rrVlnYjiORg1BocFb019pxVR24TjcAq/IZ9fDnksht0CRoer3 nCbgn8m6SlyFjIEz5PerSD+Z+6fJn9emH/hrHwTrPFtkryVeyi6Jj3/wtaSrOBvV 7B0nRO4wcJ97R1dnuu2GlBw6vVxrkR3NkWIZ2Zr04s3dLXd9uVczKo1rKOmwEsaa j2RpJMHwD+xBHxW/umWS0mKjKRv4JbV8+t+N2cnTYD+KPq7/0QD/K0+1jpibHvvU IMurRMTkTYUUCMDAskX/lKD5fMq28Nc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:20 2025 by rpki-client