$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5af5551f-6feb-3cb3-ae0e-2cfc158639d7.roa File: 5af5551f-6feb-3cb3-ae0e-2cfc158639d7.roa (raw, json) Hash identifier: WbUH/T23QgkcgUNSW717xqV7hL6K8vHRKLXxAguVbYI= Subject key identifier: 46:E7:BF:68:60:EE:13:7F:2D:1E:B9:46:60:D9:B6:47:E3:AD:31:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC0462F2E00067D112540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5af5551f-6feb-3cb3-ae0e-2cfc158639d7.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.97.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c0:46:2f:2e:00:06:7d:11:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c7c1a55f-f48d-4ba4-b3c6-742bdf28d7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:a0:45:07:26:ea:b4:1f:06:86:85:17:ee: fd:44:8d:16:2a:e5:68:96:1f:3d:8d:cb:22:d5:88: 77:a8:04:73:84:59:dd:23:93:0c:04:3d:d6:29:0e: ce:f1:2a:13:da:fe:b6:eb:59:c5:bd:68:5c:81:91: 72:65:10:52:57:d8:aa:57:6e:d1:81:da:8c:93:2a: ac:cf:ae:65:27:3d:63:b4:ca:5a:86:c1:5e:c6:35: 8e:e9:16:72:2f:f9:ff:24:cf:db:a6:27:ca:2a:16: 22:57:69:b5:d1:bb:5b:19:7b:bd:3c:e3:03:cd:7c: 7c:c8:60:03:bd:e5:19:41:2c:4e:ec:3f:bd:e0:bb: 80:ca:4f:0f:3a:0a:1d:80:ac:be:b5:f1:17:0d:88: b6:c6:f2:8a:bc:ae:7d:dc:58:ed:c2:64:3b:ba:5d: 1a:a9:f9:d5:fc:c4:93:cc:44:3d:1a:fe:7e:ca:9d: 4f:4c:6a:4d:68:e3:70:97:39:b6:86:85:c7:b0:f3: 27:be:48:c3:fa:2c:b0:28:66:bb:76:df:b2:a7:40: 55:54:c9:1b:0d:ee:51:e3:2f:1d:19:73:4c:70:4b: f0:db:87:67:6c:8c:f9:af:a0:6a:78:9c:6e:eb:5c: 5c:2f:6c:f1:08:54:15:85:b9:5c:dc:d3:00:ce:b8: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E7:BF:68:60:EE:13:7F:2D:1E:B9:46:60:D9:B6:47:E3:AD:31:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5af5551f-6feb-3cb3-ae0e-2cfc158639d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.97.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ec:1f:04:26:be:cc:6b:5b:cc:41:fe:1a:6d:bd:d9:d1:0e: d1:f1:88:85:51:19:f4:1c:6f:e2:56:57:06:9b:d4:fe:7c:a8: f6:2f:39:a9:5a:69:f7:78:48:2f:f4:bc:90:b7:6c:9f:76:76: 89:08:f9:62:07:c1:94:33:c3:64:28:c5:75:ce:e1:9a:4d:e5: 21:43:a0:fc:06:ce:df:b2:7a:0d:21:3e:d9:fa:28:50:12:50: 08:9f:38:16:b0:e8:ac:8e:ec:23:93:ad:f3:a4:ba:5c:e5:9a: 69:e5:34:9a:6e:a3:56:41:0d:1f:d3:01:e4:73:d3:b1:aa:4e: 3c:a1:e5:9e:3f:a8:35:a9:02:f5:ad:c3:ef:aa:b4:fc:07:e6: d8:60:2d:a7:93:11:e6:4d:99:d5:75:c4:11:ee:c6:61:c3:22: 4a:f0:ce:98:0d:c9:c0:51:80:f4:9f:7b:5f:9a:5e:79:e8:4c: 3d:c4:29:18:3c:46:8f:bb:e8:b8:38:af:df:e0:ec:bb:43:07: cc:fa:3a:41:89:58:b6:60:11:4e:e4:36:6c:c9:27:dd:5b:e3: b5:58:98:f8:7b:15:e6:f6:ac:dd:9d:6a:df:38:a2:96:ad:02: 4c:b5:2d:55:8c:68:ae:ac:54:1c:de:62:6e:2e:d5:85:58:cd: 96:1c:c8:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28BGLy4ABn0RJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzdjMWE1NWYtZjQ4ZC00YmE0LWIzYzYtNzQyYmRmMjhkN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH6gRQcm6rQfBoaFF+79RI0WKuVolh89jcsi 1Yh3qARzhFndI5MMBD3WKQ7O8SoT2v6261nFvWhcgZFyZRBSV9iqV27RgdqMkyqs z65lJz1jtMpahsFexjWO6RZyL/n/JM/bpifKKhYiV2m10btbGXu9POMDzXx8yGAD veUZQSxO7D+94LuAyk8POgodgKy+tfEXDYi2xvKKvK593FjtwmQ7ul0aqfnV/MST zEQ9Gv5+yp1PTGpNaONwlzm2hoXHsPMnvkjD+iywKGa7dt+yp0BVVMkbDe5R4y8d GXNMcEvw24dnbIz5r6BqeJxu61xcL2zxCFQVhblc3NMAzrgVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbnv2hg7hN/LR65RmDZtkfjrTHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWFmNTU1MWYtNmZlYi0z Y2IzLWFlMGUtMmNmYzE1ODYzOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzsHwQmvsxrW8xB/hptvdnRDtHxiIVRGfQcb+JWVwab1P58qPYvOala afd4SC/0vJC3bJ92dokI+WIHwZQzw2QoxXXO4ZpN5SFDoPwGzt+yeg0hPtn6KFAS UAifOBaw6KyO7COTrfOkulzlmmnlNJpuo1ZBDR/TAeRz07GqTjyh5Z4/qDWpAvWt w++qtPwH5thgLaeTEeZNmdV1xBHuxmHDIkrwzpgNycBRgPSfe1+aXnnoTD3EKRg8 Ro+76Lg4r9/g7LtDB8z6OkGJWLZgEU7kNmzJJ91b47VYmPh7Feb2rN2dat84opat Aky1LVWMaK6sVBzeYm4u1YVYzZYcyN0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:03 2025 by rpki-client