$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e9e927a-bf50-331f-a8b3-baa5c3e6b967.roa File: 5e9e927a-bf50-331f-a8b3-baa5c3e6b967.roa (raw, json) Hash identifier: QQp9BtsVZTbIi9XrNxmAAhPfnZJB4YM+ZDjAvIp2Skg= Subject key identifier: EA:BF:B2:E0:B8:43:19:F5:63:5C:E5:34:9A:9E:2D:97:48:C3:08:04 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEE522760B55ED11B63E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e9e927a-bf50-331f-a8b3-baa5c3e6b967.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.82.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ee:52:27:60:b5:5e:d1:1b:63:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1cc04c0c-6b68-49d2-bdab-e6e1e9d4331f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:5d:73:60:2b:fd:c2:66:d8:46:e6:24:ad: ea:d3:07:d7:75:ba:14:2f:ef:a1:04:61:18:54:9d: f0:92:ad:a7:e3:9a:f7:7f:df:eb:60:f4:56:f6:47: ec:0b:3b:9e:af:92:f8:2d:ee:0c:9d:51:94:59:6b: 51:ee:8b:a3:51:d1:36:46:ee:0c:f7:8e:1a:37:15: 61:8e:a0:54:9d:55:8c:68:a8:af:c4:2d:50:d0:e5: 0f:7e:75:82:d7:85:74:be:4b:c9:26:59:5f:f6:46: b3:3d:69:c4:52:9b:9d:14:3b:04:bf:6c:75:99:fc: 3a:2d:1e:9e:2b:83:9d:8c:72:f1:2f:da:1a:d8:ca: 6c:d1:4e:14:51:12:3f:7a:06:fe:96:d6:8c:4a:84: 31:1a:fc:c8:6c:dd:8c:c2:02:90:13:52:1c:9f:01: 9b:97:e1:a0:d2:a8:bd:0b:d3:1d:75:f8:f2:34:b4: ce:d2:22:aa:a0:54:27:8e:32:06:e5:b6:fe:e3:01: 60:bd:02:6d:69:fb:1b:3a:1a:3f:29:95:52:98:51: e5:73:80:06:31:05:0f:11:f3:09:a9:b8:65:cb:44: 84:ca:0b:47:1b:45:95:d9:45:cf:4b:cc:4a:83:35: bd:15:c8:08:46:e6:da:c7:52:e3:43:1d:d9:b0:4c: 7b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BF:B2:E0:B8:43:19:F5:63:5C:E5:34:9A:9E:2D:97:48:C3:08:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e9e927a-bf50-331f-a8b3-baa5c3e6b967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.82.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d8:2e:d4:08:10:c0:1a:bf:fa:b1:42:14:8f:89:9f:98:34: 8e:ea:08:6f:fd:e2:bd:f2:47:e2:ee:db:d3:2e:f0:00:8d:3e: 24:8b:4c:54:3d:2d:09:45:34:83:81:6d:4f:8b:d9:f6:41:cf: b2:f2:27:9d:b4:0a:a7:86:d8:35:48:fa:0f:e5:a0:2a:41:0b: a9:af:56:ef:ea:cf:88:63:e0:3d:f5:33:bd:c5:7b:87:d2:f3: 7a:d2:bd:22:d9:50:31:73:77:2a:ca:60:c9:45:1c:9a:03:68: c7:b0:94:5b:cc:e5:bf:71:c0:c1:32:94:73:33:63:e9:aa:5a: a3:72:06:9f:70:68:f7:3b:26:95:ce:f4:98:65:01:2f:8a:7a: ba:ee:ae:d2:9b:49:94:53:4f:33:cd:11:e0:f8:d3:11:e5:7b: 41:54:e1:e4:67:5b:93:a7:93:32:5d:d9:7a:c1:a1:62:5c:fa: e6:53:3f:58:b6:37:2a:55:2a:3e:3a:48:a6:56:be:5b:b5:3a: 26:30:7c:ef:6f:64:f4:1a:70:58:61:22:52:8f:87:a1:79:72: 5d:3d:b0:89:b6:ab:01:af:ca:fc:46:68:80:fd:bd:12:38:ce: 61:b4:6e:95:ea:73:0e:28:e0:a8:e3:42:f6:ba:dc:be:cf:23: 9f:d1:7a:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+5SJ2C1XtEbY+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MWNjMDRjMGMtNmI2OC00OWQyLWJkYWItZTZlMWU5ZDQzMzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra1dc2Ar/cJm2EbmJK3q0wfXdboUL++hBGEY VJ3wkq2n45r3f9/rYPRW9kfsCzuer5L4Le4MnVGUWWtR7oujUdE2Ru4M944aNxVh jqBUnVWMaKivxC1Q0OUPfnWC14V0vkvJJllf9kazPWnEUpudFDsEv2x1mfw6LR6e K4OdjHLxL9oa2Mps0U4UURI/egb+ltaMSoQxGvzIbN2MwgKQE1IcnwGbl+Gg0qi9 C9MddfjyNLTO0iKqoFQnjjIG5bb+4wFgvQJtafsbOho/KZVSmFHlc4AGMQUPEfMJ qbhly0SEygtHG0WV2UXPS8xKgzW9FcgIRubax1LjQx3ZsEx7PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOq/suC4Qxn1Y1zlNJqeLZdIwwgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWU5ZTkyN2EtYmY1MC0z MzFmLWE4YjMtYmFhNWMzZTZiOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArYLtQIEMAav/qxQhSPiZ+YNI7qCG/94r3yR+Lu29Mu8ACNPiSLTFQ9 LQlFNIOBbU+L2fZBz7LyJ520CqeG2DVI+g/loCpBC6mvVu/qz4hj4D31M73Fe4fS 83rSvSLZUDFzdyrKYMlFHJoDaMewlFvM5b9xwMEylHMzY+mqWqNyBp9waPc7JpXO 9JhlAS+KerrurtKbSZRTTzPNEeD40xHle0FU4eRnW5OnkzJd2XrBoWJc+uZTP1i2 NypVKj46SKZWvlu1OiYwfO9vZPQacFhhIlKPh6F5cl09sIm2qwGvyvxGaID9vRI4 zmG0bpXqcw4o4KjjQva63L7PI5/Rens= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:54 2025 by rpki-client