$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/746d9992-979f-3d91-acee-667463179aa3.roa File: 746d9992-979f-3d91-acee-667463179aa3.roa (raw, json) Hash identifier: K17GrmMReqykzC5zYuzKB5mx6DsXaw0HKPx2Y0nQzho= Subject key identifier: 89:D9:3F:17:F6:68:26:88:5C:E3:A6:88:1D:C6:99:31:0A:8A:D5:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB44A6E1149F929F09840 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/746d9992-979f-3d91-acee-667463179aa3.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.89.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b4:4a:6e:11:49:f9:29:f0:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1467bc70-6c0e-4364-89e8-a4c0d1b336b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:92:46:96:7c:b2:96:5e:79:c3:c5:b1:be:9f: 32:e9:25:11:b3:4e:05:2d:29:3b:01:ba:a4:dd:7e: ca:db:9c:87:0a:8c:77:0e:bf:fb:0d:a9:88:4e:f0: 81:46:5c:85:d0:ae:49:8e:0c:6b:78:c6:4e:73:21: a6:61:c6:bc:c3:c0:17:0d:31:51:b3:4a:3c:26:1e: 6e:58:45:52:4a:fe:33:71:38:4e:81:b3:94:1b:0a: 56:70:40:0f:d1:54:9c:63:39:e0:b8:4f:52:9a:38: 28:ea:d8:48:6a:ec:37:d6:67:42:7e:d5:22:13:0b: 8a:55:9e:2f:0c:f8:5f:54:9d:eb:bd:3b:fc:9c:33: a1:da:6a:c0:12:47:99:8d:e7:e2:f3:00:de:09:30: 36:a0:72:66:09:f0:fc:79:83:2b:3c:69:51:b2:2e: 4a:0c:45:d8:e3:10:aa:2a:4b:ad:11:2e:60:02:e4: 8f:77:80:70:ea:a5:c2:b1:96:69:53:75:08:10:df: 01:85:9a:28:e5:99:f3:89:b6:56:07:c1:aa:8e:d1: 94:09:c1:42:46:c4:1d:63:67:56:23:e9:83:d4:77: b1:12:ad:82:57:75:6f:4a:b9:d4:42:df:95:64:30: 41:ff:91:4c:c4:11:ae:5b:72:5e:ea:9c:09:32:75: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D9:3F:17:F6:68:26:88:5C:E3:A6:88:1D:C6:99:31:0A:8A:D5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/746d9992-979f-3d91-acee-667463179aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f6:e7:51:ce:c6:13:70:9a:6a:19:f0:5b:b1:aa:81:fb:77: 30:a6:aa:9e:92:b7:22:2d:70:e2:15:eb:8d:a9:20:b6:9f:0f: 68:b9:76:1c:1c:69:3d:dd:3c:8d:55:a3:c0:18:23:60:55:13: 78:1d:16:f2:15:10:65:9a:1a:1a:a5:0b:66:72:48:bc:75:9d: 98:71:2b:16:f5:69:4e:4c:6d:a0:e3:9a:85:4f:b1:cc:be:e9: d6:09:22:50:06:38:ca:87:70:88:35:e8:76:5b:59:ee:25:14: d7:8a:52:09:b4:d5:90:a6:53:72:15:95:cc:e5:59:9f:69:f6: 16:3a:a6:75:4f:83:c8:cc:1e:ee:a4:8c:c8:fd:84:1c:24:4e: 21:9b:85:75:b3:63:a4:92:3e:f0:84:dd:6b:9c:5a:d3:4e:30: e3:74:17:86:77:3d:09:20:78:2f:49:f4:c8:7b:13:31:91:34: 33:d2:18:95:7c:cb:82:e9:5c:35:02:1d:51:92:55:3c:5a:41: 7b:6c:f1:ff:3b:e0:b1:2c:11:a2:04:ed:f9:e0:63:5a:2d:1a: 07:30:31:ed:a8:6b:54:b3:a3:ab:d3:58:9d:f9:a7:88:5c:5a: 75:89:4b:77:69:03:84:59:bd:5d:7f:88:79:9e:35:f0:91:db: d6:37:1f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27RKbhFJ+SnwmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTQ2N2JjNzAtNmMwZS00MzY0LTg5ZTgtYTRjMGQxYjMzNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpJGlnyyll55w8Wxvp8y6SURs04FLSk7Abqk 3X7K25yHCox3Dr/7DamITvCBRlyF0K5JjgxreMZOcyGmYca8w8AXDTFRs0o8Jh5u WEVSSv4zcThOgbOUGwpWcEAP0VScYznguE9Smjgo6thIauw31mdCftUiEwuKVZ4v DPhfVJ3rvTv8nDOh2mrAEkeZjefi8wDeCTA2oHJmCfD8eYMrPGlRsi5KDEXY4xCq KkutES5gAuSPd4Bw6qXCsZZpU3UIEN8BhZoo5ZnzibZWB8GqjtGUCcFCRsQdY2dW I+mD1HexEq2CV3VvSrnUQt+VZDBB/5FMxBGuW3Je6pwJMnVTJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInZPxf2aCaIXOOmiB3GmTEKitX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzQ2ZDk5OTItOTc5Zi0z ZDkxLWFjZWUtNjY3NDYzMTc5YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7251HOxhNwmmoZ8FuxqoH7dzCmqp6StyItcOIV642pILafD2i5dhwc aT3dPI1Vo8AYI2BVE3gdFvIVEGWaGhqlC2ZySLx1nZhxKxb1aU5MbaDjmoVPscy+ 6dYJIlAGOMqHcIg16HZbWe4lFNeKUgm01ZCmU3IVlczlWZ9p9hY6pnVPg8jMHu6k jMj9hBwkTiGbhXWzY6SSPvCE3WucWtNOMON0F4Z3PQkgeC9J9Mh7EzGRNDPSGJV8 y4LpXDUCHVGSVTxaQXts8f874LEsEaIE7fngY1otGgcwMe2oa1Szo6vTWJ35p4hc WnWJS3dpA4RZvV1/iHmeNfCR29Y3H+A= -----END CERTIFICATE-----Generated at Tue Jul 22 04:35:26 2025 by rpki-client