$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa File: 8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa (raw, json) Hash identifier: 5npQknlt0BjnVA3lwn5MCXifwAXPWhGRUqtLXn7FjvM= Subject key identifier: 7E:62:14:4D:AA:6F:AD:1B:41:E6:1A:76:B0:8C:17:BF:0B:80:FF:D5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD4BC7E3DE24350539740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.34.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d4:bc:7e:3d:e2:43:50:53:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=528151bb-bda4-4049-a189-a47e88d2ea71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:37:9e:8d:e2:09:45:61:ab:df:a8:8c:5b: 45:43:b4:3a:78:0c:54:63:11:d7:d2:35:a3:5c:a3: d3:81:8e:8c:83:a1:b3:8d:d9:ea:06:9b:3a:79:8e: b3:6f:7a:52:a5:75:3f:89:41:82:1f:f7:59:be:e7: 52:be:e2:07:0d:87:33:52:e1:ea:54:ea:38:42:4f: 16:bb:00:ae:a9:cd:31:f0:06:c0:13:70:31:17:99: 51:e8:2b:6c:f0:e2:16:5e:af:50:55:77:7b:bd:7c: 83:92:dc:ff:b3:98:df:3c:dc:b6:e7:fd:87:8b:b8: 03:f7:85:29:f0:94:49:d5:ff:67:40:f1:be:6c:e1: 23:e4:f6:3f:b5:7e:f8:a7:3b:1f:78:0b:af:06:41: 6d:97:4a:29:4c:6c:e1:11:4c:fc:5e:ab:40:6c:58: a2:dc:00:d1:c6:64:d9:3a:30:8b:0f:ac:dc:e2:09: 55:b9:71:45:0e:80:e1:35:8f:8a:e5:2b:49:43:90: f1:f6:ad:14:cd:47:71:94:93:ec:1f:a3:e3:7c:ce: ba:69:9a:ac:93:6e:cc:75:b2:c9:b5:6c:11:0b:18: 15:1a:9a:59:79:31:4c:52:0d:dd:4b:50:64:29:45: c6:f5:fe:f3:49:9a:71:6c:1e:b1:08:48:1b:9a:e6: 43:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:62:14:4D:AA:6F:AD:1B:41:E6:1A:76:B0:8C:17:BF:0B:80:FF:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.34.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:47:72:1e:bb:f3:8d:31:a9:be:0d:23:51:71:e0:02:f4:f9: 0c:67:91:79:86:cf:79:32:be:d0:b3:a8:8b:69:9d:44:e4:e1: dc:b5:10:6e:2e:0d:51:ff:53:17:44:b8:6e:aa:01:4d:bd:36: b3:83:ae:81:c3:d0:14:f5:6b:1e:f5:ce:ca:ce:58:ac:ab:d7: 2a:69:c4:dc:a7:03:97:83:08:93:ac:b5:3c:48:f8:b6:e1:0a: 94:3f:17:46:95:1a:52:9b:24:e7:ab:4a:53:68:9e:71:70:be: a5:1c:e4:18:d8:69:c6:55:72:80:84:7f:29:e6:37:a3:56:32: 47:09:c3:88:45:d6:cc:a0:4f:9a:b3:19:85:63:91:73:96:80: 12:56:db:2d:e1:4d:63:b8:55:95:11:f7:25:ea:29:81:3b:19: ae:d7:37:26:5a:9c:e6:37:15:9c:f3:64:ec:a2:64:49:bd:64: 7b:14:dc:74:0c:bf:a3:e4:f8:32:76:7f:b0:8c:39:75:93:43: 07:c6:a0:13:22:2e:0e:dd:12:e2:b6:66:b5:35:5e:08:cc:ad: d5:42:f4:7c:58:e6:1e:76:4b:66:9d:50:98:69:77:bb:5b:b9: 80:6c:a9:00:59:e3:35:61:b4:71:75:b8:e7:46:a8:45:7e:26: 7a:5c:e4:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29S8fj3iQ1BTl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NTI4MTUxYmItYmRhNC00MDQ5LWExODktYTQ3ZTg4ZDJlYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZE3no3iCUVhq9+ojFtFQ7Q6eAxUYxHX0jWj XKPTgY6Mg6GzjdnqBps6eY6zb3pSpXU/iUGCH/dZvudSvuIHDYczUuHqVOo4Qk8W uwCuqc0x8AbAE3AxF5lR6Cts8OIWXq9QVXd7vXyDktz/s5jfPNy25/2Hi7gD94Up 8JRJ1f9nQPG+bOEj5PY/tX74pzsfeAuvBkFtl0opTGzhEUz8XqtAbFii3ADRxmTZ OjCLD6zc4glVuXFFDoDhNY+K5StJQ5Dx9q0UzUdxlJPsH6PjfM66aZqsk27MdbLJ tWwRCxgVGppZeTFMUg3dS1BkKUXG9f7zSZpxbB6xCEgbmuZDnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5iFE2qb60bQeYadrCMF78LgP/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGFmMGUxM2YtNjJjNC0z MmNkLWI4ZTYtNTJlOWYwZmVjMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIiLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1Hch67840xqb4NI1Fx4AL0+QxnkXmGz3kyvtCzqItpnUTk4dy1EG4u DVH/UxdEuG6qAU29NrODroHD0BT1ax71zsrOWKyr1yppxNynA5eDCJOstTxI+Lbh CpQ/F0aVGlKbJOerSlNonnFwvqUc5BjYacZVcoCEfynmN6NWMkcJw4hF1sygT5qz GYVjkXOWgBJW2y3hTWO4VZUR9yXqKYE7Ga7XNyZanOY3FZzzZOyiZEm9ZHsU3HQM v6Pk+DJ2f7CMOXWTQwfGoBMiLg7dEuK2ZrU1XgjMrdVC9HxY5h52S2adUJhpd7tb uYBsqQBZ4zVhtHF1uOdGqEV+Jnpc5Mc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:33 2025 by rpki-client