$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74b1f8a2-42eb-38a1-b4f3-6a1599c20a20.roa File: 74b1f8a2-42eb-38a1-b4f3-6a1599c20a20.roa (raw, json) Hash identifier: ZdTe75nj2Tzqs2IZg2M0aPPlrVSfS53H5TVfqGQko/I= Subject key identifier: FF:02:8C:4A:D0:40:33:7F:0F:07:44:D6:72:2D:BE:90:45:5E:A4:E2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC6DED2EE899F6C090940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74b1f8a2-42eb-38a1-b4f3-6a1599c20a20.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.87.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c6:de:d2:ee:89:9f:6c:09:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=04cfeb7a-4dff-4169-955c-05a18ce93ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:56:f3:38:50:e7:79:27:73:b7:a0:4d:f0:4c: 2c:39:bf:d2:9e:a8:17:a7:57:d4:5a:8f:2f:9c:73: 22:cf:86:ce:54:e6:4c:05:0b:73:f7:1d:da:0c:c7: 25:6a:66:6c:5e:86:b9:10:94:66:1e:2e:c1:0d:fe: c3:26:ed:ae:91:ce:d6:f3:26:49:c3:57:05:c0:31: 51:17:3a:95:38:52:c8:58:14:3f:da:8e:ff:50:5c: 82:30:42:7f:4b:b3:2d:cb:0a:da:05:d0:46:59:cc: 5e:58:eb:30:a8:f2:d5:91:d2:e9:ed:cb:b8:20:d9: 1e:25:4b:2b:f9:8e:73:32:59:7e:7d:ec:1f:92:07: 5c:29:5e:12:89:ee:f4:fa:d6:2d:b1:b6:9d:bf:d4: 99:52:aa:40:40:8f:ba:33:85:3b:df:54:fe:29:9c: b6:f9:82:f3:0e:1d:80:89:42:d3:07:da:53:72:f2: 7b:ac:4a:3e:d2:30:83:da:94:cf:76:54:97:bb:85: a7:a9:49:6a:ba:40:fd:e0:a6:35:81:1c:e6:a2:f6: 20:a5:13:e4:81:c5:c3:65:aa:04:b2:c0:72:1b:f1: 61:11:93:98:17:20:ca:67:6b:73:86:50:4f:ef:50: 4c:f8:e1:a4:aa:3f:99:c2:2e:a4:92:3e:62:de:c2: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:02:8C:4A:D0:40:33:7F:0F:07:44:D6:72:2D:BE:90:45:5E:A4:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74b1f8a2-42eb-38a1-b4f3-6a1599c20a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:eb:91:84:69:a2:a1:bf:ac:66:71:8c:54:03:1a:4d:8b:5c: b5:21:21:9b:e7:49:69:eb:8e:0b:90:4e:75:4e:e9:63:10:a8: 2b:07:5b:07:61:8f:34:87:37:ce:55:b2:1d:54:6a:04:b7:db: fd:f9:05:94:22:2c:a0:1d:ba:1f:37:9d:bb:9b:1a:9a:a5:1d: 26:96:af:97:50:80:9e:f7:23:cc:c7:94:bd:d2:73:7e:e0:7c: b1:0d:f8:d0:98:51:d8:74:fd:58:3d:a2:82:e5:34:47:5c:1e: 13:2c:23:94:11:ee:3b:15:bf:a6:ef:ba:8b:21:f4:f1:39:71: c8:54:03:58:2d:0e:c9:34:f4:c2:1d:57:30:2e:4e:31:7c:fe: 28:d4:64:1d:9a:0b:eb:e2:a4:da:1e:f1:0d:09:93:2c:c5:6f: 18:e5:da:d2:8f:bf:39:b0:24:63:07:be:3a:bf:93:8c:71:31: cb:38:79:6f:7d:e3:f9:fa:1a:c9:ab:33:e6:a9:08:ef:3a:35: c1:de:be:b2:e9:98:63:25:da:53:c4:35:dc:fb:b4:83:90:8a: f9:d9:41:bb:02:16:9b:7d:a7:f7:b0:1e:26:10:29:ab:70:1a: 9f:67:bb:b3:55:88:71:ad:29:28:59:0a:3f:2f:67:ab:12:e8: 6e:af:23:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28be0u6Jn2wJCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MDRjZmViN2EtNGRmZi00MTY5LTk1NWMtMDVhMThjZTkzZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFbzOFDneSdzt6BN8EwsOb/SnqgXp1fUWo8v nHMiz4bOVOZMBQtz9x3aDMclamZsXoa5EJRmHi7BDf7DJu2ukc7W8yZJw1cFwDFR FzqVOFLIWBQ/2o7/UFyCMEJ/S7MtywraBdBGWcxeWOswqPLVkdLp7cu4INkeJUsr +Y5zMll+fewfkgdcKV4Sie70+tYtsbadv9SZUqpAQI+6M4U731T+KZy2+YLzDh2A iULTB9pTcvJ7rEo+0jCD2pTPdlSXu4WnqUlqukD94KY1gRzmovYgpRPkgcXDZaoE ssByG/FhEZOYFyDKZ2tzhlBP71BM+OGkqj+Zwi6kkj5i3sKsXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8CjErQQDN/DwdE1nItvpBFXqTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzRiMWY4YTItNDJlYi0z OGExLWI0ZjMtNmExNTk5YzIwYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3rkYRpoqG/rGZxjFQDGk2LXLUhIZvnSWnrjguQTnVO6WMQqCsHWwdh jzSHN85Vsh1UagS32/35BZQiLKAduh83nbubGpqlHSaWr5dQgJ73I8zHlL3Sc37g fLEN+NCYUdh0/Vg9ooLlNEdcHhMsI5QR7jsVv6bvuosh9PE5cchUA1gtDsk09MId VzAuTjF8/ijUZB2aC+vipNoe8Q0JkyzFbxjl2tKPvzmwJGMHvjq/k4xxMcs4eW99 4/n6GsmrM+apCO86NcHevrLpmGMl2lPENdz7tIOQivnZQbsCFpt9p/ewHiYQKatw Gp9nu7NViHGtKShZCj8vZ6sS6G6vIxY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:24 2025 by rpki-client