$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85dbd267-2be3-373a-8cbd-143e69dd6c90.roa File: 85dbd267-2be3-373a-8cbd-143e69dd6c90.roa (raw, json) Hash identifier: oILZIxcsCH3DWLmtN1m/GCr5uxNNVV4UUJd+8uOnPXM= Subject key identifier: 5D:E4:79:09:1A:17:5C:4C:3F:55:58:2D:86:06:D3:79:8C:5D:67:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB8D5FAD6EA5A94850D9F0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85dbd267-2be3-373a-8cbd-143e69dd6c90.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.84.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:8d:5f:ad:6e:a5:a9:48:50:d9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b24faf40-f543-4e4d-9827-05649d4fb742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:04:6d:2f:e0:d4:53:31:c6:b7:0c:e8:72: ea:c1:6a:f8:ba:63:01:f3:ea:fc:c0:c9:17:97:80: 95:04:0e:c7:ab:45:97:03:1b:90:09:77:82:85:03: 5d:fd:9f:0c:2d:3a:c0:90:47:9c:df:3c:65:6c:c0: 9e:04:3c:df:ad:96:ca:0c:84:42:03:06:ac:e0:57: a3:a1:76:44:30:98:c1:54:25:43:f6:f1:3b:0f:9c: 25:b6:38:77:ad:89:e0:cb:5a:73:1f:16:92:f6:11: 32:ae:3a:7a:bb:d4:b9:97:63:9e:76:59:f5:5a:26: 02:38:00:50:92:86:45:e2:23:2f:8f:27:42:e7:77: 9f:8b:77:bc:e3:0f:22:39:d9:a8:82:59:e7:ab:fd: 9a:c8:54:8b:1f:b5:4f:d6:9e:91:cb:dd:e1:d2:f1: aa:74:61:55:42:25:ef:e7:2b:ca:20:49:8b:17:28: 7b:5b:9e:19:2a:d2:75:fe:81:69:29:5d:34:ac:68: ea:16:eb:40:7b:a2:ff:4e:6b:7e:5d:fe:5d:a8:58: f0:2d:f7:66:7d:a8:82:74:38:73:c9:62:cf:65:cb: 37:b3:9f:e0:b5:e0:c3:7e:96:56:30:6d:d4:a0:ec: 42:fa:af:48:bf:ae:f9:89:f9:8d:c6:4a:fa:34:09: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E4:79:09:1A:17:5C:4C:3F:55:58:2D:86:06:D3:79:8C:5D:67:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85dbd267-2be3-373a-8cbd-143e69dd6c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a4:f9:55:e0:98:04:86:89:94:4a:b0:9b:be:5f:01:2b:7d: db:54:21:80:b7:cc:b5:c0:47:5a:2e:dc:23:5a:b2:bc:24:20: 3a:37:22:d5:42:da:68:f4:d2:4e:e7:75:18:cd:1e:2f:e0:08: 77:d0:53:0c:cc:83:5c:c0:e1:d7:c8:f1:d5:3a:16:e9:b5:e3: c7:d9:3c:d1:02:ad:2d:b3:e6:93:da:7f:c5:45:4a:04:3d:b2: 1d:cc:69:1c:4d:fa:49:cc:85:f1:9c:8e:40:be:36:85:e7:07: 83:34:9d:22:a6:06:45:f6:bb:d3:9b:30:e1:75:30:7b:cf:dc: 7f:c2:74:26:86:b0:c4:ff:c8:b1:ff:64:e8:77:a1:ac:17:94: e6:02:de:3f:95:e1:5f:30:88:d2:97:13:8a:08:61:05:a5:fa: 80:b4:99:34:25:d0:a0:6d:bb:58:18:db:a4:35:c5:73:4a:ba: 5e:ce:cf:95:04:df:d5:54:fd:88:40:56:fc:19:5f:47:18:8a: 2d:6c:9f:2d:24:32:a3:57:c2:9a:e7:b2:45:47:5b:a6:6a:d0: a4:57:a6:46:bf:b2:10:8a:19:85:1f:23:af:48:51:42:1b:29: d6:f0:29:b9:99:ff:6c:d0:f3:6d:54:ec:96:cb:5c:47:2e:bd: 19:c7:e1:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG241frW6lqUhQ2fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjI0ZmFmNDAtZjU0My00ZTRkLTk4MjctMDU2NDlkNGZiNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9wEbS/g1FMxxrcM6HLqwWr4umMB8+r8wMkX l4CVBA7Hq0WXAxuQCXeChQNd/Z8MLTrAkEec3zxlbMCeBDzfrZbKDIRCAwas4Fej oXZEMJjBVCVD9vE7D5wltjh3rYngy1pzHxaS9hEyrjp6u9S5l2Oedln1WiYCOABQ koZF4iMvjydC53efi3e84w8iOdmoglnnq/2ayFSLH7VP1p6Ry93h0vGqdGFVQiXv 5yvKIEmLFyh7W54ZKtJ1/oFpKV00rGjqFutAe6L/Tmt+Xf5dqFjwLfdmfaiCdDhz yWLPZcs3s5/gteDDfpZWMG3UoOxC+q9Iv675ifmNxkr6NAlAiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3keQkaF1xMP1VYLYYG03mMXWeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODVkYmQyNjctMmJlMy0z NzNhLThjYmQtMTQzZTY5ZGQ2YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2k+VXgmASGiZRKsJu+XwErfdtUIYC3zLXAR1ou3CNasrwkIDo3ItVC 2mj00k7ndRjNHi/gCHfQUwzMg1zA4dfI8dU6Fum148fZPNECrS2z5pPaf8VFSgQ9 sh3MaRxN+knMhfGcjkC+NoXnB4M0nSKmBkX2u9ObMOF1MHvP3H/CdCaGsMT/yLH/ ZOh3oawXlOYC3j+V4V8wiNKXE4oIYQWl+oC0mTQl0KBtu1gY26Q1xXNKul7Oz5UE 39VU/YhAVvwZX0cYii1sny0kMqNXwprnskVHW6Zq0KRXpka/shCKGYUfI69IUUIb KdbwKbmZ/2zQ821U7JbLXEcuvRnH4cQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:25 2025 by rpki-client