$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b1c035-9558-350f-b03d-10c709da388f.roa File: 86b1c035-9558-350f-b03d-10c709da388f.roa (raw, json) Hash identifier: YM0i5/6DJhxsoYCdn+tWTCr4Kl6BLXA6Q2r7J5CzXLg= Subject key identifier: 10:1F:1F:C8:0D:D6:B0:42:5A:B3:35:0B:7A:6D:66:55:4B:50:2D:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC21BAA0B29DDB8F4F300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b1c035-9558-350f-b03d-10c709da388f.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.99.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c2:1b:aa:0b:29:dd:b8:f4:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=5fa51379-c4ec-4f5a-88be-59fe5fed7ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8b:b5:f8:fd:6d:bd:b9:29:e9:c8:50:40:01: d5:36:a1:75:d7:42:d9:aa:e4:3b:e0:10:48:d6:07: e3:58:be:1a:c4:9d:08:f9:04:c6:b1:e8:56:90:23: 81:82:a7:31:af:de:70:30:48:0c:07:09:a3:a5:ec: a9:da:57:4b:6c:3d:0a:51:0a:c1:ac:38:fc:50:3f: 8c:fa:ec:6c:45:28:10:72:b6:bc:5d:0e:c2:69:3d: 48:31:ff:12:60:76:fc:d3:c6:5f:55:18:6c:58:6a: 5a:2d:9e:fc:5d:de:ca:b2:69:11:d1:40:90:80:aa: 14:5a:88:a5:ee:cb:25:9c:8f:a4:62:83:7f:9c:6a: ef:1f:3a:01:64:2d:5c:fc:26:61:2f:28:26:5a:be: f2:50:a0:d1:74:79:6a:f0:30:3b:1f:ad:7c:97:e3: 9b:c2:0d:fa:20:a9:57:41:ce:7d:fa:78:a7:04:aa: f3:91:54:ca:8a:32:1b:2e:05:6f:c6:dc:31:90:fe: 6d:bd:24:e5:90:8a:13:c5:f7:e9:d1:79:9c:72:30: 80:0d:fc:bd:1b:ab:bc:c3:9d:fa:90:7d:39:eb:c1: 62:02:3c:5d:03:6f:1c:21:aa:09:37:65:66:04:ee: b8:0b:23:56:25:8b:e7:7b:57:97:92:fe:de:e5:74: 9e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1F:1F:C8:0D:D6:B0:42:5A:B3:35:0B:7A:6D:66:55:4B:50:2D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b1c035-9558-350f-b03d-10c709da388f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f3:dc:ee:92:48:fa:fe:e3:1f:6d:a7:7f:f8:2f:30:4c:63: a3:95:e1:1a:ce:65:ca:ec:c6:b1:5d:44:dc:c1:b3:8a:4a:e7: 6a:2a:81:31:b2:ab:ab:fd:cb:d6:79:2b:62:43:48:d4:8e:55: 1e:18:cc:52:c5:f9:69:61:cd:bd:64:7a:e0:db:10:29:cf:6e: ff:23:f8:87:e5:b1:ff:7f:cf:20:4a:6e:df:e2:c8:51:da:61: 3b:06:f8:d7:b0:05:63:8e:ad:e5:9a:aa:9d:91:73:ab:3b:5a: 5e:35:d2:88:7e:a3:ac:c4:df:52:5e:18:df:6f:bb:0a:df:e2: c7:b5:23:31:a8:04:30:a1:fd:8e:49:45:6f:61:f5:ed:46:cb: d7:ea:41:f6:d5:a4:6f:60:0a:3b:94:b5:35:54:b8:c9:4a:8f: 31:df:52:20:da:d2:f6:87:5f:e2:d7:36:c1:3c:93:6b:ea:20: 73:a1:60:4a:18:c7:fe:c4:3b:45:12:7d:8d:b0:87:7d:72:36: 67:64:81:ac:52:13:cd:89:8a:04:07:b2:bb:67:8c:e6:a1:1f: 63:51:40:e2:11:29:63:66:98:47:cd:87:3d:5e:d5:79:f6:f5: 14:9f:bb:98:ff:fe:a3:0e:ea:31:2d:3f:a9:ca:1c:ff:3b:6e: a6:a3:9d:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28Ibqgsp3bj08wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NWZhNTEzNzktYzRlYy00ZjVhLTg4YmUtNTlmZTVmZWQ3ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34u1+P1tvbkp6chQQAHVNqF110LZquQ74BBI 1gfjWL4axJ0I+QTGsehWkCOBgqcxr95wMEgMBwmjpeyp2ldLbD0KUQrBrDj8UD+M +uxsRSgQcra8XQ7CaT1IMf8SYHb808ZfVRhsWGpaLZ78Xd7KsmkR0UCQgKoUWoil 7sslnI+kYoN/nGrvHzoBZC1c/CZhLygmWr7yUKDRdHlq8DA7H618l+Obwg36IKlX Qc59+ninBKrzkVTKijIbLgVvxtwxkP5tvSTlkIoTxffp0XmccjCADfy9G6u8w536 kH0568FiAjxdA28cIaoJN2VmBO64CyNWJYvne1eXkv7e5XSeNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAfH8gN1rBCWrM1C3ptZlVLUC34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZiMWMwMzUtOTU1OC0z NTBmLWIwM2QtMTBjNzA5ZGEzODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnz3O6SSPr+4x9tp3/4LzBMY6OV4RrOZcrsxrFdRNzBs4pK52oqgTGy q6v9y9Z5K2JDSNSOVR4YzFLF+Wlhzb1keuDbECnPbv8j+Iflsf9/zyBKbt/iyFHa YTsG+NewBWOOreWaqp2Rc6s7Wl410oh+o6zE31JeGN9vuwrf4se1IzGoBDCh/Y5J RW9h9e1Gy9fqQfbVpG9gCjuUtTVUuMlKjzHfUiDa0vaHX+LXNsE8k2vqIHOhYEoY x/7EO0USfY2wh31yNmdkgaxSE82JigQHsrtnjOahH2NRQOIRKWNmmEfNhz1e1Xn2 9RSfu5j//qMO6jEtP6nKHP87bqajnfs= -----END CERTIFICATE-----Generated at Tue Jul 22 04:34:53 2025 by rpki-client