$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2f5295-a881-3657-b274-38df78fdc035.roa File: 8e2f5295-a881-3657-b274-38df78fdc035.roa (raw, json) Hash identifier: 4CN0D1VG5JbqfV6TbdrkScIgejFCFXncwmrXV369E10= Subject key identifier: 67:33:99:BE:36:08:D8:9D:E1:3F:23:86:8E:AE:E7:FD:37:38:0C:82 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD735270EA4DF5A906E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2f5295-a881-3657-b274-38df78fdc035.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.69.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d7:35:27:0e:a4:df:5a:90:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=3edb5e69-6bb1-4eb8-87fb-d516abc0d9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:af:86:cb:55:ca:40:83:58:cc:b1:90:9b:e6: 1a:ee:08:6e:55:8d:26:96:b7:91:5e:72:70:98:75: 38:aa:1d:ca:0e:47:f8:ac:01:4f:c1:ea:24:f5:24: fd:80:5e:5c:1a:ea:cc:eb:eb:c6:b9:d5:35:82:88: 8e:7f:4f:1e:6f:5d:b3:33:dc:51:ff:84:7c:ef:d7: 9e:c7:54:b0:61:a9:f2:f0:c8:dd:cf:74:9e:ff:fe: 2c:65:f2:7b:7e:40:24:09:4e:d8:fb:84:be:2f:18: 00:c5:15:91:fb:07:3c:54:d4:5b:59:00:c6:54:88: d7:8a:bc:3d:1d:85:08:21:90:85:55:30:e5:17:b4: ea:12:8c:31:06:a5:25:8a:de:f7:1e:f6:a1:2c:af: d1:36:a2:ae:3e:68:bf:0c:da:11:1c:a9:03:14:75: a1:cb:ab:2a:d8:47:a9:d9:a5:2c:46:57:29:0a:fc: e3:fe:1e:b8:e7:96:f4:84:03:f3:54:9d:fc:a8:77: 12:e3:ce:21:90:1d:49:4f:81:bf:a1:9e:9f:f0:eb: d1:16:93:85:96:21:92:40:ed:d0:36:18:32:d4:ea: f6:51:d0:ce:c9:34:a9:9c:e0:84:54:c7:c3:bc:9e: c8:ae:af:3c:a1:e7:54:c7:48:78:a0:fa:43:88:87: 8f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:33:99:BE:36:08:D8:9D:E1:3F:23:86:8E:AE:E7:FD:37:38:0C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2f5295-a881-3657-b274-38df78fdc035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:14:ca:cf:f8:e3:1c:27:99:fa:f4:15:d2:f0:94:d9:8d:5f: 02:d1:71:8a:27:a8:74:25:0e:cb:c0:5d:02:7e:0c:d5:72:6a: 9f:54:53:2e:c4:6d:94:14:d8:c8:c9:43:17:c0:16:12:34:e2: 13:03:e8:25:57:34:db:08:52:07:fb:7f:85:66:2e:70:c6:cd: 68:8d:82:1a:98:56:65:61:3b:c1:86:72:e3:b7:e9:72:fa:a4: ad:10:25:38:77:3f:81:d1:a4:d2:fb:93:2a:a9:24:84:99:ec: aa:51:26:ca:d4:72:c1:8a:02:ba:56:96:b0:cb:e2:f5:47:43: d8:e0:20:fb:f6:17:90:2b:78:7f:86:f0:48:f8:eb:e9:27:c9: 42:dc:60:a9:1b:f9:29:4d:30:c2:7d:86:52:c3:95:97:68:b2: 72:2b:cd:b9:7e:6d:bf:d9:7f:de:10:7a:de:71:78:3c:43:82: d2:fe:fe:1c:dc:8e:db:5d:5a:87:eb:b7:59:44:f0:75:43:c4: 74:65:8f:fd:c5:12:91:b5:4b:12:66:0a:4b:30:f6:0c:90:3e: 03:33:7c:f3:08:b9:ef:57:f5:e3:17:a6:38:8b:53:e7:cf:a4: 88:53:72:82:5c:9c:be:0a:9c:97:31:41:0b:06:4e:ac:6d:25: cd:80:6f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29c1Jw6k31qQboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk M2VkYjVlNjktNmJiMS00ZWI4LTg3ZmItZDUxNmFiYzBkOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq+Gy1XKQINYzLGQm+Ya7ghuVY0mlreRXnJw mHU4qh3KDkf4rAFPweok9ST9gF5cGurM6+vGudU1goiOf08eb12zM9xR/4R879ee x1SwYany8Mjdz3Se//4sZfJ7fkAkCU7Y+4S+LxgAxRWR+wc8VNRbWQDGVIjXirw9 HYUIIZCFVTDlF7TqEowxBqUlit73HvahLK/RNqKuPmi/DNoRHKkDFHWhy6sq2Eep 2aUsRlcpCvzj/h6455b0hAPzVJ38qHcS484hkB1JT4G/oZ6f8OvRFpOFliGSQO3Q Nhgy1Or2UdDOyTSpnOCEVMfDvJ7Irq88oedUx0h4oPpDiIePLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGczmb42CNid4T8jho6u5/03OAyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGUyZjUyOTUtYTg4MS0z NjU3LWIyNzQtMzhkZjc4ZmRjMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUUys/44xwnmfr0FdLwlNmNXwLRcYonqHQlDsvAXQJ+DNVyap9UUy7E bZQU2MjJQxfAFhI04hMD6CVXNNsIUgf7f4VmLnDGzWiNghqYVmVhO8GGcuO36XL6 pK0QJTh3P4HRpNL7kyqpJISZ7KpRJsrUcsGKArpWlrDL4vVHQ9jgIPv2F5AreH+G 8Ej46+knyULcYKkb+SlNMMJ9hlLDlZdosnIrzbl+bb/Zf94Qet5xeDxDgtL+/hzc jttdWofrt1lE8HVDxHRlj/3FEpG1SxJmCksw9gyQPgMzfPMIue9X9eMXpjiLU+fP pIhTcoJcnL4KnJcxQQsGTqxtJc2Abyk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:18 2025 by rpki-client