$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96123cd0-e216-3368-bca2-e03366383546.roa File: 96123cd0-e216-3368-bca2-e03366383546.roa (raw, json) Hash identifier: vlqvlwB9t45HYL8CbkKrr3c0mT0QS4YeOupj+LWuCM4= Subject key identifier: C6:9C:90:FF:F6:67:8C:73:3C:9D:29:31:C0:6C:B1:3D:0C:50:FE:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84123048597EFC70D58EFD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96123cd0-e216-3368-bca2-e03366383546.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.104.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:30:48:59:7e:fc:70:d5:8e:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=868bfd58-11ba-4e93-b652-ba15626ebd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:20:8c:ae:57:ed:1b:33:45:38:55:28:9f: ad:e9:a4:94:cb:9e:b0:60:fe:36:53:da:07:46:7b: 63:1c:ea:9b:f7:be:e1:44:95:83:5e:de:f1:a1:08: a7:99:12:07:67:f9:e9:7c:1f:c3:b0:a7:7a:1e:60: aa:0b:e3:5d:b5:9e:36:00:89:4c:47:19:4d:cd:d2: e5:36:f4:52:7b:3f:40:85:a6:00:5b:fb:88:36:17: 5a:01:ce:a6:61:38:f1:b3:0f:a9:35:62:b4:8d:8a: 1b:8b:65:29:5c:96:29:55:bf:84:5e:73:e6:45:39: ae:9b:50:f4:d7:a1:2f:44:87:31:77:c8:48:77:f7: fe:c1:2c:b7:ed:61:98:48:7d:06:92:b9:4e:b5:c0: 03:16:1c:67:07:bf:77:b0:44:4c:8e:89:7a:f6:0b: 65:57:76:3b:f7:f1:38:ba:b5:33:ed:03:b0:f4:84: 66:6b:57:e5:5c:01:3d:b5:a3:01:38:ae:bf:53:b3: f2:a6:f8:18:5b:25:7c:52:1b:75:0c:45:e5:85:93: 0d:04:83:5b:69:79:d6:23:7e:8b:90:05:0d:ce:3c: 36:df:46:0d:07:2c:52:f5:69:c7:6e:31:64:70:18: 0d:15:bd:fe:5a:2c:47:f5:fd:95:3b:f5:af:65:57: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9C:90:FF:F6:67:8C:73:3C:9D:29:31:C0:6C:B1:3D:0C:50:FE:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96123cd0-e216-3368-bca2-e03366383546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ed:18:e0:3d:6f:e0:b9:03:ba:28:de:c5:a5:6d:6c:f0:5b: 9e:d6:6c:7d:8b:90:9c:12:90:c0:8d:04:dc:d8:80:d0:cf:1f: 96:94:8d:e0:57:ff:c5:13:37:eb:05:de:bf:10:3a:27:ee:b2: e1:10:25:b2:6a:34:86:a0:67:12:09:64:82:c8:4b:fb:99:62: a4:8e:b4:4b:95:0a:50:4c:a5:e4:f1:37:95:c8:2e:40:51:f5: d8:ac:53:15:95:be:71:dd:b5:40:ed:24:d1:3e:d4:1a:ef:2a: 2b:33:95:38:43:07:8d:40:ef:66:c0:b7:88:71:14:00:a0:56: de:3f:bf:56:18:ea:21:4f:c3:f9:4a:d4:68:b2:85:b6:7b:22: e2:7c:13:5d:e1:70:14:68:c7:ec:af:8c:82:65:5d:74:a7:25: e4:7d:b3:d8:eb:c4:e4:a0:cf:f6:d4:89:8a:6a:30:28:d7:e2: 86:96:fa:9c:7c:b3:85:7b:5b:b2:6c:58:b7:4b:28:af:4b:7d: 86:0c:8c:63:c7:c1:94:21:a6:5f:60:41:ea:f8:ac:3a:9c:69: 97:6e:4e:a8:5e:6a:f0:04:8e:a6:7e:fd:49:e2:db:65:09:72: bc:89:6e:1f:7c:71:65:7a:de:0b:c9:d1:37:6c:12:59:9a:b6: 82:65:07:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjBIWX78cNWO/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODY4YmZkNTgtMTFiYS00ZTkzLWI2NTItYmExNTYyNmViZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp04gjK5X7RszRThVKJ+t6aSUy56wYP42U9oH RntjHOqb977hRJWDXt7xoQinmRIHZ/npfB/DsKd6HmCqC+NdtZ42AIlMRxlNzdLl NvRSez9AhaYAW/uINhdaAc6mYTjxsw+pNWK0jYobi2UpXJYpVb+EXnPmRTmum1D0 16EvRIcxd8hId/f+wSy37WGYSH0GkrlOtcADFhxnB793sERMjol69gtlV3Y79/E4 urUz7QOw9IRma1flXAE9taMBOK6/U7PypvgYWyV8Uht1DEXlhZMNBINbaXnWI36L kAUNzjw230YNByxS9WnHbjFkcBgNFb3+WixH9f2VO/WvZVc/3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMackP/2Z4xzPJ0pMcBssT0MUP5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTYxMjNjZDAtZTIxNi0z MzY4LWJjYTItZTAzMzY2MzgzNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCImgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPtGOA9b+C5A7oo3sWlbWzwW57WbH2LkJwSkMCNBNzYgNDPH5aUjeBX /8UTN+sF3r8QOifusuEQJbJqNIagZxIJZILIS/uZYqSOtEuVClBMpeTxN5XILkBR 9disUxWVvnHdtUDtJNE+1BrvKiszlThDB41A72bAt4hxFACgVt4/v1YY6iFPw/lK 1GiyhbZ7IuJ8E13hcBRox+yvjIJlXXSnJeR9s9jrxOSgz/bUiYpqMCjX4oaW+px8 s4V7W7JsWLdLKK9LfYYMjGPHwZQhpl9gQer4rDqcaZduTqheavAEjqZ+/Uni22UJ cryJbh98cWV63gvJ0TdsElmatoJlB4I= -----END CERTIFICATE-----Generated at Tue Jul 22 04:42:15 2025 by rpki-client