$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa File: 5d882b6f-6155-399f-a616-a5e871d1bf1a.roa (raw, json) Hash identifier: X44lhq1DocQslk/yz3lKZeD9IQiKKUZSpG3Wy6sT5qw= Subject key identifier: 32:9C:48:9A:F1:21:9E:20:25:7D:53:1E:4B:51:C7:8D:BF:85:86:77 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84122F020164F36B013655C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.119.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2f:02:01:64:f3:6b:01:36:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b1ab11d8-3a0d-40c5-b030-86806e612f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:a3:b6:37:41:ca:6a:c1:af:7b:83:ae:07: ca:6e:76:50:42:be:60:7a:6a:4e:41:fc:3f:84:34: 4c:20:75:d0:87:f9:51:eb:bd:5a:6a:7c:82:74:6b: 10:b0:61:7c:c1:bd:6f:53:01:6b:82:af:d0:bc:f4: 59:74:66:6e:bd:1a:85:0f:fa:e1:e8:74:32:93:43: bf:dc:41:2e:d0:83:ce:b9:7b:4b:cd:d8:ff:ac:e1: 50:fb:57:17:8f:74:05:dd:36:4e:9e:78:24:a0:24: fe:45:31:47:2b:5b:0f:5c:72:44:14:ad:08:ed:d2: 84:c6:30:03:6e:96:e9:d7:39:3f:df:ec:15:82:aa: 7f:da:e9:e6:4a:0a:2c:b1:67:cc:ff:76:ba:72:aa: 03:e8:ed:e2:c5:7f:98:04:87:de:14:29:0c:4c:c5: 96:da:16:55:2b:1a:0f:69:48:ad:6c:ca:98:28:ed: 66:9d:42:df:e5:ae:88:e6:5d:fc:9e:a0:2e:9a:b3: 7a:df:f2:a8:92:15:32:34:bd:c1:14:d5:11:09:84: b9:b3:82:f7:7c:dd:96:25:dd:cb:9e:92:91:bb:01: ba:48:1b:8d:f2:6f:3f:cd:37:6c:d4:1c:7f:d9:9d: 6e:bb:53:ed:c8:ff:59:54:81:ca:fa:68:fb:24:aa: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9C:48:9A:F1:21:9E:20:25:7D:53:1E:4B:51:C7:8D:BF:85:86:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ed:fb:da:66:57:d2:c6:64:57:49:73:aa:d2:1e:e9:4d:c0: 61:82:5e:e0:01:0d:56:54:7d:86:0b:32:58:01:2c:13:96:e9: 81:79:b5:79:ca:94:a8:17:5b:08:56:cd:d4:ae:f5:31:d4:86: 0e:c3:89:88:43:10:6a:e3:39:4d:79:d2:0d:16:98:da:95:25: 86:e8:6d:fa:76:ae:83:42:5b:2b:8c:a2:74:2d:9e:1c:5f:26: c2:04:14:3c:2b:ee:a7:6f:18:ed:b1:ee:a9:19:af:91:43:4e: 46:83:d9:d8:1c:e9:2b:ba:fb:d0:f6:54:d4:c0:aa:20:b8:90: a0:76:db:9d:00:c1:58:ce:23:de:45:d9:76:b0:8f:15:65:6a: 7b:49:20:df:20:d1:2e:1d:66:9f:31:54:91:04:46:6f:25:73: 44:40:d8:32:90:3c:45:69:b4:10:80:e6:de:aa:03:c0:a4:aa: e2:6f:81:b5:95:4b:56:6d:0a:6b:7a:dd:96:22:ce:b2:39:44: 26:2e:2a:65:e0:13:6a:b4:11:18:b1:f3:98:e0:4c:ba:d3:8c: 17:64:22:ff:0f:78:4d:68:f4:53:54:fc:49:75:8c:3c:2c:64: 8e:ba:74:98:cc:86:f1:32:d9:c1:a6:c4:b5:0e:fb:2f:bb:8e: 90:a8:76:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEi8CAWTzawE2VcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjFhYjExZDgtM2EwZC00MGM1LWIwMzAtODY4MDZlNjEyZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMGjtjdBymrBr3uDrgfKbnZQQr5gempOQfw/ hDRMIHXQh/lR671aanyCdGsQsGF8wb1vUwFrgq/QvPRZdGZuvRqFD/rh6HQyk0O/ 3EEu0IPOuXtLzdj/rOFQ+1cXj3QF3TZOnngkoCT+RTFHK1sPXHJEFK0I7dKExjAD bpbp1zk/3+wVgqp/2unmSgossWfM/3a6cqoD6O3ixX+YBIfeFCkMTMWW2hZVKxoP aUitbMqYKO1mnULf5a6I5l38nqAumrN63/KokhUyNL3BFNURCYS5s4L3fN2WJd3L npKRuwG6SBuN8m8/zTds1Bx/2Z1uu1PtyP9ZVIHK+mj7JKoILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKcSJrxIZ4gJX1THktRx42/hYZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWQ4ODJiNmYtNjE1NS0z OTlmLWE2MTYtYTVlODcxZDFiZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIncQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbt+9pmV9LGZFdJc6rSHulNwGGCXuABDVZUfYYLMlgBLBOW6YF5tXnK lKgXWwhWzdSu9THUhg7DiYhDEGrjOU150g0WmNqVJYbobfp2roNCWyuMonQtnhxf JsIEFDwr7qdvGO2x7qkZr5FDTkaD2dgc6Su6+9D2VNTAqiC4kKB2250AwVjOI95F 2XawjxVlantJIN8g0S4dZp8xVJEERm8lc0RA2DKQPEVptBCA5t6qA8CkquJvgbWV S1ZtCmt63ZYizrI5RCYuKmXgE2q0ERix85jgTLrTjBdkIv8PeE1o9FNU/El1jDws ZI66dJjMhvEy2cGmxLUO+y+7jpCodqU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:46 2025 by rpki-client