$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d8cc26-2181-3324-a473-ee0b0e445357.roa File: 87d8cc26-2181-3324-a473-ee0b0e445357.roa (raw, json) Hash identifier: aDh6mqSj0fWgl78/yA64BpCaMAVO/4v9AMb0cse+JI0= Subject key identifier: 80:68:51:FD:67:30:69:CF:79:75:C5:B8:E6:9C:D5:88:2D:07:25:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A920636542C4690FCDF870440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d8cc26-2181-3324-a473-ee0b0e445357.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 19527 IP address blocks: 34.0.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:36:54:2c:46:90:fc:df:87:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=9bc2d2db-f1e1-4bd2-ab78-be7da0ab4111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d0:ed:f7:1e:a3:bc:cc:77:4a:89:f4:97:80: 7f:d3:84:4b:f0:7b:0e:5b:8c:ec:9c:bf:98:41:13: a4:8d:b8:e3:b5:f8:cd:0a:6a:dc:4e:98:67:cc:39: ea:fe:57:01:7d:ed:4b:c2:e6:6f:11:fa:93:7b:16: 40:82:48:56:e1:51:bf:fd:9c:d7:d7:2d:fc:04:84: 82:cb:9d:cd:bf:ac:3b:fc:9c:dc:2d:0d:92:99:f0: 49:45:60:2b:85:57:4c:77:0d:9b:fd:ce:fd:55:78: a0:b9:cd:1e:ff:9a:04:d4:03:2a:0f:f9:6e:d0:29: 0a:11:2f:8b:25:ef:82:dd:77:ac:2c:c9:f9:c3:b5: ae:31:19:a7:2c:26:64:8a:e9:d5:e7:0a:92:a6:5e: bd:88:ea:b1:6d:71:9f:bc:9e:ab:b4:66:4b:d4:88: 23:e9:2f:2d:cc:4e:ec:10:e9:94:16:dc:c2:7b:e5: 97:9e:94:5c:5f:6c:26:e9:59:d1:e3:26:ca:47:41: 5a:48:29:27:e3:52:46:74:48:c6:5d:17:3c:58:4f: ae:d7:b7:5b:ff:0f:c9:f4:9c:cc:3e:97:c3:89:8a: bc:72:2f:b3:94:84:9d:3a:e4:04:fb:e7:bf:ce:f7: 47:26:9f:b9:1b:3f:7c:fe:2e:bc:bd:0a:73:e1:6a: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:68:51:FD:67:30:69:CF:79:75:C5:B8:E6:9C:D5:88:2D:07:25:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d8cc26-2181-3324-a473-ee0b0e445357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:62:85:63:7e:1d:d2:d9:95:4e:77:a0:7a:d0:0b:d2:cc:de: 97:5f:93:7e:63:ee:10:a5:ce:84:e8:65:32:ae:76:89:a1:20: 95:66:eb:20:67:df:6f:d6:42:f9:ca:d1:c5:9a:80:43:7d:6e: 10:00:de:ea:c3:3a:14:20:d6:c5:2e:e0:45:f5:f4:ee:25:75: 0d:da:3b:75:d3:53:4a:9f:c3:e9:1b:54:62:09:5b:35:dc:b5: ba:60:26:7c:c8:52:f2:69:ec:dd:53:fb:ce:e1:30:d9:06:51: 64:9f:40:13:15:07:b7:ae:fc:5c:55:e4:18:cc:87:81:bb:86: fe:41:62:a0:44:60:6a:89:c3:a4:d2:1b:f9:68:0d:08:dd:6e: 05:fd:ad:f6:2a:d9:1f:b3:e4:c9:51:14:2e:02:4d:d2:38:bb: cb:bb:d9:d0:61:f9:10:b5:74:48:6c:64:a8:5b:1b:84:a6:6d: 7d:91:3c:51:be:d5:4e:e2:f8:58:9d:24:5c:9b:ec:30:d4:fe: e1:40:c7:1b:cd:77:ad:c0:24:ed:4b:cb:fd:61:7c:94:a9:a7: a1:40:e8:0a:af:e7:72:32:d5:10:7b:2a:62:36:55:9d:d5:de: a8:9c:4f:63:20:6d:33:6c:8d:31:f5:57:84:ed:3a:57:7e:3a: e8:3e:e8:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqSBjZULEaQ/N+HBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk OWJjMmQyZGItZjFlMS00YmQyLWFiNzgtYmU3ZGEwYWI0MTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dDt9x6jvMx3Son0l4B/04RL8HsOW4zsnL+Y QROkjbjjtfjNCmrcTphnzDnq/lcBfe1LwuZvEfqTexZAgkhW4VG//ZzX1y38BISC y53Nv6w7/JzcLQ2SmfBJRWArhVdMdw2b/c79VXiguc0e/5oE1AMqD/lu0CkKES+L Je+C3XesLMn5w7WuMRmnLCZkiunV5wqSpl69iOqxbXGfvJ6rtGZL1Igj6S8tzE7s EOmUFtzCe+WXnpRcX2wm6VnR4ybKR0FaSCkn41JGdEjGXRc8WE+u17db/w/J9JzM PpfDiYq8ci+zlISdOuQE++e/zvdHJp+5Gz98/i68vQpz4WqEeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBoUf1nMGnPeXXFuOac1YgtByVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODdkOGNjMjYtMjE4MS0z MzI0LWE0NzMtZWUwYjBlNDQ1MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlihWN+HdLZlU53oHrQC9LM3pdfk35j7hClzoToZTKudomhIJVm6yBn 32/WQvnK0cWagEN9bhAA3urDOhQg1sUu4EX19O4ldQ3aO3XTU0qfw+kbVGIJWzXc tbpgJnzIUvJp7N1T+87hMNkGUWSfQBMVB7eu/FxV5BjMh4G7hv5BYqBEYGqJw6TS G/loDQjdbgX9rfYq2R+z5MlRFC4CTdI4u8u72dBh+RC1dEhsZKhbG4SmbX2RPFG+ 1U7i+FidJFyb7DDU/uFAxxvNd63AJO1Ly/1hfJSpp6FA6Aqv53Iy1RB7KmI2VZ3V 3qicT2MgbTNsjTH1V4TtOld+Oug+6GQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:59 2025 by rpki-client