$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66a25f6c-f81c-36a0-b6a1-667a358896b2.roa File: 66a25f6c-f81c-36a0-b6a1-667a358896b2.roa (raw, json) Hash identifier: pdXT2ZN0737IWzy3r4t7mNxxQ6ixxkP+yg90KAGetRw= Subject key identifier: B2:46:C9:32:E7:1A:53:8E:74:A1:09:19:DF:A2:9C:D2:FE:66:4F:BC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF0D9F767B17396547A60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66a25f6c-f81c-36a0-b6a1-667a358896b2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.147.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f0:d9:f7:67:b1:73:96:54:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=5b7786f2-b4b9-4005-9380-d2cf7937f575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:ab:62:87:a1:5f:2d:ab:c2:67:1e:54:41: 91:46:e0:d7:de:28:5b:79:98:ed:b8:ef:ff:62:9c: 33:13:a5:f5:07:e5:23:45:4a:95:1e:92:31:16:ab: 12:db:d6:f7:cb:26:0d:8c:10:24:eb:1f:b4:45:b3: ef:55:5d:d1:ab:5e:f2:99:20:17:80:e0:2e:d7:4f: 06:f9:71:ef:2d:09:3d:c3:b8:68:87:f8:a5:8b:64: 4b:2a:9b:cd:99:46:55:f5:48:cf:13:7d:a0:a0:6e: 90:86:e2:0f:2a:5c:d2:73:af:3b:f5:b6:c9:0a:f4: 42:02:83:5f:80:20:1a:e8:ec:df:3e:04:44:24:3e: 65:a6:2d:18:ea:02:cb:ff:de:0e:1c:52:38:bf:4a: d4:1a:81:7b:8b:1a:b7:8f:1c:68:70:73:54:7a:0b: fa:f5:94:30:62:21:74:02:7f:24:58:13:68:6a:fd: 08:be:10:cc:4a:a0:ad:41:ec:ed:62:65:d8:47:d1: ca:ec:19:88:35:dc:e7:d1:49:b6:e0:7f:6e:f6:04: 43:6b:4c:5d:bb:e8:ef:73:44:58:ad:82:7d:74:d5: 36:a2:9b:1c:4a:25:f9:09:bf:b6:c6:ac:8e:20:8f: e5:bd:5f:57:35:e1:14:7e:7d:1e:33:9c:94:54:5f: 51:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:46:C9:32:E7:1A:53:8E:74:A1:09:19:DF:A2:9C:D2:FE:66:4F:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66a25f6c-f81c-36a0-b6a1-667a358896b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:46:a3:36:a8:02:cc:0c:8d:e1:7a:49:d5:16:c9:26:b0:39: 9d:15:47:13:a9:2c:86:6a:36:cb:32:02:f4:3a:4d:9a:fe:a5: 76:65:90:6a:e9:20:8f:64:71:f7:7f:40:3b:d6:ce:12:82:23: e2:f4:e2:28:0d:02:93:1f:a4:b5:8c:3e:21:d5:19:91:32:d1: 49:4b:8d:61:66:53:88:1f:cd:ca:e0:25:d4:09:91:c9:d6:44: 8e:7f:a5:ea:44:c3:3d:57:45:55:07:d3:0b:91:86:67:fc:1e: 44:98:ea:5c:b3:d3:0b:a0:00:2d:b7:08:45:f7:41:74:b7:f1: 77:81:3e:f5:4f:64:cd:31:4c:52:6a:68:d6:19:49:9a:44:dc: 49:7c:68:ea:ad:4a:6c:cb:dc:e1:de:60:47:96:12:18:7a:04: 4d:84:08:63:29:0f:be:88:33:ae:d5:c1:5a:34:a9:e4:c9:9e: d5:ec:66:dc:65:ea:f5:69:7d:44:1a:0a:16:93:cc:e5:b2:12: 2a:be:ec:d9:64:01:af:45:6a:8a:ac:27:47:0e:f4:a7:65:ad: 23:50:f3:27:20:2a:3e:6d:6a:e6:97:b5:21:5c:8f:13:6a:81: 8e:b0:f7:e9:89:d8:e8:5e:48:b0:17:c4:74:91:e7:7e:d5:72: 89:1f:2d:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/DZ92exc5ZUemAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NWI3Nzg2ZjItYjRiOS00MDA1LTkzODAtZDJjZjc5MzdmNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoourYoehXy2rwmceVEGRRuDX3ihbeZjtuO// YpwzE6X1B+UjRUqVHpIxFqsS29b3yyYNjBAk6x+0RbPvVV3Rq17ymSAXgOAu108G +XHvLQk9w7hoh/ili2RLKpvNmUZV9UjPE32goG6QhuIPKlzSc6879bbJCvRCAoNf gCAa6OzfPgREJD5lpi0Y6gLL/94OHFI4v0rUGoF7ixq3jxxocHNUegv69ZQwYiF0 An8kWBNoav0IvhDMSqCtQeztYmXYR9HK7BmINdzn0Um24H9u9gRDa0xdu+jvc0RY rYJ9dNU2opscSiX5Cb+2xqyOII/lvV9XNeEUfn0eM5yUVF9RFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJGyTLnGlOOdKEJGd+inNL+Zk+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjZhMjVmNmMtZjgxYy0z NmEwLWI2YTEtNjY3YTM1ODg5NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFGozaoAswMjeF6SdUWySawOZ0VRxOpLIZqNssyAvQ6TZr+pXZlkGrp II9kcfd/QDvWzhKCI+L04igNApMfpLWMPiHVGZEy0UlLjWFmU4gfzcrgJdQJkcnW RI5/pepEwz1XRVUH0wuRhmf8HkSY6lyz0wugAC23CEX3QXS38XeBPvVPZM0xTFJq aNYZSZpE3El8aOqtSmzL3OHeYEeWEhh6BE2ECGMpD76IM67VwVo0qeTJntXsZtxl 6vVpfUQaChaTzOWyEiq+7NlkAa9FaoqsJ0cO9KdlrSNQ8ycgKj5tauaXtSFcjxNq gY6w9+mJ2OheSLAXxHSR537VcokfLSw= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:17 2025 by rpki-client