$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84cf9c46-e4e1-3c71-a979-589a6b5df5c9.roa File: 84cf9c46-e4e1-3c71-a979-589a6b5df5c9.roa (raw, json) Hash identifier: 8EsSEfbXeNOJECnyF+gfGTC/+aZSG4MK0Qi4NYsjhfY= Subject key identifier: C1:5F:77:C8:E3:C7:C7:BD:2C:95:C0:62:8E:C1:C6:EA:47:EB:35:56 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC89FB0DF18B2DDED2500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84cf9c46-e4e1-3c71-a979-589a6b5df5c9.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.89.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c8:9f:b0:df:18:b2:dd:ed:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=9cea08d5-6f1d-43f9-a5dc-993573aa5fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d9:d5:b2:bb:46:12:40:67:bc:0c:7e:98:f2: 56:a5:7c:30:d0:b8:fb:d6:af:91:f7:63:e1:db:f1: a7:e1:53:e6:62:49:ce:d1:a5:0e:11:b3:da:42:6e: 38:eb:c4:bf:65:33:58:37:e5:0e:ab:fa:94:c3:d1: 8a:7c:24:af:b0:c4:0b:3a:5d:6e:30:f5:dc:31:ca: fc:c6:ac:7c:52:d5:88:17:6e:52:be:cd:79:6d:79: 87:8e:39:c7:11:09:05:63:47:16:ae:0d:56:56:fb: f2:9b:c0:c6:ca:52:b1:b8:c8:92:6a:29:80:40:cc: 10:25:dd:bc:df:20:28:64:23:c9:33:73:1b:96:ae: c7:75:a0:0f:a8:6f:94:3b:2e:a1:20:ee:20:14:6d: 2c:09:e2:b2:52:86:5f:5e:f3:9d:65:aa:73:db:93: 60:36:7d:8b:f6:f5:a0:4d:57:f9:68:02:e8:d9:22: 08:1f:c5:e9:5e:cd:c2:31:c0:ca:b3:d3:b2:45:6e: 93:3c:6c:ab:a1:1d:d7:99:09:2b:5f:42:87:19:b2: f6:7e:48:02:de:71:fa:cc:56:dd:a7:8c:5b:be:35: cf:4e:60:97:5a:61:4b:cd:9f:96:4b:c5:94:76:32: 21:d3:d7:30:e4:55:71:fc:bb:9a:29:03:cb:06:bd: fb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5F:77:C8:E3:C7:C7:BD:2C:95:C0:62:8E:C1:C6:EA:47:EB:35:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84cf9c46-e4e1-3c71-a979-589a6b5df5c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:36:52:e6:47:86:3c:1d:ee:ab:4e:35:2c:62:2b:7b:e2:1d: ea:3c:d4:65:d5:cc:47:a4:30:a1:4c:ee:43:65:8d:fa:77:54: da:33:63:07:67:3d:dd:54:05:f5:d6:83:93:92:d7:3f:6e:46: b3:9e:dc:27:64:44:ba:78:a0:c9:95:b3:d6:05:73:72:cd:c1: 95:d3:ad:85:ca:ae:0b:7f:59:e4:c7:06:27:6d:2a:1a:52:ce: ef:84:45:dd:e8:01:98:c3:86:b2:7a:bf:2f:0a:34:45:6e:a7: 87:ef:80:90:18:18:e5:b7:8f:62:f7:d3:ef:fd:74:9e:c2:93: 91:42:d0:d1:d7:ac:12:64:7f:0e:c8:e2:58:ed:f2:f5:0e:41: aa:e7:0c:a5:b9:4d:a5:e2:a2:79:8b:83:35:63:c0:1a:2f:19: b5:d8:f1:75:04:4c:73:ae:d0:7e:6c:a7:40:08:1b:93:20:0d: 29:e1:5d:92:bf:ce:b1:63:3d:23:26:91:c6:58:8f:ce:af:92: 27:f5:17:43:c3:73:95:98:40:9e:5a:54:97:68:d4:e5:3a:c2: c2:de:69:a1:82:a2:fa:93:07:0b:a1:a7:c9:5c:8d:3e:51:70: 01:cf:77:9e:4a:55:d3:2d:fe:78:ce:0c:15:03:9a:74:51:be: b3:11:cd:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28ifsN8Yst3tJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OWNlYTA4ZDUtNmYxZC00M2Y5LWE1ZGMtOTkzNTczYWE1ZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NnVsrtGEkBnvAx+mPJWpXww0Lj71q+R92Ph 2/Gn4VPmYknO0aUOEbPaQm4468S/ZTNYN+UOq/qUw9GKfCSvsMQLOl1uMPXcMcr8 xqx8UtWIF25Svs15bXmHjjnHEQkFY0cWrg1WVvvym8DGylKxuMiSaimAQMwQJd28 3yAoZCPJM3Mblq7HdaAPqG+UOy6hIO4gFG0sCeKyUoZfXvOdZapz25NgNn2L9vWg TVf5aALo2SIIH8XpXs3CMcDKs9OyRW6TPGyroR3XmQkrX0KHGbL2fkgC3nH6zFbd p4xbvjXPTmCXWmFLzZ+WS8WUdjIh09cw5FVx/LuaKQPLBr37xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFfd8jjx8e9LJXAYo7BxupH6zVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODRjZjljNDYtZTRlMS0z YzcxLWE5NzktNTg5YTZiNWRmNWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIllQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY2UuZHhjwd7qtONSxiK3viHeo81GXVzEekMKFM7kNljfp3VNozYwdn Pd1UBfXWg5OS1z9uRrOe3CdkRLp4oMmVs9YFc3LNwZXTrYXKrgt/WeTHBidtKhpS zu+ERd3oAZjDhrJ6vy8KNEVup4fvgJAYGOW3j2L30+/9dJ7Ck5FC0NHXrBJkfw7I 4ljt8vUOQarnDKW5TaXionmLgzVjwBovGbXY8XUETHOu0H5sp0AIG5MgDSnhXZK/ zrFjPSMmkcZYj86vkif1F0PDc5WYQJ5aVJdo1OU6wsLeaaGCovqTBwuhp8lcjT5R cAHPd55KVdMt/njODBUDmnRRvrMRzUs= -----END CERTIFICATE-----Generated at Tue Jul 22 04:19:56 2025 by rpki-client