$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7230530e-781e-37a1-bdcd-314cc6396b15.roa File: 7230530e-781e-37a1-bdcd-314cc6396b15.roa (raw, json) Hash identifier: uJWq3RuPBubphA5B5kId2SI6YlcJzH6mxICZigqydH0= Subject key identifier: 46:EE:1F:D8:CC:D8:41:84:5B:50:79:EC:4E:22:4A:26:6E:E1:A4:22 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841175E4A461E85AC7646D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7230530e-781e-37a1-bdcd-314cc6396b15.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.121.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:75:e4:a4:61:e8:5a:c7:64:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b2ef37cb-b2ef-48c3-9b00-ac8e6e29bb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:5c:ca:94:64:90:7f:f1:2b:9b:cd:8f:7c: b6:71:23:eb:a0:cc:53:5c:96:a5:cd:cd:e9:77:f2: 83:4b:4a:da:d9:19:45:bf:fc:07:3a:68:b3:cf:f0: 17:ce:2b:94:c8:27:27:35:1b:41:79:c5:d8:e6:50: 03:a0:7e:d7:65:da:19:54:e8:fe:ba:ea:21:5c:b8: 55:6a:82:3f:89:f2:11:aa:06:59:67:66:9f:80:40: 6e:d4:e0:b9:54:d6:60:40:d7:eb:95:79:73:06:ac: d4:32:15:98:07:45:94:ce:18:4f:f0:c5:fe:ab:93: 41:6b:5a:29:79:6e:13:1d:f7:23:77:ec:9c:c2:2f: d8:30:60:4e:a8:8c:c8:de:d0:b5:a9:93:e6:c4:4a: a1:b6:e7:a9:71:63:32:6a:92:c1:31:92:fa:0f:07: 9c:1f:e0:b8:57:a9:a9:f3:9a:99:c6:f9:70:2e:01: b2:16:b6:b2:64:c9:76:a2:d3:98:14:72:b7:90:ff: 7e:0b:09:64:3d:d5:1c:12:36:f3:99:03:46:13:45: 59:a8:c1:4e:fb:7d:4d:2b:57:16:bf:9c:1b:a7:73: c1:b2:65:0b:ac:23:74:00:98:4e:da:59:34:27:1f: 07:82:85:9d:6f:18:91:a5:fa:f7:a1:77:47:f9:48: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EE:1F:D8:CC:D8:41:84:5B:50:79:EC:4E:22:4A:26:6E:E1:A4:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7230530e-781e-37a1-bdcd-314cc6396b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:41:2d:47:ee:0c:7a:d6:5b:42:a4:eb:d3:58:15:16:b2:ed: c2:88:89:04:a3:a7:75:bd:f3:27:35:d3:95:fd:31:a0:68:3e: 11:5a:53:4f:ec:8d:bf:46:e4:d1:33:a6:89:94:c6:a7:ea:3a: 87:4c:c4:75:ff:04:2a:5b:7c:58:91:34:fa:cc:10:2c:99:54: 58:36:2f:30:f2:b4:07:37:62:4c:29:94:bc:5a:c5:a2:58:6a: 44:4e:8c:97:77:84:fa:ed:e5:41:09:4f:ee:52:e2:9c:c4:d0: 75:4f:08:82:5e:df:fe:68:67:50:c1:42:16:cf:c9:1e:4a:e6: 2e:a8:39:df:f0:36:f0:2b:3c:77:5c:a4:d2:1e:bf:a2:9b:1c: 75:7a:2c:04:9d:59:4b:a8:4e:35:23:e2:a0:7e:ea:ea:d9:9a: d2:e5:51:39:a6:fb:f1:1c:c3:3c:26:15:9b:29:32:e4:8e:22: 57:52:9f:55:85:62:9f:4d:c0:b0:a6:20:67:37:81:ae:fa:83: 5d:06:47:85:1c:0d:fa:7a:b1:98:b2:54:81:f3:4d:fc:ce:89: bd:7e:5d:c0:26:d6:4b:83:0b:1f:0b:b9:86:fc:36:de:56:bf: af:ba:0a:12:6a:49:d7:90:da:e0:17:31:4b:54:43:0e:0f:1a: 66:c2:6f:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXXkpGHoWsdkbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjJlZjM3Y2ItYjJlZi00OGMzLTliMDAtYWM4ZTZlMjliYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4tcypRkkH/xK5vNj3y2cSProMxTXJalzc3p d/KDS0ra2RlFv/wHOmizz/AXziuUyCcnNRtBecXY5lADoH7XZdoZVOj+uuohXLhV aoI/ifIRqgZZZ2afgEBu1OC5VNZgQNfrlXlzBqzUMhWYB0WUzhhP8MX+q5NBa1op eW4THfcjd+ycwi/YMGBOqIzI3tC1qZPmxEqhtuepcWMyapLBMZL6DwecH+C4V6mp 85qZxvlwLgGyFrayZMl2otOYFHK3kP9+CwlkPdUcEjbzmQNGE0VZqMFO+31NK1cW v5wbp3PBsmULrCN0AJhO2lk0Jx8HgoWdbxiRpfr3oXdH+UiExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbuH9jM2EGEW1B57E4iSiZu4aQiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzIzMDUzMGUtNzgxZS0z N2ExLWJkY2QtMzE0Y2M2Mzk2YjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhBLUfuDHrWW0Kk69NYFRay7cKIiQSjp3W98yc105X9MaBoPhFaU0/s jb9G5NEzpomUxqfqOodMxHX/BCpbfFiRNPrMECyZVFg2LzDytAc3YkwplLxaxaJY akROjJd3hPrt5UEJT+5S4pzE0HVPCIJe3/5oZ1DBQhbPyR5K5i6oOd/wNvArPHdc pNIev6KbHHV6LASdWUuoTjUj4qB+6urZmtLlUTmm+/EcwzwmFZspMuSOIldSn1WF Yp9NwLCmIGc3ga76g10GR4UcDfp6sZiyVIHzTfzOib1+XcAm1kuDCx8LuYb8Nt5W v6+6ChJqSdeQ2uAXMUtUQw4PGmbCb34= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:10 2025 by rpki-client