$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/994eae2c-9be3-3dbf-8af5-a672c0950f82.roa File: 994eae2c-9be3-3dbf-8af5-a672c0950f82.roa (raw, json) Hash identifier: r7Cz2JPT9Yio+87W/24J5GqiS3NL4Qmd6vvhalAxVos= Subject key identifier: 32:7F:BD:AB:58:B8:05:15:67:29:7D:77:C1:22:2B:E6:EA:3B:D2:E4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE57941C30C38839C2240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/994eae2c-9be3-3dbf-8af5-a672c0950f82.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.64.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e5:79:41:c3:0c:38:83:9c:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=46a20b92-63f0-4c3d-88ff-5e00c0f9a804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d7:7b:b9:50:3e:b0:e8:65:8d:dc:4f:64:e7: 42:9b:ec:23:e6:fd:08:ca:49:55:ee:f1:77:26:82: bf:c9:5f:d2:6d:5f:3b:4a:d1:f1:a8:ea:a3:35:99: 1e:fa:60:be:92:16:b0:e8:42:d6:82:82:5f:00:a2: 5a:fa:04:9e:8f:ee:b8:e4:b1:a1:4a:15:56:e3:36: bd:6c:45:64:a7:68:00:0a:8a:b6:2c:e6:24:10:82: 92:6c:75:90:0a:de:dc:c7:db:0f:f7:27:df:9c:a4: 6d:b0:30:4c:84:65:83:58:cc:06:4e:97:12:2a:09: 5b:7e:f4:39:f7:10:c5:8a:80:fa:c3:d4:19:d2:92: 07:7d:ba:a2:88:cc:ef:65:30:4d:53:d9:05:eb:58: ee:11:61:b3:d1:3d:a9:50:53:1f:a6:a3:5b:56:ca: 8a:dd:69:12:ea:bb:e4:b6:c0:ce:cd:b4:7d:5b:87: d7:b2:75:5e:9c:c2:f7:dc:56:e1:7f:40:f6:56:96: fd:ab:93:13:e7:96:52:ce:24:00:7c:72:a3:5d:62: d3:89:01:bd:90:7d:7c:44:d5:6c:4c:69:39:cb:09: 17:1b:c4:87:2c:11:ae:5d:2d:84:f1:45:ca:7b:e0: aa:47:67:07:ca:7f:5a:7c:99:e6:6e:f0:48:48:8c: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7F:BD:AB:58:B8:05:15:67:29:7D:77:C1:22:2B:E6:EA:3B:D2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/994eae2c-9be3-3dbf-8af5-a672c0950f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:50:de:21:74:f2:f7:87:8e:fb:ed:1f:12:f5:dd:d1:4a:ff: cc:9f:91:50:b3:8b:c6:10:f5:99:56:6a:21:33:1b:8d:59:43: c2:5a:ac:fc:91:7e:5a:ea:f1:0e:ef:49:44:5c:c4:f1:58:28: f5:04:29:06:5b:03:59:63:97:d1:34:84:bc:54:78:51:92:a5: 7a:d8:a9:49:e6:7f:b7:64:8e:99:b6:28:ab:0c:b7:7d:18:fe: ee:55:4a:d8:8d:0b:bd:2f:c2:11:6b:27:e8:5a:59:c5:62:b1: 2b:eb:f6:59:32:18:48:bd:85:b4:43:38:13:e3:0d:2d:83:da: 0a:0c:f8:cf:67:0a:f9:b3:7a:4a:6f:c8:7b:31:41:c2:75:01: 67:28:21:6f:70:7c:74:77:cd:6b:1b:b0:d5:f6:23:14:5c:be: a4:09:48:0c:7d:f6:66:7a:a7:e5:8c:a3:39:51:09:9a:ce:cb: 47:15:aa:82:37:1e:29:ef:f1:a6:d4:31:9e:db:54:79:95:22: ad:8b:dd:03:61:a8:c1:23:76:fd:76:9e:06:44:1c:3e:7b:a6: 84:ca:86:50:4b:6a:69:22:54:35:c8:20:aa:66:2b:c3:b5:5e: 86:39:09:f4:1d:58:c9:27:71:0a:16:2b:f0:1d:2a:19:41:dd: dc:5d:2f:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+V5QcMMOIOcIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDZhMjBiOTItNjNmMC00YzNkLTg4ZmYtNWUwMGMwZjlhODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitd7uVA+sOhljdxPZOdCm+wj5v0IyklV7vF3 JoK/yV/SbV87StHxqOqjNZke+mC+khaw6ELWgoJfAKJa+gSej+645LGhShVW4za9 bEVkp2gACoq2LOYkEIKSbHWQCt7cx9sP9yffnKRtsDBMhGWDWMwGTpcSKglbfvQ5 9xDFioD6w9QZ0pIHfbqiiMzvZTBNU9kF61juEWGz0T2pUFMfpqNbVsqK3WkS6rvk tsDOzbR9W4fXsnVenML33Fbhf0D2Vpb9q5MT55ZSziQAfHKjXWLTiQG9kH18RNVs TGk5ywkXG8SHLBGuXS2E8UXKe+CqR2cHyn9afJnmbvBISIzOqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ/vatYuAUVZyl9d8EiK+bqO9LkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTk0ZWFlMmMtOWJlMy0z ZGJmLThhZjUtYTY3MmMwOTUwZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApQ3iF08veHjvvtHxL13dFK/8yfkVCzi8YQ9ZlWaiEzG41ZQ8JarPyR flrq8Q7vSURcxPFYKPUEKQZbA1ljl9E0hLxUeFGSpXrYqUnmf7dkjpm2KKsMt30Y /u5VStiNC70vwhFrJ+haWcVisSvr9lkyGEi9hbRDOBPjDS2D2goM+M9nCvmzekpv yHsxQcJ1AWcoIW9wfHR3zWsbsNX2IxRcvqQJSAx99mZ6p+WMozlRCZrOy0cVqoI3 Hinv8abUMZ7bVHmVIq2L3QNhqMEjdv12ngZEHD57poTKhlBLamkiVDXIIKpmK8O1 XoY5CfQdWMkncQoWK/AdKhlB3dxdL0o= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:32 2025 by rpki-client