$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa File: 90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa (raw, json) Hash identifier: LIslJEay/ZTph9v1s3x7MFOx8ycslFGkVfFUmJmkx/0= Subject key identifier: 6F:C3:26:6F:90:0B:FA:27:40:9E:29:0E:E6:4A:99:98:69:9C:48:A8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF1854A149362A49D7000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.71.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f1:85:4a:14:93:62:a4:9d:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=f3a8488f-3119-4acb-b087-5dd9b0b6b59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:ff:77:ca:bd:eb:65:91:76:19:30:7b:13: 39:f1:08:aa:65:0c:d9:3d:6e:02:2a:d0:f4:cc:9a: 59:a1:98:a4:ff:b0:71:7a:f5:57:0e:aa:84:f1:d0: a0:25:d5:9b:a0:79:4a:2d:bc:cf:f9:f9:8b:8a:5a: 97:91:3a:61:34:22:0b:f3:1f:ca:7c:7a:cd:be:77: 32:98:73:5d:f7:c1:d5:d5:61:15:91:ec:28:2f:ef: a9:bc:23:42:36:f4:8d:ac:e3:06:4b:f0:83:08:2c: fe:2e:dc:dc:35:11:cc:47:54:5b:f9:17:e6:28:35: 68:d1:20:4b:32:7d:2f:01:ab:35:2d:f0:7e:1e:f9: 65:84:1b:01:ea:85:79:0c:74:3f:3f:a6:e7:53:69: ae:bf:a6:0b:0a:86:ce:19:81:c9:b0:7a:ca:26:20: d2:49:13:b5:df:b6:fd:0e:6a:c9:bb:9c:8a:3c:14: cc:42:6d:ab:8e:6a:0c:b4:75:66:b0:68:f5:69:87: 9a:fc:c0:8e:82:8d:5f:53:4e:42:ff:13:90:14:d8: 58:6e:10:0f:53:d7:00:d5:8e:ac:3c:e1:f9:89:70: e8:d6:f0:73:2f:c2:c5:4a:d0:80:fa:5b:08:1d:dd: 76:a4:a0:21:47:ce:e8:ef:e9:c6:6c:37:c7:2d:fa: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C3:26:6F:90:0B:FA:27:40:9E:29:0E:E6:4A:99:98:69:9C:48:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e0:98:4d:d0:7e:76:80:9e:f1:aa:f7:c4:81:c2:7d:f9:41: 49:dd:e5:da:a6:80:37:8b:fe:a5:b1:b7:6c:97:61:db:4d:be: 2e:ac:bc:3e:39:d7:a7:81:18:8f:32:77:e3:4d:55:b8:5b:ee: a5:ef:25:c2:e0:23:91:20:ff:c3:61:3d:08:5c:8d:8d:37:05: 7e:42:c9:c7:bd:47:f4:ee:87:64:7d:e0:12:3a:c6:36:9f:47: 6d:cd:9e:8d:27:e5:29:7d:7a:aa:27:30:1a:b3:fd:46:70:4f: 41:bf:9c:1f:6c:10:6d:b3:76:c3:a5:a3:13:df:4a:71:45:7f: 9d:86:4a:2a:0c:ca:2b:08:8b:2d:a7:3d:4f:34:ff:85:f2:6c: 61:be:e0:ff:71:43:6f:e0:02:5a:45:17:bc:61:73:70:36:39: 4a:1a:83:e9:fa:ee:2a:13:20:5a:ce:4b:c8:e0:e2:54:d9:98: fd:ee:83:f2:a6:a1:52:70:38:5f:47:d8:a7:f0:fd:8a:54:72: e7:78:06:8e:66:bc:9f:8a:1a:0c:a4:63:d5:2d:d0:07:1b:17: f0:60:a1:b7:d3:5f:1a:c3:64:9e:83:62:b2:84:da:b6:fd:74: f5:93:c0:01:9b:01:cd:4b:25:3d:75:a0:16:dd:7e:b7:e5:f4: be:e7:1d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/GFShSTYqSdcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjNhODQ4OGYtMzExOS00YWNiLWIwODctNWRkOWIwYjZiNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIP/d8q962WRdhkwexM58QiqZQzZPW4CKtD0 zJpZoZik/7BxevVXDqqE8dCgJdWboHlKLbzP+fmLilqXkTphNCIL8x/KfHrNvncy mHNd98HV1WEVkewoL++pvCNCNvSNrOMGS/CDCCz+LtzcNRHMR1Rb+RfmKDVo0SBL Mn0vAas1LfB+HvllhBsB6oV5DHQ/P6bnU2muv6YLCobOGYHJsHrKJiDSSRO137b9 DmrJu5yKPBTMQm2rjmoMtHVmsGj1aYea/MCOgo1fU05C/xOQFNhYbhAPU9cA1Y6s POH5iXDo1vBzL8LFStCA+lsIHd12pKAhR87o7+nGbDfHLfpMfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/DJm+QC/onQJ4pDuZKmZhpnEioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTBjZWIwZGUtNWE1OS0z ZDM3LWIzMDgtNWY0M2M1ZjlhZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/gmE3QfnaAnvGq98SBwn35QUnd5dqmgDeL/qWxt2yXYdtNvi6svD45 16eBGI8yd+NNVbhb7qXvJcLgI5Eg/8NhPQhcjY03BX5Cyce9R/Tuh2R94BI6xjaf R23Nno0n5Sl9eqonMBqz/UZwT0G/nB9sEG2zdsOloxPfSnFFf52GSioMyisIiy2n PU80/4XybGG+4P9xQ2/gAlpFF7xhc3A2OUoag+n67ioTIFrOS8jg4lTZmP3ug/Km oVJwOF9H2Kfw/YpUcud4Bo5mvJ+KGgykY9Ut0AcbF/BgobfTXxrDZJ6DYrKE2rb9 dPWTwAGbAc1LJT11oBbdfrfl9L7nHXE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:24 2025 by rpki-client