$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ac30a06-ba05-36f5-9f00-b87969f843a6.roa File: 4ac30a06-ba05-36f5-9f00-b87969f843a6.roa (raw, json) Hash identifier: 1OM9LZHXZs6GkTHjFLyBctB1ETZgEADnhqdLwInLRbU= Subject key identifier: 58:74:45:FD:7E:8D:AD:55:7E:29:61:22:8E:F9:18:79:0B:DC:48:8E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE73CD46FA4E73B8BCC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ac30a06-ba05-36f5-9f00-b87969f843a6.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.86.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e7:3c:d4:6f:a4:e7:3b:8b:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=e015c1c6-20c6-49bc-a20e-291bd8fc86b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:05:c1:db:bc:cd:be:fa:ad:3c:5f:ab:db:fd: 37:73:0d:b8:4a:61:e6:cf:41:89:df:15:b1:dd:b9: 02:6e:c6:51:69:4a:c9:f8:97:78:97:27:05:dc:7c: 3f:57:34:f6:23:a6:6d:bf:bc:5c:a9:47:bd:f2:cc: 8d:9b:d5:23:f6:3a:a2:bc:a8:d0:d3:eb:ad:43:37: 18:99:17:e5:e7:60:35:95:58:ef:bf:5f:e0:b0:7a: a1:c2:36:2f:7c:ec:c4:0f:13:82:e3:1c:d0:fd:da: b8:27:e0:c1:1c:32:a4:58:19:89:5c:23:52:2c:51: c4:a7:36:b5:11:cf:3a:87:18:c6:19:33:71:1b:8f: f6:83:5c:37:df:54:5e:6f:c8:c2:4d:5f:1f:8f:d2: 0a:08:1d:cf:0e:d7:4a:ff:20:2d:aa:e9:cd:cd:e6: 13:55:9f:4b:20:e9:89:9c:ab:8b:9c:e2:5c:1c:f5: bf:b8:a5:4f:0d:30:c0:3a:7d:2a:4d:84:99:66:08: 88:ac:58:bf:c8:18:ee:a0:b5:16:6a:c0:98:6c:23: 26:a9:72:86:3f:ba:a1:ed:07:0d:bd:14:34:12:30: de:0d:b4:d6:16:3a:f0:d1:3a:ba:c6:f2:15:1d:aa: 3b:34:59:ff:6d:de:17:a5:23:91:c9:8e:e4:41:f3: cc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:74:45:FD:7E:8D:AD:55:7E:29:61:22:8E:F9:18:79:0B:DC:48:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ac30a06-ba05-36f5-9f00-b87969f843a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:53:b4:67:d3:82:ab:33:62:d0:3c:e8:6e:d1:85:7d:5f:7a: 31:b2:8f:48:d2:76:69:f0:92:ed:38:74:15:53:6a:ae:bb:f4: 26:ee:80:cf:02:92:6b:fb:5e:73:b1:61:56:0f:1a:42:9d:90: b7:1c:17:a8:25:26:a4:40:80:bb:5a:7e:cb:ad:0d:7e:33:07: d1:33:16:21:77:d1:af:b7:26:1e:27:d1:a3:14:19:bd:97:99: c6:3d:d2:b2:c3:26:08:fe:60:11:fb:92:27:9d:af:72:91:04: 6f:53:84:cb:e3:7a:71:a2:33:b1:1e:92:ec:bf:aa:70:4d:2f: 43:90:41:0a:71:fd:77:96:f3:b3:cd:6b:62:8c:e5:13:2d:da: da:bf:8a:c8:f4:25:95:0d:68:c4:bc:33:81:9b:23:a3:06:1d: 54:4c:09:0f:e9:a0:eb:9c:d7:e5:21:c3:69:68:d2:72:3c:1a: d2:46:e7:15:d6:d5:18:7b:93:88:84:18:32:0e:d2:9c:d0:b8: 9f:61:14:56:05:0d:42:0d:89:de:7a:37:12:40:2a:57:a5:f6: 34:77:81:15:79:b7:eb:33:a7:07:5a:10:a6:15:d1:f5:2c:ec: 37:f9:20:d7:81:e4:a1:46:b2:60:35:a7:17:95:5e:37:18:ab: 84:10:a6:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+c81G+k5zuLzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZTAxNWMxYzYtMjBjNi00OWJjLWEyMGUtMjkxYmQ4ZmM4NmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wXB27zNvvqtPF+r2/03cw24SmHmz0GJ3xWx 3bkCbsZRaUrJ+Jd4lycF3Hw/VzT2I6Ztv7xcqUe98syNm9Uj9jqivKjQ0+utQzcY mRfl52A1lVjvv1/gsHqhwjYvfOzEDxOC4xzQ/dq4J+DBHDKkWBmJXCNSLFHEpza1 Ec86hxjGGTNxG4/2g1w331Reb8jCTV8fj9IKCB3PDtdK/yAtqunNzeYTVZ9LIOmJ nKuLnOJcHPW/uKVPDTDAOn0qTYSZZgiIrFi/yBjuoLUWasCYbCMmqXKGP7qh7QcN vRQ0EjDeDbTWFjrw0Tq6xvIVHao7NFn/bd4XpSORyY7kQfPMxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFh0Rf1+ja1VfilhIo75GHkL3EiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGFjMzBhMDYtYmEwNS0z NmY1LTlmMDAtYjg3OTY5Zjg0M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJTtGfTgqszYtA86G7RhX1fejGyj0jSdmnwku04dBVTaq679CbugM8C kmv7XnOxYVYPGkKdkLccF6glJqRAgLtafsutDX4zB9EzFiF30a+3Jh4n0aMUGb2X mcY90rLDJgj+YBH7kiedr3KRBG9ThMvjenGiM7Eekuy/qnBNL0OQQQpx/XeW87PN a2KM5RMt2tq/isj0JZUNaMS8M4GbI6MGHVRMCQ/poOuc1+Uhw2lo0nI8GtJG5xXW 1Rh7k4iEGDIO0pzQuJ9hFFYFDUINid56NxJAKlel9jR3gRV5t+szpwdaEKYV0fUs 7Df5INeB5KFGsmA1pxeVXjcYq4QQplY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:19:05 2025 by rpki-client