$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/921084d3-b20f-3e0e-b036-8aeddcc4b223.roa File: 921084d3-b20f-3e0e-b036-8aeddcc4b223.roa (raw, json) Hash identifier: tpI86rf+5ypsPYN11zylhT+Ui4x+z+2bkovqpe2XJTc= Subject key identifier: 08:B2:F4:B1:6C:1F:EA:35:8E:DC:62:05:67:94:81:6B:93:CA:4B:5D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8411804ADF3894ED125CB400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/921084d3-b20f-3e0e-b036-8aeddcc4b223.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.108.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:80:4a:df:38:94:ed:12:5c:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=65c76f3a-f908-4f6f-92b2-45cecf1a3fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:08:7c:1c:36:9e:85:11:96:26:4f:3d:11:e9: a9:7a:9c:9c:80:c2:e9:41:f4:09:d6:0a:21:b1:c2: 46:19:0a:39:32:86:b0:e4:1a:61:46:8f:39:ed:14: 8d:83:59:71:bf:f4:b2:be:d4:8b:27:ad:33:19:3f: e8:0a:11:57:78:81:c6:b1:96:1e:08:a6:9f:55:f1: c1:cb:ba:d5:f5:69:90:8a:68:01:d6:77:c5:87:f7: f5:2b:95:22:81:97:78:c5:f2:08:23:9f:88:17:04: ad:44:45:d0:35:45:4b:40:b6:91:1f:95:57:7b:6b: 44:5a:ca:c0:64:ce:cd:06:0a:e2:ec:9d:62:0b:c8: 6d:cc:bf:7e:ac:3f:bd:b2:bb:19:0d:c3:36:1b:69: 6f:db:43:68:35:f6:1a:29:af:67:74:20:9e:56:87: fa:b9:82:8e:7b:fa:cb:a0:f8:39:26:2e:36:51:29: d1:1c:93:b6:35:36:9b:65:f3:b9:81:6f:e9:64:00: 6c:81:2f:5b:08:0f:ce:21:cd:0b:8d:c0:fa:ea:46: 75:8e:64:24:64:13:62:e7:2c:04:c5:04:50:c3:a8: bb:59:99:21:b2:81:82:e3:86:a8:48:da:e9:de:b3: b0:99:6a:fb:0c:02:1f:1b:c7:23:52:51:b0:8f:9d: 02:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B2:F4:B1:6C:1F:EA:35:8E:DC:62:05:67:94:81:6B:93:CA:4B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/921084d3-b20f-3e0e-b036-8aeddcc4b223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b3:0b:3c:ac:41:2c:15:f4:ee:c3:6f:3a:c5:6d:56:66:86: ae:ac:a1:ae:e8:e2:2d:00:f5:10:01:e2:b3:3b:4c:9b:9c:64: 0d:bd:9f:73:80:0e:39:9e:45:86:47:a5:06:c0:60:19:09:1e: 92:9a:90:c9:60:a6:6d:1a:1c:a1:e7:97:a9:84:ac:ed:be:26: 36:c9:67:8a:ee:09:0c:8e:eb:9d:16:61:c1:4c:e3:ee:c2:f8: 7a:5b:ca:ea:0e:57:05:a3:57:94:07:93:10:16:1c:5c:ed:ba: e8:a7:7f:0e:ff:68:90:25:ab:47:69:dd:e7:a6:4c:eb:32:89: 37:87:17:28:fe:8f:d4:f3:e2:09:c0:04:3e:10:b9:85:47:65: 5d:f9:46:bb:96:84:ff:a2:7d:54:5e:ed:b8:8e:24:94:c5:af: 4b:24:38:64:62:25:9a:e1:82:ba:dc:52:15:26:24:8c:e7:8b: 60:0f:be:c9:50:0c:ea:a6:68:b0:0e:ac:51:e5:fb:9a:04:20: 20:5b:c6:48:95:1f:9a:3f:f6:42:19:ee:9e:4c:f8:00:ba:08: 39:af:e5:48:f1:fc:71:0d:67:a2:a9:51:d7:59:75:ac:bd:d1: f4:0d:5c:ad:23:b1:3a:fa:3c:dc:24:2d:8c:f3:31:f9:53:7b: a1:e9:ea:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYBK3ziU7RJctAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjVjNzZmM2EtZjkwOC00ZjZmLTkyYjItNDVjZWNmMWEzZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQh8HDaehRGWJk89EempepycgMLpQfQJ1goh scJGGQo5Moaw5BphRo857RSNg1lxv/SyvtSLJ60zGT/oChFXeIHGsZYeCKafVfHB y7rV9WmQimgB1nfFh/f1K5UigZd4xfIII5+IFwStREXQNUVLQLaRH5VXe2tEWsrA ZM7NBgri7J1iC8htzL9+rD+9srsZDcM2G2lv20NoNfYaKa9ndCCeVof6uYKOe/rL oPg5Ji42USnRHJO2NTabZfO5gW/pZABsgS9bCA/OIc0LjcD66kZ1jmQkZBNi5ywE xQRQw6i7WZkhsoGC44aoSNrp3rOwmWr7DAIfG8cjUlGwj50CVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiy9LFsH+o1jtxiBWeUgWuTyktdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTIxMDg0ZDMtYjIwZi0z ZTBlLWIwMzYtOGFlZGRjYzRiMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABizCzysQSwV9O7DbzrFbVZmhq6soa7o4i0A9RAB4rM7TJucZA29n3OA DjmeRYZHpQbAYBkJHpKakMlgpm0aHKHnl6mErO2+JjbJZ4ruCQyO650WYcFM4+7C +HpbyuoOVwWjV5QHkxAWHFztuuinfw7/aJAlq0dp3eemTOsyiTeHFyj+j9Tz4gnA BD4QuYVHZV35RruWhP+ifVRe7biOJJTFr0skOGRiJZrhgrrcUhUmJIzni2APvslQ DOqmaLAOrFHl+5oEICBbxkiVH5o/9kIZ7p5M+AC6CDmv5Ujx/HENZ6KpUddZday9 0fQNXK0jsTr6PNwkLYzzMflTe6Hp6jk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:34:33 2025 by rpki-client