$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfd7f13-db37-3096-8408-3a4e1ce92a8c.roa File: 5dfd7f13-db37-3096-8408-3a4e1ce92a8c.roa (raw, json) Hash identifier: 6sfEZNGJsGVCgoTbTrG1Fr/3scgXgxbETuY2FfwykwI= Subject key identifier: 5F:D5:B0:7B:82:E9:BD:40:E8:1D:A9:7E:FA:B0:7B:12:1B:A2:C8:10 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC45814393C416BC60170 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfd7f13-db37-3096-8408-3a4e1ce92a8c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.123.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c4:58:14:39:3c:41:6b:c6:01:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=7f45c803-1b4e-4f97-84e1-aee5f39d80ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:28:16:7f:c6:93:06:ff:c5:d6:5d:f5:10: a0:22:7d:33:6a:70:2f:a9:0a:2e:6a:e9:d7:55:a1: 66:12:44:ed:0d:fc:15:9d:82:05:7f:d9:0c:80:f5: 3b:6b:cf:f3:77:d5:ee:b0:6a:cf:77:ad:52:db:a6: 8b:8a:21:5c:a5:c2:eb:ee:51:bf:b7:56:5d:6e:49: 86:50:94:7b:40:50:56:25:8a:0c:ab:87:2d:e0:55: 3b:f5:8b:7e:a8:47:c2:38:b2:03:8d:5f:99:95:3c: 5d:78:85:e2:01:16:8d:e4:cf:a1:b6:78:5d:27:7b: ee:0f:68:11:b4:57:4b:86:75:48:48:9d:5e:ca:a1: 09:0f:ad:13:8b:51:cd:b4:15:4d:d0:4f:b4:50:35: 1d:d5:cb:bd:ac:d5:22:c1:2b:c3:b5:0d:fa:af:4b: 02:9e:7d:0e:b3:8a:5b:9e:28:96:bc:fa:ac:66:68: 08:c3:99:d8:5f:81:8b:52:f8:c0:72:12:c5:3f:28: d5:1c:59:06:ff:db:7f:fa:70:ae:8f:c6:6a:25:e0: 3d:78:86:ca:1b:0c:c8:af:1b:8b:4a:02:c2:df:7a: d7:85:71:c2:68:a9:bd:5d:e8:1f:ce:68:99:79:d1: a6:da:89:af:f7:88:fe:0f:81:b5:38:4d:87:9e:54: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D5:B0:7B:82:E9:BD:40:E8:1D:A9:7E:FA:B0:7B:12:1B:A2:C8:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfd7f13-db37-3096-8408-3a4e1ce92a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a4:43:0c:68:99:3d:51:40:f2:d4:38:bb:cc:e6:c8:56:5e: ad:da:09:2e:54:16:57:b1:97:f7:2b:b0:b1:cc:c1:0a:e2:e8: 7d:6a:6d:a8:38:63:5d:b7:b8:fc:51:f4:de:e5:cf:3d:b8:1e: a2:b9:16:4c:2f:08:49:9f:2e:94:2a:e3:1b:ad:0a:04:16:47: b0:08:04:0c:e1:36:c8:35:6a:49:6a:cc:59:de:2f:e7:45:c0: 20:0a:93:63:c6:2b:93:d2:60:d6:fd:c4:4b:ad:44:3f:a8:57: 2f:57:4b:20:ac:36:20:81:73:7f:75:99:9d:a6:1e:29:f7:b5: b5:28:78:84:d3:6b:f3:42:be:58:e6:d9:16:7f:00:07:19:5d: 7b:ae:05:9c:45:f4:d9:ea:c9:99:93:60:c7:dd:68:4b:8e:e1: 17:08:a6:17:af:c5:3e:2b:65:84:b1:95:78:d5:91:e5:72:14: 5f:ae:7d:f7:4f:88:62:2e:7e:82:97:ce:e4:6f:44:ad:b7:a4: 9a:26:98:19:dc:1b:ae:83:e8:e6:e1:45:eb:e8:4a:f5:69:2e: 39:7a:6d:eb:a4:1f:51:45:86:b4:ef:b7:56:fd:4b:7b:9e:10: 76:62:5f:53:e5:e0:63:f6:e9:14:70:7e:b2:f7:98:58:e6:72: 72:4f:f6:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28RYFDk8QWvGAXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk N2Y0NWM4MDMtMWI0ZS00Zjk3LTg0ZTEtYWVlNWYzOWQ4MGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/soFn/Gkwb/xdZd9RCgIn0zanAvqQouaunX VaFmEkTtDfwVnYIFf9kMgPU7a8/zd9XusGrPd61S26aLiiFcpcLr7lG/t1ZdbkmG UJR7QFBWJYoMq4ct4FU79Yt+qEfCOLIDjV+ZlTxdeIXiARaN5M+htnhdJ3vuD2gR tFdLhnVISJ1eyqEJD60Ti1HNtBVN0E+0UDUd1cu9rNUiwSvDtQ36r0sCnn0Os4pb niiWvPqsZmgIw5nYX4GLUvjAchLFPyjVHFkG/9t/+nCuj8ZqJeA9eIbKGwzIrxuL SgLC33rXhXHCaKm9XegfzmiZedGm2omv94j+D4G1OE2HnlRBvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/VsHuC6b1A6B2pfvqwexIbosgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRmZDdmMTMtZGIzNy0z MDk2LTg0MDgtM2E0ZTFjZTkyYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIntgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADikQwxomT1RQPLUOLvM5shWXq3aCS5UFlexl/crsLHMwQri6H1qbag4 Y123uPxR9N7lzz24HqK5FkwvCEmfLpQq4xutCgQWR7AIBAzhNsg1aklqzFneL+dF wCAKk2PGK5PSYNb9xEutRD+oVy9XSyCsNiCBc391mZ2mHin3tbUoeITTa/NCvljm 2RZ/AAcZXXuuBZxF9NnqyZmTYMfdaEuO4RcIphevxT4rZYSxlXjVkeVyFF+uffdP iGIufoKXzuRvRK23pJommBncG66D6ObhRevoSvVpLjl6beukH1FFhrTvt1b9S3ue EHZiX1Pl4GP26RRwfrL3mFjmcnJP9qM= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:14 2025 by rpki-client