$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/870faec0-ceae-3791-b0ff-c3a845dedae6.roa File: 870faec0-ceae-3791-b0ff-c3a845dedae6.roa (raw, json) Hash identifier: C0mbXzYN8ECN/oA5U4TGkClZEwdg+505R7cYj65u43o= Subject key identifier: 77:77:BA:49:CC:EC:C1:1A:10:79:AD:02:1D:E0:78:76:29:62:5E:06 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBAC55BF8E856EB3D8D700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/870faec0-ceae-3791-b0ff-c3a845dedae6.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.147.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ac:55:bf:8e:85:6e:b3:d8:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2632cfc1-adbd-4fa6-8f00-2aca0c93ec4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5e:0d:2b:74:89:6c:ce:87:ec:0d:d6:01:e3: 4d:ea:48:16:21:4d:94:64:ca:fc:f1:ce:69:1d:dc: a4:35:d5:a1:26:db:2b:71:84:6a:59:70:d3:ea:b8: ea:09:29:6b:3e:29:e1:71:5c:b8:b1:82:cf:c6:a0: b6:19:b3:0d:44:c8:70:da:c2:2f:ed:79:68:ad:de: 68:f5:d7:ed:52:0f:b4:92:f5:7d:5c:ae:82:e0:a3: 43:2a:37:56:f4:cc:c0:a0:e1:b5:7f:3f:be:38:1c: c5:65:f3:18:62:ae:e3:7d:de:42:a5:d5:fa:48:27: 10:91:16:f2:ee:a5:30:7f:7e:97:3b:5d:ac:ab:32: 42:95:ff:d4:fe:b4:50:08:e1:48:67:90:56:b9:bf: e0:28:32:fc:85:fa:c4:2c:79:88:2f:fd:a6:ba:b5: c0:3b:44:8e:b3:05:6b:da:d2:6b:36:48:29:e8:87: 6a:0a:c5:c4:ac:9a:84:c6:66:73:38:e2:a5:66:88: 8a:a0:81:38:c0:f3:31:24:86:f6:c4:35:f9:d7:be: 0f:73:3e:06:fa:52:6c:96:ee:ec:94:c2:ba:a4:0e: fb:b5:ad:05:9c:8a:67:5b:df:a6:f0:ff:fd:ea:d4: eb:ef:31:b8:90:bb:88:19:fa:f6:c3:8d:0e:f5:50: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:77:BA:49:CC:EC:C1:1A:10:79:AD:02:1D:E0:78:76:29:62:5E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/870faec0-ceae-3791-b0ff-c3a845dedae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a3:a1:15:85:36:a7:66:b3:c7:47:07:eb:41:93:c7:01:48: 37:ab:54:d6:9a:c8:01:09:e6:46:b2:ab:a9:d9:16:09:ce:99: 56:42:bb:81:f7:c8:38:0a:9b:64:e5:4a:f1:a8:c5:1c:6e:4f: 2f:24:9c:3e:03:00:4e:58:d3:21:11:f9:47:fb:d4:5c:cd:73: 38:25:45:2a:14:f8:fe:a5:f9:64:c2:de:df:95:9e:f9:b7:65: 26:1d:04:47:0a:7d:b8:e6:30:09:8f:f1:65:7c:68:f5:05:43: 6f:8e:d3:af:21:bf:b8:63:e3:8c:ca:a1:74:2b:47:9b:10:92: 0f:3a:2a:2b:d5:15:13:99:93:d5:3c:0e:2d:20:c5:c9:1c:33: 60:8d:d2:46:f5:97:42:2f:5b:82:3c:01:b2:b1:a6:62:a8:ca: b2:ad:8d:91:33:a1:dd:8b:00:5d:24:4c:32:bc:2f:04:e2:f2: 16:89:f0:dd:17:48:d7:bb:fe:95:b2:27:7f:9d:c9:53:bc:50: cc:d5:6a:fb:cb:67:08:80:9f:26:23:2d:fc:82:14:8f:34:cb: 5b:e8:24:12:0d:21:1c:0a:83:da:12:23:b5:54:a5:0c:c6:b1: cf:65:ec:c8:e3:4e:01:7e:d2:54:30:48:96:1a:eb:a1:2b:b3: b7:c1:10:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26xVv46FbrPY1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MjYzMmNmYzEtYWRiZC00ZmE2LThmMDAtMmFjYTBjOTNlYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi14NK3SJbM6H7A3WAeNN6kgWIU2UZMr88c5p HdykNdWhJtsrcYRqWXDT6rjqCSlrPinhcVy4sYLPxqC2GbMNRMhw2sIv7Xlord5o 9dftUg+0kvV9XK6C4KNDKjdW9MzAoOG1fz++OBzFZfMYYq7jfd5CpdX6SCcQkRby 7qUwf36XO12sqzJClf/U/rRQCOFIZ5BWub/gKDL8hfrELHmIL/2murXAO0SOswVr 2tJrNkgp6IdqCsXErJqExmZzOOKlZoiKoIE4wPMxJIb2xDX5174Pcz4G+lJslu7s lMK6pA77ta0FnIpnW9+m8P/96tTr7zG4kLuIGfr2w40O9VBoaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHd3uknM7MEaEHmtAh3geHYpYl4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODcwZmFlYzAtY2VhZS0z NzkxLWIwZmYtYzNhODQ1ZGVkYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIejoRWFNqdms8dHB+tBk8cBSDerVNaayAEJ5kayq6nZFgnOmVZCu4H3 yDgKm2TlSvGoxRxuTy8knD4DAE5Y0yER+Uf71FzNczglRSoU+P6l+WTC3t+Vnvm3 ZSYdBEcKfbjmMAmP8WV8aPUFQ2+O068hv7hj44zKoXQrR5sQkg86KivVFROZk9U8 Di0gxckcM2CN0kb1l0IvW4I8AbKxpmKoyrKtjZEzod2LAF0kTDK8LwTi8haJ8N0X SNe7/pWyJ3+dyVO8UMzVavvLZwiAnyYjLfyCFI80y1voJBINIRwKg9oSI7VUpQzG sc9l7MjjTgF+0lQwSJYa66Ers7fBECw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:26 2025 by rpki-client