$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48ac1b20-ea2f-38cd-bf15-91685f2c86c6.roa File: 48ac1b20-ea2f-38cd-bf15-91685f2c86c6.roa (raw, json) Hash identifier: n/roa9d6bJPh0uTGo7UbfCXk+QteeFdNmWG6HPXiD2o= Subject key identifier: AD:0D:B3:4E:9B:AD:D3:12:7E:D2:4A:C5:2A:EC:6E:40:7D:43:78:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9624862AF897C89EED60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48ac1b20-ea2f-38cd-bf15-91685f2c86c6.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.128.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:96:24:86:2a:f8:97:c8:9e:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=163d71a5-a68d-4a3e-bb58-cf44d4c309b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:98:a6:8c:29:d5:fb:d7:74:ac:f8:92:ba:4e: cf:8b:13:13:a9:dd:0b:a2:c4:bd:38:29:92:05:a5: e0:6a:39:3d:23:35:81:e8:d2:d0:e1:05:c1:74:bd: 6f:4d:d3:c1:00:76:09:e5:65:b7:76:44:c3:13:56: 9a:9c:92:e6:49:b0:ec:fc:53:38:4d:7d:cc:a6:0e: 92:2a:c5:40:55:d8:50:ef:9d:0a:91:8d:c6:3e:08: e8:42:dc:6c:4f:7c:35:67:4a:e4:a1:73:1c:80:1e: 72:ed:95:ef:f3:96:51:d8:ae:3d:e7:9a:8e:c7:4b: ff:9f:f7:9e:e8:7f:74:94:94:77:e2:b7:95:4d:df: 51:d4:92:c7:d5:f3:f4:24:30:43:ac:e1:10:ff:22: 29:2e:7c:52:73:5e:53:35:dd:9e:c9:28:2c:44:35: 5f:27:b2:41:83:cb:87:38:77:45:63:6e:e6:d0:e2: 7c:f2:71:2a:3c:e9:d0:d1:1d:a6:1b:2e:b8:26:01: ad:d9:e6:da:24:88:bd:76:12:9f:12:cf:7a:33:09: b7:fd:d7:e3:d7:78:c8:09:48:b0:4e:72:ea:09:04: bb:0a:8b:1c:0c:58:07:05:a4:f5:b5:0a:13:97:f0: 8e:7a:6a:5c:45:c6:15:a3:af:70:d7:02:d1:98:7b: 9e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0D:B3:4E:9B:AD:D3:12:7E:D2:4A:C5:2A:EC:6E:40:7D:43:78:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48ac1b20-ea2f-38cd-bf15-91685f2c86c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:cf:de:d9:ce:6e:77:44:a2:51:ae:56:fe:15:f9:ee:89:0a: e8:d9:ec:66:f9:29:2c:e0:c4:c4:37:0a:01:9c:27:9f:65:7a: e2:45:0d:26:84:79:72:69:b4:42:c9:78:97:cf:36:1a:a6:94: a8:59:51:1c:27:90:15:43:e9:19:31:e9:3a:8b:e0:ad:74:73: 4b:17:71:f7:48:66:19:46:74:df:c8:c7:b1:23:e5:79:11:5b: 8b:5a:b1:58:43:aa:e5:25:e3:2b:c3:5d:ca:31:34:36:e7:15: 98:17:f6:02:8c:7f:50:e3:8f:f4:bd:48:23:4f:4f:7e:23:3a: b7:87:7a:35:aa:05:25:d3:6c:8e:51:fa:5d:d2:6e:4b:da:52: 44:d4:86:18:3b:7c:b0:30:e9:b0:7e:38:67:72:c5:0a:ab:c6: 64:48:e9:04:19:aa:43:c8:2b:6b:ec:b3:d4:5b:b1:10:b8:eb: 0b:ba:73:75:44:93:70:08:60:de:ba:32:48:24:e1:61:e7:cd: 97:a2:c6:39:b3:47:46:56:8f:92:f9:45:29:71:2e:3c:45:63: 13:eb:92:e8:5c:55:ed:ed:26:30:e4:32:b8:28:d7:17:28:c6: 6a:6e:d5:e7:bc:17:59:7b:e5:65:9c:89:bf:cb:f7:3f:ea:90: 88:46:a8:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25Ykhir4l8ie7WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTYzZDcxYTUtYTY4ZC00YTNlLWJiNTgtY2Y0NGQ0YzMwOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipimjCnV+9d0rPiSuk7PixMTqd0LosS9OCmS BaXgajk9IzWB6NLQ4QXBdL1vTdPBAHYJ5WW3dkTDE1aanJLmSbDs/FM4TX3Mpg6S KsVAVdhQ750KkY3GPgjoQtxsT3w1Z0rkoXMcgB5y7ZXv85ZR2K4955qOx0v/n/ee 6H90lJR34reVTd9R1JLH1fP0JDBDrOEQ/yIpLnxSc15TNd2eySgsRDVfJ7JBg8uH OHdFY27m0OJ88nEqPOnQ0R2mGy64JgGt2ebaJIi9dhKfEs96Mwm3/dfj13jICUiw TnLqCQS7CoscDFgHBaT1tQoTl/COempcRcYVo69w1wLRmHueuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0Ns06brdMSftJKxSrsbkB9Q3jJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDhhYzFiMjAtZWEyZi0z OGNkLWJmMTUtOTE2ODVmMmM4NmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIoCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXP3tnObndEolGuVv4V+e6JCujZ7Gb5KSzgxMQ3CgGcJ59leuJFDSaE eXJptELJeJfPNhqmlKhZURwnkBVD6Rkx6TqL4K10c0sXcfdIZhlGdN/Ix7Ej5XkR W4tasVhDquUl4yvDXcoxNDbnFZgX9gKMf1Djj/S9SCNPT34jOreHejWqBSXTbI5R +l3SbkvaUkTUhhg7fLAw6bB+OGdyxQqrxmRI6QQZqkPIK2vss9RbsRC46wu6c3VE k3AIYN66Mkgk4WHnzZeixjmzR0ZWj5L5RSlxLjxFYxPrkuhcVe3tJjDkMrgo1xco xmpu1ee8F1l75WWcib/L9z/qkIhGqF8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:51 2025 by rpki-client