$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ac4aadc-1ee2-34cf-b27b-4b7ac46f8fe4.roa File: 7ac4aadc-1ee2-34cf-b27b-4b7ac46f8fe4.roa (raw, json) Hash identifier: y+JP1fr4Me8Fk23I0BHrepR2mMw6b/rI7ykj+g11tA0= Subject key identifier: F8:B1:6C:21:23:97:3F:AA:0F:D6:E0:19:34:41:CC:72:F0:47:97:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF641657A035BFA419F1A Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ac4aadc-1ee2-34cf-b27b-4b7ac46f8fe4.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.89.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f6:41:65:7a:03:5b:fa:41:9f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=80654ac6-23e7-4013-8803-3201509a6e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:22:81:e0:b3:74:c1:6f:0f:4b:6d:43:eb:f5: 16:a2:73:4c:be:8f:69:d6:1b:36:9b:8b:ec:6c:59: 3e:2b:2c:7a:89:d7:6b:dd:01:98:fa:20:0d:f7:3e: 8d:9a:5d:09:ea:d8:3e:fc:47:5d:86:53:18:05:85: 2d:41:e9:bb:f6:8f:7e:10:f2:be:c2:2e:1d:81:cc: 80:a5:25:05:be:6f:00:ed:d0:24:ab:f2:e6:50:ef: 63:59:e3:48:46:bb:1a:d5:b3:28:56:fa:88:46:1d: 89:d5:8e:3d:25:81:78:be:fa:85:c6:2a:76:5c:02: 56:5e:73:94:50:ff:b0:55:8f:8b:38:d0:b1:df:92: ca:e5:64:95:2e:0f:04:c2:9f:66:98:28:2a:96:cc: ac:2c:bd:c0:08:96:81:cc:21:2c:18:e5:4f:67:04: be:8d:cb:27:2e:0c:ac:cc:7a:79:d5:e1:e8:e0:8b: 5a:6a:f9:74:9e:00:25:37:de:ef:d9:39:23:da:2e: ae:a6:ad:89:e3:ee:d0:73:8f:88:23:16:69:86:74: 05:53:c4:25:98:c1:df:65:58:96:c6:ce:bf:8d:81: 72:e9:92:8d:e6:b2:50:9d:61:30:33:a0:57:f2:8e: 99:56:24:1e:b2:52:06:17:bc:59:c1:4f:58:ee:46: 4d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B1:6C:21:23:97:3F:AA:0F:D6:E0:19:34:41:CC:72:F0:47:97:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ac4aadc-1ee2-34cf-b27b-4b7ac46f8fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ce:38:4b:8f:99:35:f0:78:9f:14:0b:91:d2:79:4a:b5:3d: 0f:4d:22:8e:a3:f2:df:d7:6c:75:c7:59:ac:3a:14:b8:63:f5: e9:0d:cd:ca:43:23:be:5c:b3:cd:a9:a3:67:8e:5d:85:4a:a5: 11:74:af:c9:7e:09:2e:98:5a:c2:e7:68:c3:59:3e:e3:06:ce: bf:02:da:0b:85:af:da:70:45:b1:8f:13:05:45:3d:9a:70:23: 18:9b:0c:6c:4a:c5:51:55:76:ab:6b:6a:7e:21:bb:00:29:de: ee:cb:21:48:5a:c6:81:b1:ad:d8:d4:55:83:84:75:dc:71:f2: 92:cc:9d:c4:a0:ab:a0:d9:e2:f4:68:62:37:b5:90:6a:e6:f7: 64:27:3a:cd:a4:2d:4b:8d:64:f0:ef:6a:43:3d:6a:7d:60:4f: 27:64:75:8e:04:54:58:99:19:62:1c:f6:00:ba:b3:22:bb:92: fa:df:c3:71:f3:ba:8c:5f:00:e5:89:6a:bb:bc:70:9d:b0:23: d8:d5:0c:e8:b6:8e:b0:dc:37:0c:9d:eb:3f:bc:b8:fd:31:2b: cc:db:8d:cc:67:51:2b:72:ec:6a:38:e4:f0:b3:e2:c9:9e:74: 2c:b7:8d:9d:9c:97:b2:f8:c3:29:37:b2:ed:50:75:29:9d:6b: bd:71:93:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/ZBZXoDW/pBnxowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODA2NTRhYzYtMjNlNy00MDEzLTg4MDMtMzIwMTUwOWE2ZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiKB4LN0wW8PS21D6/UWonNMvo9p1hs2m4vs bFk+Kyx6iddr3QGY+iAN9z6Nml0J6tg+/EddhlMYBYUtQem79o9+EPK+wi4dgcyA pSUFvm8A7dAkq/LmUO9jWeNIRrsa1bMoVvqIRh2J1Y49JYF4vvqFxip2XAJWXnOU UP+wVY+LONCx35LK5WSVLg8Ewp9mmCgqlsysLL3ACJaBzCEsGOVPZwS+jcsnLgys zHp51eHo4Itaavl0ngAlN97v2Tkj2i6upq2J4+7Qc4+IIxZphnQFU8QlmMHfZViW xs6/jYFy6ZKN5rJQnWEwM6BX8o6ZViQeslIGF7xZwU9Y7kZNAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPixbCEjlz+qD9bgGTRBzHLwR5c9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2FjNGFhZGMtMWVlMi0z NGNmLWIyN2ItNGI3YWM0NmY4ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTOOEuPmTXweJ8UC5HSeUq1PQ9NIo6j8t/XbHXHWaw6FLhj9ekNzcpD I75cs82po2eOXYVKpRF0r8l+CS6YWsLnaMNZPuMGzr8C2guFr9pwRbGPEwVFPZpw IxibDGxKxVFVdqtran4huwAp3u7LIUhaxoGxrdjUVYOEddxx8pLMncSgq6DZ4vRo Yje1kGrm92QnOs2kLUuNZPDvakM9an1gTydkdY4EVFiZGWIc9gC6syK7kvrfw3Hz uoxfAOWJaru8cJ2wI9jVDOi2jrDcNwyd6z+8uP0xK8zbjcxnUSty7Go45PCz4sme dCy3jZ2cl7L4wyk3su1QdSmda71xk4o= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:31 2025 by rpki-client