$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e397143-818e-3470-86a8-e4eefbc40c30.roa File: 7e397143-818e-3470-86a8-e4eefbc40c30.roa (raw, json) Hash identifier: zTT+QK7QtdhkdPVNKIEoHmK1qZHEa6nYi8FtFzQa8pY= Subject key identifier: 3A:78:70:07:3A:88:A6:0C:CB:4C:87:DB:86:5D:34:13:25:D9:08:13 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBAABEA2D6D18A105E7F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e397143-818e-3470-86a8-e4eefbc40c30.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.89.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:aa:be:a2:d6:d1:8a:10:5e:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c1fbaa9f-efb8-4192-b532-66fc7b5ced61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:45:1a:e6:6f:fb:0e:87:1c:dd:85:dc:66:bd: c6:5d:ca:68:81:b6:bd:c4:55:a7:04:a2:e9:22:92: 2b:e1:ef:c3:9d:af:10:00:13:08:81:94:87:e9:27: 6a:41:13:4f:74:61:52:ad:13:67:fc:06:55:00:5a: bc:b0:ea:56:da:42:85:ae:06:6b:0e:05:bb:3e:41: 39:15:c8:14:6b:0a:e6:12:53:bf:fd:97:c9:c1:78: ee:b2:40:92:f7:dd:41:29:85:b5:4f:32:54:4b:f9: b7:24:2e:28:4d:45:34:e5:ad:2b:d7:a9:3e:f4:03: e1:08:88:7e:22:a4:54:03:8d:9f:6a:10:42:c9:fe: 3e:07:c8:01:fd:7f:61:fe:47:4f:2c:d1:d3:8b:2a: fd:bb:93:f2:91:26:51:be:6c:37:ea:ec:16:4c:b2: 8a:91:de:a6:7e:20:6b:d1:8f:7d:47:18:b6:29:54: 8f:ea:ea:8d:b8:55:f5:1f:b2:4e:83:d0:e6:12:9d: eb:f2:1d:e9:2f:46:47:cf:a4:a1:be:4f:88:d3:28: fc:c8:22:70:db:a9:f6:b6:ce:16:35:d3:c1:ab:23: e7:5d:c7:c1:1a:61:ba:94:b9:f8:b0:8f:15:2a:8d: 9c:b6:63:7d:13:84:dd:66:8a:97:ac:49:83:e2:8a: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:78:70:07:3A:88:A6:0C:CB:4C:87:DB:86:5D:34:13:25:D9:08:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e397143-818e-3470-86a8-e4eefbc40c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fd:71:26:6f:80:d6:c2:23:89:64:4b:4c:a7:a9:d2:2c:28: 34:23:23:76:4b:4f:f9:93:40:a8:95:af:47:14:f3:ca:6c:c2: 15:4c:f5:b8:94:9f:1d:a6:39:3c:4b:a1:18:4a:12:78:b1:36: a8:86:a4:ce:67:88:95:4e:0d:bb:d2:34:38:e2:7c:32:92:69: 8a:bf:f7:33:c8:81:9d:15:f9:09:c3:47:9c:0d:27:f2:3a:69: aa:79:18:e6:a2:87:df:4d:e7:b1:dc:27:7d:fe:e5:61:ec:46: 1a:a3:6f:e7:02:09:8e:67:2c:03:18:a8:56:d0:fe:c4:68:dc: f8:22:47:5f:4c:d5:df:83:87:f4:55:dd:89:72:c7:a5:32:92: 81:7e:5a:3c:3d:86:a9:5a:02:2b:f9:3e:94:56:33:42:38:71: af:2b:9d:cf:a7:ca:49:c0:3a:8a:e5:e4:cb:1c:50:f4:45:18: 53:cc:bd:ef:b2:12:f7:90:03:de:de:c7:31:f0:a8:8a:8f:ec: fc:20:a5:55:57:0c:c5:14:ca:9a:78:32:28:29:db:96:4b:43: ce:5b:2c:dd:a0:08:2e:82:14:89:f8:a0:21:bb:d8:c1:9d:58: bb:e1:71:75:40:6b:0d:cd:38:96:68:18:77:fd:12:42:09:4d: e0:e0:29:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26q+otbRihBef0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzFmYmFhOWYtZWZiOC00MTkyLWI1MzItNjZmYzdiNWNlZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UUa5m/7Docc3YXcZr3GXcpogba9xFWnBKLp IpIr4e/Dna8QABMIgZSH6SdqQRNPdGFSrRNn/AZVAFq8sOpW2kKFrgZrDgW7PkE5 FcgUawrmElO//ZfJwXjuskCS991BKYW1TzJUS/m3JC4oTUU05a0r16k+9APhCIh+ IqRUA42fahBCyf4+B8gB/X9h/kdPLNHTiyr9u5PykSZRvmw36uwWTLKKkd6mfiBr 0Y99Rxi2KVSP6uqNuFX1H7JOg9DmEp3r8h3pL0ZHz6Shvk+I0yj8yCJw26n2ts4W NdPBqyPnXcfBGmG6lLn4sI8VKo2ctmN9E4TdZoqXrEmD4orRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp4cAc6iKYMy0yH24ZdNBMl2QgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2UzOTcxNDMtODE4ZS0z NDcwLTg2YTgtZTRlZWZiYzQwYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT9cSZvgNbCI4lkS0ynqdIsKDQjI3ZLT/mTQKiVr0cU88pswhVM9biU nx2mOTxLoRhKEnixNqiGpM5niJVODbvSNDjifDKSaYq/9zPIgZ0V+QnDR5wNJ/I6 aap5GOaih99N57HcJ33+5WHsRhqjb+cCCY5nLAMYqFbQ/sRo3PgiR19M1d+Dh/RV 3Ylyx6UykoF+Wjw9hqlaAiv5PpRWM0I4ca8rnc+nyknAOorl5MscUPRFGFPMve+y EveQA97exzHwqIqP7PwgpVVXDMUUypp4Migp25ZLQ85bLN2gCC6CFIn4oCG72MGd WLvhcXVAaw3NOJZoGHf9EkIJTeDgKR0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:44 2025 by rpki-client