$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81650b49-3eed-3519-aae1-90376bacaf6c.roa File: 81650b49-3eed-3519-aae1-90376bacaf6c.roa (raw, json) Hash identifier: +sIXN40FroskXxZ46HAArus1KyTTV0uE0e2xfR2ObG0= Subject key identifier: D1:49:BC:A1:9F:CA:C0:DE:D0:06:A9:4D:AC:74:2B:A8:F5:04:73:D2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841191493CA38114E2F766C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81650b49-3eed-3519-aae1-90376bacaf6c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.104.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:91:49:3c:a3:81:14:e2:f7:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=19b12c46-79e7-4962-a8ba-297f40c47b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:23:7c:e7:10:ab:6d:07:52:9b:a2:dc:51:47: 20:b6:8e:2a:74:e8:4c:72:6b:97:11:63:1f:5c:51: 89:b2:5e:52:94:09:34:4f:3d:0a:92:11:aa:be:23: 59:9d:1e:a8:43:e0:7a:c9:2f:7b:cb:fa:32:49:07: b3:99:56:4e:90:cb:1f:bc:fe:c9:82:34:d9:30:e8: 2d:39:bc:87:2a:17:15:84:7d:98:09:a9:26:b4:86: c1:44:fc:57:1f:c3:8e:95:ee:1e:6f:b5:c7:fc:71: 70:b9:4f:91:1c:3b:df:49:b1:f1:a4:c8:fe:25:b1: da:39:93:5d:88:53:59:23:48:50:b1:84:89:17:b3: fb:ba:56:20:3c:e7:74:f5:59:47:b9:13:4f:9a:c6: f0:63:ed:31:04:a8:9c:36:74:91:e1:71:46:82:ec: 0b:9d:48:90:c6:10:94:12:d8:e4:88:5c:36:42:ef: 73:8c:7f:a9:06:32:70:fb:c2:ef:32:b8:2e:4b:90: 42:e8:ef:4f:b0:f3:83:75:92:54:4b:57:5f:51:b2: da:d0:8c:94:6d:ad:97:54:68:e7:b0:61:39:04:a2: 89:fd:09:8a:3c:72:1d:f9:fb:f7:2c:76:ea:3b:51: 8e:37:75:f8:2d:21:d8:e5:9e:f6:f7:88:44:2d:f0: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:49:BC:A1:9F:CA:C0:DE:D0:06:A9:4D:AC:74:2B:A8:F5:04:73:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81650b49-3eed-3519-aae1-90376bacaf6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:83:7a:75:94:a5:f0:29:7c:6d:b7:49:6b:3c:0b:40:f5:65: 6b:b6:e0:e3:42:df:fa:3d:c4:46:5c:1b:ce:da:9e:72:1b:52: b7:5a:3f:3d:14:be:fd:8f:9c:07:49:41:33:f7:dc:b2:50:49: 85:0e:47:b6:87:6b:c0:93:6f:99:62:f3:09:99:ea:0a:83:6f: 00:0f:b9:ff:0b:4e:56:8a:10:d8:51:49:d9:6f:da:92:d5:c4: f1:a2:6f:bd:5e:0f:95:be:00:4e:6d:71:68:b9:76:27:7b:62: c5:87:fd:5f:56:85:e8:a0:2a:50:52:24:07:1b:de:60:e8:d4: fe:61:5a:5a:82:7b:c1:b1:b6:ad:75:cc:e7:85:57:f7:cf:96: 55:b2:26:06:aa:5f:00:56:46:03:d1:c5:90:4a:b6:cb:be:a9: c3:46:60:57:19:05:76:5d:e8:6c:c5:c5:60:7a:2b:d4:7a:5d: 0f:a4:f6:7b:0a:31:61:a3:7d:7b:99:c1:18:f1:f5:67:8a:a0: 4d:22:b0:bb:01:15:32:96:38:a8:7c:5d:39:00:8d:e3:ad:11: 71:f8:1f:67:c5:1a:5d:73:58:95:59:14:ce:23:b7:e2:1a:c3: b7:77:f6:95:3f:65:ee:a9:57:67:a1:a5:aa:0c:7e:f9:42:df: d1:cb:21:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZFJPKOBFOL3ZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTliMTJjNDYtNzllNy00OTYyLWE4YmEtMjk3ZjQwYzQ3YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiN85xCrbQdSm6LcUUcgto4qdOhMcmuXEWMf XFGJsl5SlAk0Tz0KkhGqviNZnR6oQ+B6yS97y/oySQezmVZOkMsfvP7JgjTZMOgt ObyHKhcVhH2YCakmtIbBRPxXH8OOle4eb7XH/HFwuU+RHDvfSbHxpMj+JbHaOZNd iFNZI0hQsYSJF7P7ulYgPOd09VlHuRNPmsbwY+0xBKicNnSR4XFGguwLnUiQxhCU EtjkiFw2Qu9zjH+pBjJw+8LvMrguS5BC6O9PsPODdZJUS1dfUbLa0IyUba2XVGjn sGE5BKKJ/QmKPHId+fv3LHbqO1GON3X4LSHY5Z7294hELfATLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFJvKGfysDe0AapTax0K6j1BHPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODE2NTBiNDktM2VlZC0z NTE5LWFhZTEtOTAzNzZiYWNhZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2DenWUpfApfG23SWs8C0D1ZWu24ONC3/o9xEZcG87annIbUrdaPz0U vv2PnAdJQTP33LJQSYUOR7aHa8CTb5li8wmZ6gqDbwAPuf8LTlaKENhRSdlv2pLV xPGib71eD5W+AE5tcWi5did7YsWH/V9WheigKlBSJAcb3mDo1P5hWlqCe8Gxtq11 zOeFV/fPllWyJgaqXwBWRgPRxZBKtsu+qcNGYFcZBXZd6GzFxWB6K9R6XQ+k9nsK MWGjfXuZwRjx9WeKoE0isLsBFTKWOKh8XTkAjeOtEXH4H2fFGl1zWJVZFM4jt+Ia w7d39pU/Ze6pV2ehpaoMfvlC39HLIRk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:26:43 2025 by rpki-client