$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa File: 8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa (raw, json) Hash identifier: UXjf8hdgJxXQ9NwsNOi+YUpDtE/wXfbr6zQc1xkGMR4= Subject key identifier: 7A:08:D0:52:2D:53:00:52:C3:18:C9:AC:4A:2D:94:A6:7E:A5:F9:93 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF428C37CB92E434B7400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.138.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f4:28:c3:7c:b9:2e:43:4b:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=896d9a6d-9814-45ce-916b-0750831b0248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:09:31:09:5e:66:84:4a:31:fc:f3:90:50: b3:9a:fd:6b:11:aa:ed:84:59:aa:20:51:17:ba:8c: 9f:43:f3:36:8e:e9:51:81:c3:67:ee:5b:f9:d0:6c: 11:b5:d5:a4:53:1f:b6:d6:38:26:39:36:d2:3e:9e: a1:72:84:a3:72:9e:29:21:ee:4a:9d:18:7f:fc:34: f1:29:7c:81:5e:94:be:61:db:f3:67:88:b5:94:98: 86:fb:d9:8c:55:47:be:a9:84:e8:13:23:c8:1f:14: 96:ac:c8:c3:af:8e:e5:36:65:f9:71:81:5f:87:93: c0:82:d4:73:c9:ed:54:df:dd:f4:6d:d1:29:97:6a: 89:65:2e:27:b7:2b:27:2b:88:16:f0:03:48:77:a0: 10:a3:f2:d6:93:e1:28:f3:d9:22:e1:4e:58:e0:7e: bc:24:c7:4b:8e:da:c8:e2:37:2c:10:d4:f5:a4:76: 6d:70:03:be:24:37:f7:e5:95:fd:b9:3f:10:0f:16: 6b:e1:bd:4d:b3:62:59:58:db:f8:25:be:eb:51:20: 36:d2:a0:a0:4a:56:80:44:7b:f7:2e:7d:99:c3:3e: b2:81:75:e0:e1:c2:40:e1:b9:6f:cb:69:0e:22:8f: a1:4c:d7:f8:8c:c2:ba:5f:25:0c:a4:2e:f1:e4:09: 28:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:08:D0:52:2D:53:00:52:C3:18:C9:AC:4A:2D:94:A6:7E:A5:F9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d8:30:cc:b3:0a:33:9d:a4:75:37:b6:6d:12:52:a2:67:f0: f2:79:1d:1f:8c:2f:4a:02:6c:4e:0f:89:12:8a:8b:a5:66:db: 9b:23:80:c8:f3:89:3d:11:5e:17:06:d6:3a:25:7a:e7:5a:db: 41:e3:82:7a:83:ad:54:8d:3b:5c:78:9a:67:ba:eb:bb:5f:37: 88:06:05:5c:1c:8f:ca:96:a1:d0:6a:9e:48:e9:2d:6b:26:43: 94:b4:ea:d6:57:cc:6a:37:70:cd:2c:10:6c:ed:3a:1f:e2:46: 58:b3:3a:42:4c:e6:13:78:59:dd:2d:a5:20:80:73:52:b0:c9: 6f:46:04:87:db:de:73:48:c7:c1:3e:db:68:f3:c0:b1:77:df: 2e:6b:35:33:2b:f6:fe:50:5a:2f:01:12:b2:e1:66:25:28:df: ab:16:f1:2e:39:ef:9c:aa:5a:be:e6:ba:12:f1:01:74:d3:bf: 57:2f:77:02:63:8c:e3:60:24:76:41:90:2a:0d:26:c1:1b:47: f9:64:5b:97:39:16:39:0c:1e:21:d7:ea:73:20:b1:b5:65:74: 4b:ca:58:2d:b1:a9:93:14:bf:f0:6a:ed:ca:33:62:93:df:7d: 38:52:03:19:e6:e2:cd:b0:8e:2c:65:8a:2f:46:a8:79:80:66: 3e:b7:00:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/Qow3y5LkNLdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODk2ZDlhNmQtOTgxNC00NWNlLTkxNmItMDc1MDgzMWIwMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN4JMQleZoRKMfzzkFCzmv1rEarthFmqIFEX uoyfQ/M2julRgcNn7lv50GwRtdWkUx+21jgmOTbSPp6hcoSjcp4pIe5KnRh//DTx KXyBXpS+YdvzZ4i1lJiG+9mMVUe+qYToEyPIHxSWrMjDr47lNmX5cYFfh5PAgtRz ye1U3930bdEpl2qJZS4ntysnK4gW8ANId6AQo/LWk+Eo89ki4U5Y4H68JMdLjtrI 4jcsENT1pHZtcAO+JDf35ZX9uT8QDxZr4b1Ns2JZWNv4Jb7rUSA20qCgSlaARHv3 Ln2Zwz6ygXXg4cJA4blvy2kOIo+hTNf4jMK6XyUMpC7x5AkofQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoI0FItUwBSwxjJrEotlKZ+pfmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGM0ZGM2YWMtNmQyOS0z YTBhLWIyY2YtYTJmMTllZDk5NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIopAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDYMMyzCjOdpHU3tm0SUqJn8PJ5HR+ML0oCbE4PiRKKi6Vm25sjgMjz iT0RXhcG1joleuda20HjgnqDrVSNO1x4mme667tfN4gGBVwcj8qWodBqnkjpLWsm Q5S06tZXzGo3cM0sEGztOh/iRlizOkJM5hN4Wd0tpSCAc1KwyW9GBIfb3nNIx8E+ 22jzwLF33y5rNTMr9v5QWi8BErLhZiUo36sW8S4575yqWr7muhLxAXTTv1cvdwJj jONgJHZBkCoNJsEbR/lkW5c5FjkMHiHX6nMgsbVldEvKWC2xqZMUv/Bq7cozYpPf fThSAxnm4s2wjixlii9GqHmAZj63ABI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:50 2025 by rpki-client