$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa File: 5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa (raw, json) Hash identifier: 54c3IW21ep47coLeEea8r4Bmucao1UH4VYact3KNvLg= Subject key identifier: D2:94:48:C2:10:C3:A4:BD:B0:B7:CA:D2:BD:59:9B:E1:40:B7:9A:63 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBDF1E708A81EDB2CC5B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.151.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:df:1e:70:8a:81:ed:b2:cc:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b19e7522-5622-4a0d-98cc-a1b29ac3a16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:76:ed:85:f9:17:17:6a:5f:d5:f8:86:fc:a6: 2c:ce:8e:ce:5a:28:23:d6:ef:55:f0:eb:c5:86:60: f0:7e:17:79:6c:aa:90:85:2d:fd:12:b3:01:c6:da: 69:01:0a:e4:42:ad:b2:5c:33:a6:60:e8:a6:5f:45: 93:c5:bc:61:62:00:18:96:df:ec:0e:44:fd:06:00: 17:7a:ce:e7:46:bd:95:02:cd:d6:5c:6b:37:c8:f2: f9:94:47:e3:65:19:25:2b:09:6b:49:79:9f:1e:a3: 57:e8:49:4e:a8:5b:8a:d7:6d:4c:9e:a0:30:bd:31: 5c:d0:07:2c:26:20:75:a8:b9:a0:4b:cd:cf:ee:df: fa:f6:55:ef:74:30:bf:c4:30:b0:55:3e:c6:c9:99: 3f:da:1a:6c:36:63:35:5f:19:ff:ab:13:19:2c:5a: 6a:e4:54:90:8f:45:3a:08:38:16:2e:21:68:48:96: c7:4a:9a:cf:62:35:4a:a1:dc:8c:84:cc:8b:bb:a5: 1e:ba:4e:6f:8c:c3:69:c8:eb:25:f1:e2:5c:43:0c: e5:7c:35:e6:b7:af:29:93:8c:a2:0d:d4:2b:ad:68: 19:ad:ca:ab:f1:a7:12:29:23:30:75:cf:91:26:52: 00:ae:62:47:53:a4:b7:5e:53:b0:0d:d9:cd:2b:62: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:48:C2:10:C3:A4:BD:B0:B7:CA:D2:BD:59:9B:E1:40:B7:9A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.151.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a7:c9:3f:05:b8:d5:8d:cd:70:15:89:b6:43:89:27:75:e9: 56:95:76:f1:1d:35:0d:a6:2a:df:16:f1:bf:7e:e7:ce:66:25: 2e:e6:6d:aa:cf:05:9c:b6:e6:49:87:5f:f6:39:6e:f1:cb:a3: ff:65:60:33:f5:4d:9d:db:bc:5a:35:a8:77:e2:96:be:32:89: 13:0b:7a:81:15:7e:b8:db:fc:2f:f7:7b:72:b7:0a:a5:26:f3: ea:cb:b2:75:59:aa:46:ac:75:34:46:4a:5b:64:dd:a1:3c:80: 22:bd:4f:ab:4d:1b:b4:c2:50:3a:a8:e3:11:10:ae:52:20:95: a2:0e:5b:33:0e:ae:b2:24:93:89:1f:61:8f:f6:c6:5f:b6:13: 5a:4c:ad:06:c3:0d:14:4d:1a:1f:fb:c2:07:67:f1:d6:43:8c: 45:22:8e:b5:5f:a1:05:a1:d7:0e:4c:0e:23:e9:dc:5d:08:9a: 1c:80:a6:5f:6b:64:3f:23:3a:61:5c:cb:b6:7e:b1:bc:27:6e: 02:f5:f5:b4:94:27:16:f3:3d:0c:5b:23:2e:bc:d5:38:3a:1c: de:23:b4:36:1e:e9:07:69:5e:bf:aa:62:26:b5:77:e3:f3:b2: be:0e:3c:ae:7d:e8:bc:a3:81:cc:1d:bb:91:a1:44:ae:34:66: fd:86:d7:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG298ecIqB7bLMW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjE5ZTc1MjItNTYyMi00YTBkLTk4Y2MtYTFiMjlhYzNhMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnbthfkXF2pf1fiG/KYszo7OWigj1u9V8OvF hmDwfhd5bKqQhS39ErMBxtppAQrkQq2yXDOmYOimX0WTxbxhYgAYlt/sDkT9BgAX es7nRr2VAs3WXGs3yPL5lEfjZRklKwlrSXmfHqNX6ElOqFuK121MnqAwvTFc0Acs JiB1qLmgS83P7t/69lXvdDC/xDCwVT7GyZk/2hpsNmM1Xxn/qxMZLFpq5FSQj0U6 CDgWLiFoSJbHSprPYjVKodyMhMyLu6Ueuk5vjMNpyOsl8eJcQwzlfDXmt68pk4yi DdQrrWgZrcqr8acSKSMwdc+RJlIArmJHU6S3XlOwDdnNK2KE+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKUSMIQw6S9sLfK0r1Zm+FAt5pjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWM3YmZkMWUtZGRhMi0z MDdlLTg0ZjYtOWVlMzNjMjg1NzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAenyT8FuNWNzXAVibZDiSd16VaVdvEdNQ2mKt8W8b9+585mJS7mbarP BZy25kmHX/Y5bvHLo/9lYDP1TZ3bvFo1qHfilr4yiRMLeoEVfrjb/C/3e3K3CqUm 8+rLsnVZqkasdTRGSltk3aE8gCK9T6tNG7TCUDqo4xEQrlIglaIOWzMOrrIkk4kf YY/2xl+2E1pMrQbDDRRNGh/7wgdn8dZDjEUijrVfoQWh1w5MDiPp3F0ImhyApl9r ZD8jOmFcy7Z+sbwnbgL19bSUJxbzPQxbIy681Tg6HN4jtDYe6QdpXr+qYia1d+Pz sr4OPK596Lyjgcwdu5GhRK40Zv2G148= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:32 2025 by rpki-client