$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/900a292b-8892-3e6a-8710-e6bd1171ce27.roa File: 900a292b-8892-3e6a-8710-e6bd1171ce27.roa (raw, json) Hash identifier: TQWFjWy8bDlY94KuWq0zo9NOoyXPLUpv8Zpx1MHVU7o= Subject key identifier: 1C:01:26:EE:9A:37:61:DB:23:6B:2E:04:3D:8B:37:3E:FD:E1:A3:8A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBCEED7FB1C56CAE0CE290 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/900a292b-8892-3e6a-8710-e6bd1171ce27.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.89.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ce:ed:7f:b1:c5:6c:ae:0c:e2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0f1a090b-5068-4dcf-98ec-5a7dd9e280ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:83:fa:aa:8f:a4:63:85:ed:98:fd:ff:27:ed: e5:d3:31:12:de:43:0c:15:65:7f:dd:63:01:f1:17: 94:01:ac:6f:a4:5b:43:c1:4b:4f:48:b7:f4:71:80: 8b:f1:a5:15:6f:93:62:24:3f:49:1e:92:61:33:80: de:0d:6c:df:ea:22:6a:9a:ea:de:38:1a:8e:b6:29: 48:7d:fc:eb:71:91:51:28:f3:df:6f:6a:9c:8d:96: 11:c0:7a:92:7c:03:e2:9c:d4:fa:99:a1:87:5e:b8: 4b:1f:d8:ee:5c:5f:1d:4a:e8:1b:02:1a:e0:98:69: b2:72:d8:67:6a:ac:7b:7d:20:cd:4c:ee:ea:58:92: 37:b6:93:bc:27:a4:4f:cf:65:7b:bf:23:20:fd:eb: 97:c6:60:46:5e:1c:cf:67:15:94:8e:60:a8:f5:1c: 7c:e0:b6:ed:56:a9:26:f8:80:54:b7:fd:bc:4c:47: e4:34:b9:c6:b1:29:71:da:15:25:65:b8:54:c5:3b: 07:cb:33:6c:52:18:81:13:ba:d6:c9:da:55:0c:4c: c4:b1:89:25:de:e9:b4:e8:c9:9d:ed:c5:bc:ac:e2: 14:56:13:c9:cd:e8:cc:4e:7c:03:e2:94:7f:1a:cc: 45:a1:1b:69:d2:69:0d:97:30:11:a2:ac:bd:04:23: 85:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:01:26:EE:9A:37:61:DB:23:6B:2E:04:3D:8B:37:3E:FD:E1:A3:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/900a292b-8892-3e6a-8710-e6bd1171ce27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:0a:08:29:2c:c9:15:29:ce:6e:76:04:53:c1:ec:e6:44:86: 0b:a5:e2:2e:91:93:ec:44:b7:f9:de:ef:a8:9a:a2:6f:f2:aa: 47:aa:e7:57:e6:6a:19:42:d5:ef:2e:23:4a:16:cf:7b:6a:86: ba:9c:88:95:9f:47:56:b6:9d:d6:1f:86:93:c3:fd:bb:b3:1a: 0f:40:39:c8:19:01:0e:86:7a:09:41:46:50:6d:0f:88:aa:35: 43:c4:86:3a:1c:52:ea:d1:9a:66:7c:e9:03:6d:b0:0f:9e:49: 98:20:ad:e6:87:32:58:8e:ef:e4:fc:e9:f4:45:11:69:e5:cb: 21:d7:59:a3:ed:bc:51:76:37:0d:48:d2:07:05:14:3a:0d:74: 37:60:a1:4e:80:6c:cc:22:7e:91:e1:bc:b3:c0:ff:94:da:d9: e0:7e:ff:91:ae:af:80:86:88:67:ff:6f:eb:0a:6d:e6:28:d3: ae:65:73:56:4a:fa:7b:70:3e:8a:2e:7c:00:13:04:f9:36:2e: 52:a5:be:c7:c2:cf:db:48:4b:64:0f:3a:fa:9d:73:68:c4:4b: ad:a5:47:85:fd:cb:74:4e:c1:9e:80:a3:bd:55:55:95:4c:3d: 59:61:98:2d:a4:7f:95:43:a7:4f:f3:76:ce:be:a6:55:53:b9: 5d:73:0a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG287tf7HFbK4M4pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGYxYTA5MGItNTA2OC00ZGNmLTk4ZWMtNWE3ZGQ5ZTI4MGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YP6qo+kY4XtmP3/J+3l0zES3kMMFWV/3WMB 8ReUAaxvpFtDwUtPSLf0cYCL8aUVb5NiJD9JHpJhM4DeDWzf6iJqmureOBqOtilI ffzrcZFRKPPfb2qcjZYRwHqSfAPinNT6maGHXrhLH9juXF8dSugbAhrgmGmycthn aqx7fSDNTO7qWJI3tpO8J6RPz2V7vyMg/euXxmBGXhzPZxWUjmCo9Rx84LbtVqkm +IBUt/28TEfkNLnGsSlx2hUlZbhUxTsHyzNsUhiBE7rWydpVDEzEsYkl3um06Mmd 7cW8rOIUVhPJzejMTnwD4pR/GsxFoRtp0mkNlzARoqy9BCOFbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwBJu6aN2HbI2suBD2LNz794aOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTAwYTI5MmItODg5Mi0z ZTZhLTg3MTAtZTZiZDExNzFjZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIllgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkKCCksyRUpzm52BFPB7OZEhgul4i6Rk+xEt/ne76iaom/yqkeq51fm ahlC1e8uI0oWz3tqhrqciJWfR1a2ndYfhpPD/buzGg9AOcgZAQ6GeglBRlBtD4iq NUPEhjocUurRmmZ86QNtsA+eSZggreaHMliO7+T86fRFEWnlyyHXWaPtvFF2Nw1I 0gcFFDoNdDdgoU6AbMwifpHhvLPA/5Ta2eB+/5Gur4CGiGf/b+sKbeYo065lc1ZK +ntwPooufAATBPk2LlKlvsfCz9tIS2QPOvqdc2jES62lR4X9y3ROwZ6Ao71VVZVM PVlhmC2kf5VDp0/zds6+plVTuV1zCig= -----END CERTIFICATE-----Generated at Tue Jul 22 11:57:11 2025 by rpki-client