$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ed8daff-3557-3591-a8f1-4787e6be1fe3.roa File: 6ed8daff-3557-3591-a8f1-4787e6be1fe3.roa (raw, json) Hash identifier: Xs2kCoQIZz/5kYGeMA4tqlLaBznB7JSjjNZHeqZS9Xk= Subject key identifier: 58:CE:CC:D5:10:BA:02:88:4C:59:D8:C1:C7:57:93:88:54:CA:77:EC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7BFD9CA631722C56B880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ed8daff-3557-3591-a8f1-4787e6be1fe3.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.73.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7b:fd:9c:a6:31:72:2c:56:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=17a8e636-ea34-482d-bf40-2ee6f95e1e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:ee:5d:db:48:3c:32:bc:43:b5:95:f9:af: f2:5e:72:9f:08:82:84:50:ae:6f:63:11:05:5d:db: 6a:36:47:75:af:b2:61:81:3f:0f:d3:d3:47:47:22: 60:ae:95:88:71:53:ce:f3:9f:4e:6b:8d:85:e5:4e: 91:b2:26:eb:f0:ce:f4:7d:dc:91:4f:15:c8:e2:fd: c0:cc:4f:03:1c:d8:71:e4:e6:a6:f4:00:f3:52:dc: 4b:ce:1f:b5:4e:1a:c0:a3:9b:ea:d4:cf:b9:f2:e3: 02:18:ea:26:9a:b7:be:16:34:c8:d2:37:df:c0:0a: cc:5e:64:53:cf:26:eb:79:fe:44:d9:04:f1:56:52: 04:d8:18:5a:2d:56:e4:a2:85:1a:e1:d7:f8:c3:bf: ab:e7:86:16:d9:ba:68:a1:f1:4e:17:d7:9a:c8:4f: 7d:07:63:87:b7:bf:d4:cf:fc:7b:92:a2:63:27:6f: 46:14:48:a1:bc:19:4e:4a:a7:7b:6f:4f:7b:fd:e6: f5:af:3f:37:04:01:1c:09:1f:f0:cf:be:17:23:ab: ac:94:72:23:a5:37:3b:f6:31:ad:d3:9a:82:3b:ff: 85:65:44:d9:09:2f:02:6d:5a:86:53:ba:bc:d5:c3: 5e:3f:e9:db:9f:b1:e6:c7:9e:f5:68:1d:37:41:9c: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CE:CC:D5:10:BA:02:88:4C:59:D8:C1:C7:57:93:88:54:CA:77:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ed8daff-3557-3591-a8f1-4787e6be1fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.73.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:bc:2c:12:e9:6c:d1:f3:05:e6:62:6d:f0:b5:52:4d:99:9c: 42:f1:db:95:e7:94:42:f0:f2:1f:33:bb:d1:06:27:5f:8b:10: 1c:c1:91:56:e7:c8:4d:60:bf:5d:0e:11:8f:13:ae:50:0d:b4: 99:34:58:40:cd:cf:40:44:1c:d6:f0:cd:2b:df:a6:a4:b8:02: 25:fd:54:6e:e7:bd:7f:6c:77:12:b0:2d:28:20:39:c4:74:6d: a7:f9:a7:9c:17:c6:49:b5:a0:13:05:a3:e5:99:99:6a:ca:85: 23:65:03:69:e2:c8:33:0c:42:52:f0:d7:00:9f:a5:3d:e7:68: 44:dd:c6:37:51:ce:f8:b5:ef:6e:80:04:83:ab:2b:c6:0d:80: d9:4f:dd:35:3a:ba:5e:c9:b2:78:5f:8a:0c:a2:fa:d4:d5:d9: 54:b8:4d:17:cf:b3:00:9f:60:db:1b:47:30:ec:44:8c:4d:92: 21:65:22:be:5c:a9:b6:01:f3:a6:ad:d7:b0:8c:ab:23:8a:8c: 8c:8b:8d:49:aa:d9:4c:ea:7e:48:34:a9:f7:1e:12:c9:ed:c7: 12:c8:da:14:90:f1:4f:14:55:7d:1c:29:8b:c9:0d:60:27:62: 73:d7:cf:0d:4f:4b:8e:a3:be:5f:6d:8e:c5:b5:e5:0f:dc:e7: 74:42:fa:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23v9nKYxcixWuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTdhOGU2MzYtZWEzNC00ODJkLWJmNDAtMmVlNmY5NWUxZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP/uXdtIPDK8Q7WV+a/yXnKfCIKEUK5vYxEF XdtqNkd1r7JhgT8P09NHRyJgrpWIcVPO859Oa42F5U6Rsibr8M70fdyRTxXI4v3A zE8DHNhx5Oam9ADzUtxLzh+1ThrAo5vq1M+58uMCGOommre+FjTI0jffwArMXmRT zybref5E2QTxVlIE2BhaLVbkooUa4df4w7+r54YW2bpoofFOF9eayE99B2OHt7/U z/x7kqJjJ29GFEihvBlOSqd7b097/eb1rz83BAEcCR/wz74XI6uslHIjpTc79jGt 05qCO/+FZUTZCS8CbVqGU7q81cNeP+nbn7Hmx571aB03QZwgYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjOzNUQugKITFnYwcdXk4hUynfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmVkOGRhZmYtMzU1Ny0z NTkxLWE4ZjEtNDc4N2U2YmUxZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIknwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm8LBLpbNHzBeZibfC1Uk2ZnELx25XnlELw8h8zu9EGJ1+LEBzBkVbn yE1gv10OEY8TrlANtJk0WEDNz0BEHNbwzSvfpqS4AiX9VG7nvX9sdxKwLSggOcR0 baf5p5wXxkm1oBMFo+WZmWrKhSNlA2niyDMMQlLw1wCfpT3naETdxjdRzvi1726A BIOrK8YNgNlP3TU6ul7Jsnhfigyi+tTV2VS4TRfPswCfYNsbRzDsRIxNkiFlIr5c qbYB86at17CMqyOKjIyLjUmq2Uzqfkg0qfceEsntxxLI2hSQ8U8UVX0cKYvJDWAn YnPXzw1PS46jvl9tjsW15Q/c53RC+lM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:45 2025 by rpki-client