$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d6da430-9a57-3d3b-aad2-cd94bd1c1c4d.roa File: 5d6da430-9a57-3d3b-aad2-cd94bd1c1c4d.roa (raw, json) Hash identifier: mqbCRFo1hSPdYNJwcfrozQjdW5VVhNfpEl7CrcFJIXs= Subject key identifier: CF:ED:BF:9C:69:28:83:F5:4F:E2:DC:BA:87:AC:40:B7:4F:26:54:30 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84117BFEF336FF4EFC5EA340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d6da430-9a57-3d3b-aad2-cd94bd1c1c4d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.121.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7b:fe:f3:36:ff:4e:fc:5e:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=29f41ab2-aebe-429f-8fe6-a39812d7c7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:20:2b:7e:40:4c:ce:c8:bd:6b:21:03:5a:de: a0:44:0e:ec:dd:14:2c:cf:74:fe:96:46:fd:88:52: 86:7c:ea:3f:14:2d:93:5d:2e:72:c6:ff:cc:0d:84: df:8e:f4:f4:b9:d3:3c:fd:28:6f:60:bb:e7:1f:86: ff:91:3f:f7:5c:be:09:eb:8a:f1:8d:c5:64:97:c0: 2d:80:89:78:b2:ab:51:e3:15:17:f9:10:c8:e0:13: 0b:af:65:b3:25:d8:e5:3b:fc:e1:53:d5:cb:46:74: 9d:b0:b3:53:10:9d:ba:a4:bd:f8:15:9a:5d:6a:de: 2b:b8:9e:5c:2b:f2:0a:36:d2:c6:0d:ab:5b:fd:80: e5:44:f7:ae:45:2e:23:6b:af:32:c7:08:68:d7:9a: 88:48:02:da:4d:53:92:02:98:4f:e5:4a:46:d1:a0: 73:ee:c4:ec:99:66:b2:69:d4:ab:d4:37:69:e9:db: 71:f2:7e:a7:97:de:43:d4:2f:a8:af:bf:20:f7:23: 51:87:1a:31:ac:8f:7c:e4:db:70:79:11:a8:8b:26: 65:bd:2c:57:42:39:ae:33:80:6c:2f:9a:1a:dc:91: 44:fc:1d:6b:92:3f:ff:83:94:98:0e:45:07:02:bb: 36:50:5a:ae:cc:39:85:cd:32:f6:d7:e8:f4:a4:61: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:ED:BF:9C:69:28:83:F5:4F:E2:DC:BA:87:AC:40:B7:4F:26:54:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d6da430-9a57-3d3b-aad2-cd94bd1c1c4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1d:3f:42:04:7c:75:6d:5d:d4:64:f4:4f:b3:54:1b:2a:5d: aa:bb:03:04:4b:00:41:10:18:0d:2d:f9:86:85:ac:69:20:65: 80:48:5f:9a:ef:71:d6:5e:f0:cd:67:d7:57:49:5c:b3:d5:15: eb:92:1d:e9:98:1e:c1:ef:ad:ee:67:dd:74:96:5d:1a:9e:9a: f2:83:47:12:50:cf:29:b2:30:e5:a3:ef:52:4e:2b:49:3f:26: a3:70:bd:75:10:7f:48:1c:43:fc:a4:3b:be:df:96:8b:97:c4: 8b:93:64:c3:e8:d3:19:fd:4b:f2:93:b7:56:ec:81:e4:10:e3: fc:c8:cb:57:6e:73:6a:63:53:ec:90:90:ab:9e:c2:b6:db:c9: 1c:eb:f6:ec:45:16:3c:b1:ff:20:9c:cd:65:f9:8d:e0:2c:de: e1:e9:8e:b1:a5:d8:f1:d1:c7:7d:02:10:33:7c:fd:68:2c:26: 2a:61:4f:15:97:38:c4:e3:84:ba:44:05:cb:49:f2:3a:ee:ca: a1:31:18:85:e6:0e:14:82:d2:74:b1:05:d6:a3:68:4a:de:3f: 53:4e:3b:83:c1:b2:94:31:ee:87:27:f8:1b:93:6e:cb:d8:9b: 3c:87:62:01:0a:1b:fa:37:af:4b:53:57:8b:64:10:f8:bc:7a: d3:4e:c1:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXv+8zb/Tvxeo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjlmNDFhYjItYWViZS00MjlmLThmZTYtYTM5ODEyZDdjN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiArfkBMzsi9ayEDWt6gRA7s3RQsz3T+lkb9 iFKGfOo/FC2TXS5yxv/MDYTfjvT0udM8/ShvYLvnH4b/kT/3XL4J64rxjcVkl8At gIl4sqtR4xUX+RDI4BMLr2WzJdjlO/zhU9XLRnSdsLNTEJ26pL34FZpdat4ruJ5c K/IKNtLGDatb/YDlRPeuRS4ja68yxwho15qISALaTVOSAphP5UpG0aBz7sTsmWay adSr1Ddp6dtx8n6nl95D1C+or78g9yNRhxoxrI985NtweRGoiyZlvSxXQjmuM4Bs L5oa3JFE/B1rkj//g5SYDkUHArs2UFquzDmFzTL21+j0pGHJ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/tv5xpKIP1T+LcuoesQLdPJlQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWQ2ZGE0MzAtOWE1Ny0z ZDNiLWFhZDItY2Q5NGJkMWMxYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4dP0IEfHVtXdRk9E+zVBsqXaq7AwRLAEEQGA0t+YaFrGkgZYBIX5rv cdZe8M1n11dJXLPVFeuSHemYHsHvre5n3XSWXRqemvKDRxJQzymyMOWj71JOK0k/ JqNwvXUQf0gcQ/ykO77flouXxIuTZMPo0xn9S/KTt1bsgeQQ4/zIy1duc2pjU+yQ kKuewrbbyRzr9uxFFjyx/yCczWX5jeAs3uHpjrGl2PHRx30CEDN8/WgsJiphTxWX OMTjhLpEBctJ8jruyqExGIXmDhSC0nSxBdajaEreP1NOO4PBspQx7ocn+BuTbsvY mzyHYgEKG/o3r0tTV4tkEPi8etNOwdU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:23 2025 by rpki-client