$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/845cc24f-dd0f-3859-9b7b-fc2808a86061.roa File: 845cc24f-dd0f-3859-9b7b-fc2808a86061.roa (raw, json) Hash identifier: nPcMc3NVTVM4x0vM3shz7N8zoP42fdnoktghRlYeqvU= Subject key identifier: DF:AB:02:D9:FD:39:78:1C:7D:43:0C:77:10:C4:0E:EB:08:73:23:16 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBFED4B56118FA11CE800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/845cc24f-dd0f-3859-9b7b-fc2808a86061.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.76.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:bf:ed:4b:56:11:8f:a1:1c:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c59a5cb5-2c13-4c5f-8b63-7026ed4f40a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:dc:c8:30:b9:ae:24:1e:4a:b5:49:a7:5a: 54:79:f8:35:89:cc:49:83:ac:1a:04:97:64:f6:40: fe:e5:27:5b:9f:fe:27:9c:cc:95:2c:78:b1:72:ba: 2a:76:07:b8:a4:f6:a6:dc:e0:f3:75:bf:28:0b:7d: 3b:c2:85:95:dc:9d:3c:1c:2a:4b:7e:46:44:3e:ec: a8:dd:02:6f:08:dd:b0:90:2a:fd:19:f0:e3:96:db: 09:9f:e0:d3:a7:7c:bb:e7:d4:ff:69:d5:08:a8:0f: b8:09:f5:44:d9:18:cf:08:29:d1:6d:44:82:44:1d: 39:95:ad:91:f3:b1:76:b9:4f:e0:0b:b9:46:db:20: ad:08:8b:b6:07:1e:f7:fa:b5:7a:24:d2:34:e7:ac: bc:22:b6:a3:0d:bb:25:e0:20:02:1c:93:13:8a:3a: 3b:8b:db:51:5a:d4:ed:80:1f:6f:97:f4:66:e6:44: 39:3a:e9:5a:10:44:bf:f2:58:fe:21:19:4e:7f:9a: 82:fe:e7:cc:d9:3a:a6:93:8c:56:56:5c:83:03:2c: 97:60:dc:19:76:69:77:c0:40:11:bf:3d:4e:26:c1: 76:29:56:e4:ab:03:51:5d:3e:74:1e:bc:1b:ec:47: 60:c8:b8:fe:16:2d:7a:ab:2f:a3:20:5c:9d:9c:f7: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AB:02:D9:FD:39:78:1C:7D:43:0C:77:10:C4:0E:EB:08:73:23:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/845cc24f-dd0f-3859-9b7b-fc2808a86061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7f:e2:f8:13:21:fd:ee:37:50:72:7b:10:b8:90:4f:4a:b6: ac:b3:5e:36:61:69:0d:f3:8a:a6:73:4b:bd:22:9b:30:17:98: f9:0e:17:80:a1:b9:45:6c:c3:75:28:df:ac:f8:07:f3:4a:cf: a5:37:c8:50:17:71:1b:92:af:fb:85:84:83:c1:5f:31:fd:69: 26:f8:e0:46:0b:20:67:92:d8:1c:2f:f8:1f:e7:5b:82:0b:0b: 34:5c:1b:90:c9:5f:30:86:28:5e:50:ad:f6:31:c3:28:c3:a0: d5:85:92:5e:48:c0:13:c5:d6:b2:0a:40:77:a8:f2:b4:7b:d1: 1a:bf:dd:1a:e6:e4:b2:c7:1e:9a:50:ff:d1:dc:53:60:63:84: 41:b4:ed:aa:14:32:fd:95:1a:cf:d8:16:3c:d4:3c:70:d0:3e: a3:b3:53:a3:a6:4d:bf:6c:fe:45:a6:fc:5d:13:b9:63:24:8d: 85:0c:51:64:16:7e:e6:84:27:72:5b:a3:a4:bf:ba:a0:64:c8: 41:4e:a6:4c:2c:97:7a:4d:b4:03:e5:71:5f:28:5a:96:d0:d1: 00:2a:73:0a:d5:13:f9:bf:b9:17:b2:f1:3f:6e:57:d9:57:83: 1b:cb:b6:b2:67:70:3d:b9:0d:08:f6:d3:d8:e6:e0:64:9c:99: 57:ab:20:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27/tS1YRj6Ec6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzU5YTVjYjUtMmMxMy00YzVmLThiNjMtNzAyNmVkNGY0MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip3cyDC5riQeSrVJp1pUefg1icxJg6waBJdk 9kD+5Sdbn/4nnMyVLHixcroqdge4pPam3ODzdb8oC307woWV3J08HCpLfkZEPuyo 3QJvCN2wkCr9GfDjltsJn+DTp3y759T/adUIqA+4CfVE2RjPCCnRbUSCRB05la2R 87F2uU/gC7lG2yCtCIu2Bx73+rV6JNI056y8IrajDbsl4CACHJMTijo7i9tRWtTt gB9vl/Rm5kQ5OulaEES/8lj+IRlOf5qC/ufM2Tqmk4xWVlyDAyyXYNwZdml3wEAR vz1OJsF2KVbkqwNRXT50Hrwb7EdgyLj+Fi16qy+jIFydnPc/CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+rAtn9OXgcfUMMdxDEDusIcyMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODQ1Y2MyNGYtZGQwZi0z ODU5LTliN2ItZmMyODA4YTg2MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx/4vgTIf3uN1ByexC4kE9KtqyzXjZhaQ3ziqZzS70imzAXmPkOF4Ch uUVsw3Uo36z4B/NKz6U3yFAXcRuSr/uFhIPBXzH9aSb44EYLIGeS2Bwv+B/nW4IL CzRcG5DJXzCGKF5QrfYxwyjDoNWFkl5IwBPF1rIKQHeo8rR70Rq/3Rrm5LLHHppQ /9HcU2BjhEG07aoUMv2VGs/YFjzUPHDQPqOzU6OmTb9s/kWm/F0TuWMkjYUMUWQW fuaEJ3Jbo6S/uqBkyEFOpkwsl3pNtAPlcV8oWpbQ0QAqcwrVE/m/uRey8T9uV9lX gxvLtrJncD25DQj209jm4GScmVerICE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:34:36 2025 by rpki-client