$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70027164-2d85-39ec-94d1-90f375c34b81.roa File: 70027164-2d85-39ec-94d1-90f375c34b81.roa (raw, json) Hash identifier: NYAtBL3bOnKBZSns5QSkb1wytLwwzdah/0D1Tc/stg8= Subject key identifier: 1D:6C:E8:6A:E8:39:A0:ED:32:A1:7A:C7:1C:1E:B7:E7:97:30:2F:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7AF2E3BEBDCDD8B1BD80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70027164-2d85-39ec-94d1-90f375c34b81.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.66.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7a:f2:e3:be:bd:cd:d8:b1:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=67d7dfeb-4204-470b-9a12-d3ecdc4b7d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:72:04:c0:8c:ab:81:f2:1b:99:c2:5d:a5:eb: 31:46:90:01:25:f5:a2:66:da:55:94:3e:35:cc:be: d3:3e:fc:b9:22:c0:6e:49:83:2a:8d:0f:11:c0:ce: b0:ef:cf:cd:11:97:06:23:53:f1:dc:85:e4:22:72: 92:e5:2c:8d:32:39:3a:41:e7:a1:1e:2b:49:d1:92: 8f:44:5b:11:8c:d3:5a:cc:42:e0:43:c3:6c:6e:90: ce:23:e0:7b:c3:99:46:5e:7d:00:77:8b:ec:31:f4: bc:48:6c:8a:7e:f9:9e:46:d7:d5:bf:57:43:36:19: e5:71:fe:dd:1c:28:87:11:ce:d9:28:d3:07:c3:d4: 2e:17:43:20:8f:67:55:fa:c9:27:59:e7:cc:b0:78: e8:f9:32:e3:98:7e:16:f5:e2:d1:63:e6:fd:1d:8a: d3:e1:d1:c0:27:d9:42:51:16:c1:dd:86:7f:6e:22: 8d:55:98:51:6f:f7:52:fb:5a:2a:53:db:15:1a:18: 91:77:36:f6:8e:24:e9:6e:51:a6:b0:4c:8b:84:e0: a8:49:b8:7f:2c:c6:ca:35:f5:e2:97:1a:4d:e8:e7: 92:81:fc:f2:88:61:d5:69:9e:bf:0c:6e:46:75:b0: 53:ad:21:f4:3d:9b:45:01:08:f7:37:7e:df:72:a2: 53:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6C:E8:6A:E8:39:A0:ED:32:A1:7A:C7:1C:1E:B7:E7:97:30:2F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70027164-2d85-39ec-94d1-90f375c34b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:36:d4:6d:f9:8d:70:59:f7:85:bb:d7:c0:67:23:b9:e8:0b: b6:50:8c:88:0d:ee:f5:88:05:e3:6e:e4:7b:e5:5e:d5:33:16: 8f:56:89:d4:29:95:82:c6:80:7c:af:de:13:97:72:3f:0c:d6: ce:91:5a:07:73:98:19:13:e8:ad:72:cb:4f:37:9c:3e:13:d0: 6a:ac:17:2b:f1:dd:52:fb:b5:0e:b0:bd:6a:d1:04:0a:4c:60: 92:f4:ef:87:90:e3:c7:81:8e:ca:25:45:78:85:57:7c:3b:53: e7:45:5c:2f:00:02:f5:a1:6e:8d:17:57:87:af:3d:4d:13:24: e8:fb:6e:86:21:d3:53:1e:32:8c:15:4a:1b:4e:99:bd:08:06: f4:af:e0:c4:4a:e4:eb:cd:53:59:79:ef:82:52:f2:33:73:ed: c2:92:a6:ab:28:4b:a9:1e:db:60:a7:32:31:b4:85:a9:49:ee: 12:81:d9:d7:52:49:d1:f2:b0:9d:7b:33:c0:4e:7c:b1:93:07: 7b:f3:2e:6a:a3:c7:88:c7:b1:7a:61:51:f2:06:e3:77:32:2f: 36:7c:b3:8d:f7:c8:2e:58:e0:67:57:2b:52:9c:ae:f4:a6:a5: b9:cd:b9:1f:f3:1f:1c:e3:cf:36:bb:5b:fb:13:70:f0:fd:ac: 67:0c:fd:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23ry4769zdixvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjdkN2RmZWItNDIwNC00NzBiLTlhMTItZDNlY2RjNGI3ZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HIEwIyrgfIbmcJdpesxRpABJfWiZtpVlD41 zL7TPvy5IsBuSYMqjQ8RwM6w78/NEZcGI1Px3IXkInKS5SyNMjk6QeehHitJ0ZKP RFsRjNNazELgQ8NsbpDOI+B7w5lGXn0Ad4vsMfS8SGyKfvmeRtfVv1dDNhnlcf7d HCiHEc7ZKNMHw9QuF0Mgj2dV+sknWefMsHjo+TLjmH4W9eLRY+b9HYrT4dHAJ9lC URbB3YZ/biKNVZhRb/dS+1oqU9sVGhiRdzb2jiTpblGmsEyLhOCoSbh/LMbKNfXi lxpN6OeSgfzyiGHVaZ6/DG5GdbBTrSH0PZtFAQj3N37fcqJTfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1s6GroOaDtMqF6xxwet+eXMC/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzAwMjcxNjQtMmQ4NS0z OWVjLTk0ZDEtOTBmMzc1YzM0YjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg21G35jXBZ94W718BnI7noC7ZQjIgN7vWIBeNu5HvlXtUzFo9WidQp lYLGgHyv3hOXcj8M1s6RWgdzmBkT6K1yy083nD4T0GqsFyvx3VL7tQ6wvWrRBApM YJL074eQ48eBjsolRXiFV3w7U+dFXC8AAvWhbo0XV4evPU0TJOj7boYh01MeMowV ShtOmb0IBvSv4MRK5OvNU1l574JS8jNz7cKSpqsoS6ke22CnMjG0halJ7hKB2ddS SdHysJ17M8BOfLGTB3vzLmqjx4jHsXphUfIG43cyLzZ8s433yC5Y4GdXK1KcrvSm pbnNuR/zHxzjzza7W/sTcPD9rGcM/Wg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:38:45 2025 by rpki-client