$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63ce8947-b33c-387a-815f-520f18856d41.roa File: 63ce8947-b33c-387a-815f-520f18856d41.roa (raw, json) Hash identifier: q5FZcfNVMhqzJ0MVRBnJWeo0c8av1kn0T/D6LbHQ1HU= Subject key identifier: CC:C2:32:16:E0:8A:48:EF:6A:CE:2A:94:ED:7C:79:D0:CC:A7:07:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE6E3EF9894B8EF71B600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63ce8947-b33c-387a-815f-520f18856d41.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.94.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e6:e3:ef:98:94:b8:ef:71:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b6cc2962-fa49-4bab-9f3e-2a6b1cd24027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:18:62:e8:d4:c9:b2:04:78:34:25:40:14: ee:f4:ce:eb:0b:90:6f:05:4f:73:e3:32:93:37:4e: dd:14:8a:88:55:e1:35:0f:d2:ee:29:7c:36:ca:37: 10:9a:a2:47:90:1a:21:39:3b:b3:93:2a:10:4e:72: 5a:92:ef:54:e8:1f:e2:a7:60:0f:6b:aa:ec:75:03: e7:6c:ce:d4:82:7b:17:6f:ef:37:ce:3e:a5:55:fe: 95:47:c6:c5:64:88:48:5f:1b:1d:8e:be:d2:be:8c: 34:e0:30:76:f7:8e:93:ff:d9:7a:39:64:af:15:fc: 68:11:ac:4c:9d:d2:75:df:b1:cb:4b:1b:f4:e7:91: f0:f3:d3:fa:62:4b:83:e7:35:01:63:17:e6:5d:13: d1:5d:5b:15:e0:aa:c8:b1:e9:05:ef:b4:b1:03:0f: 5d:9b:d4:0c:76:ef:cd:23:40:03:3a:1a:49:5f:43: 0d:7c:2b:4e:04:61:a3:35:62:8b:d1:02:d6:03:b8: c7:f8:11:d4:b6:d0:ab:8f:96:0b:1b:a4:40:ee:5c: a2:b3:1d:8b:9b:cf:35:dc:52:7b:32:04:52:7a:62: 52:3d:ea:ba:3e:5f:ce:28:b3:c6:50:a1:69:5d:b1: 9a:11:d8:14:9e:28:10:24:94:29:b8:0f:54:a6:e1: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C2:32:16:E0:8A:48:EF:6A:CE:2A:94:ED:7C:79:D0:CC:A7:07:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63ce8947-b33c-387a-815f-520f18856d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b8:67:02:95:77:91:d8:8f:5a:d2:89:ae:6b:02:2e:7d:68: 58:c8:87:12:a9:1c:a1:f2:44:e4:56:0c:51:13:ac:c5:28:90: 60:00:25:68:d2:bf:2a:51:04:f7:2d:5d:f1:3b:41:64:a2:f4: 43:ce:15:6a:6f:c6:eb:6d:aa:f3:7d:aa:a8:55:61:c4:42:cc: 47:1f:0c:ee:6f:9e:a1:10:73:03:3d:4d:ae:fb:cb:91:33:a2: 0c:67:cf:e1:1a:fd:90:59:0a:bb:29:32:36:b9:24:6f:78:e9: 40:ef:60:27:bb:a6:37:26:71:18:2d:d7:17:9c:bd:89:06:13: 12:a3:ba:ee:9c:4e:02:40:c2:82:b7:cf:a8:39:4c:05:45:6a: 48:b3:24:72:fb:66:a4:a0:33:2f:3e:17:1d:35:45:07:db:f5: 88:2d:7b:5b:26:16:f5:49:f2:38:27:e0:ae:18:5e:c1:8e:1b: e0:9a:ff:85:cf:b1:20:36:b7:0e:e6:f8:8e:6f:9e:01:e2:dd: 35:55:6b:ef:53:32:13:d1:e5:ee:40:23:f8:3e:de:ec:6b:50: 05:25:5a:18:7e:d3:5e:9c:bc:52:60:62:a4:8b:25:d2:7b:2d: b4:22:b9:ec:c6:07:26:95:07:61:f9:d9:d0:92:19:f3:a8:8f: 11:9d:a6:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+bj75iUuO9xtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjZjYzI5NjItZmE0OS00YmFiLTlmM2UtMmE2YjFjZDI0MDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTsYYujUybIEeDQlQBTu9M7rC5BvBU9z4zKT N07dFIqIVeE1D9LuKXw2yjcQmqJHkBohOTuzkyoQTnJaku9U6B/ip2APa6rsdQPn bM7UgnsXb+83zj6lVf6VR8bFZIhIXxsdjr7Svow04DB2946T/9l6OWSvFfxoEaxM ndJ137HLSxv055Hw89P6YkuD5zUBYxfmXRPRXVsV4KrIsekF77SxAw9dm9QMdu/N I0ADOhpJX0MNfCtOBGGjNWKL0QLWA7jH+BHUttCrj5YLG6RA7lyisx2Lm8813FJ7 MgRSemJSPeq6Pl/OKLPGUKFpXbGaEdgUnigQJJQpuA9UpuG/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzCMhbgikjvas4qlO18edDMpwdLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjNjZTg5NDctYjMzYy0z ODdhLTgxNWYtNTIwZjE4ODU2ZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW4ZwKVd5HYj1rSia5rAi59aFjIhxKpHKHyRORWDFETrMUokGAAJWjS vypRBPctXfE7QWSi9EPOFWpvxuttqvN9qqhVYcRCzEcfDO5vnqEQcwM9Ta77y5Ez ogxnz+Ea/ZBZCrspMja5JG946UDvYCe7pjcmcRgt1xecvYkGExKjuu6cTgJAwoK3 z6g5TAVFakizJHL7ZqSgMy8+Fx01RQfb9Ygte1smFvVJ8jgn4K4YXsGOG+Ca/4XP sSA2tw7m+I5vngHi3TVVa+9TMhPR5e5AI/g+3uxrUAUlWhh+016cvFJgYqSLJdJ7 LbQiuezGByaVB2H52dCSGfOojxGdpsQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:44 2025 by rpki-client