$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996a1474-ca17-3cb6-9699-eb216581e662.roa File: 996a1474-ca17-3cb6-9699-eb216581e662.roa (raw, json) Hash identifier: mXxb9kGCMibpd5z6EH4+tS+yhTAbuGwCYuEQE4zqehc= Subject key identifier: 02:13:A0:B4:D5:C1:4A:27:42:62:3E:5E:E6:4C:65:8C:91:CA:6F:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC6C55912DCF6E5E21240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996a1474-ca17-3cb6-9699-eb216581e662.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.132.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c6:c5:59:12:dc:f6:e5:e2:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=d2fe9098-b6f3-4018-a43b-849a72c382e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:20:73:96:7d:ae:71:68:33:fa:b5:46:bc: a3:cb:c7:ae:de:bd:61:48:dd:75:f5:6f:34:5d:64: d8:d6:6a:40:46:60:12:ae:bb:d7:12:70:35:92:cf: 94:c1:36:14:98:54:05:56:59:c3:46:9a:25:5f:7f: ab:cc:20:51:f0:ba:16:be:ac:c6:ef:13:46:fb:8e: 17:c4:5b:99:06:64:b1:ee:44:b8:00:92:c7:91:9f: 74:15:10:71:d8:56:dc:8e:aa:12:48:97:e5:42:fe: 3c:fa:83:d5:fb:b6:ea:87:42:53:d4:40:82:a0:2e: 22:0d:de:57:69:95:8d:84:ab:4c:66:d1:3d:23:a8: 88:60:99:a8:d1:22:37:6f:ee:db:79:01:25:57:4c: 2b:71:75:0a:02:a9:18:8d:e0:1f:51:cf:71:d5:23: ce:b2:39:6c:84:ba:8a:e2:0e:c4:d5:dc:d9:5d:7c: 7e:66:b3:f6:60:ef:3a:60:bd:70:08:da:2e:43:da: 15:a5:bf:53:35:96:c8:a8:c2:8b:f2:ea:22:69:d5: b1:62:07:18:7a:7d:3b:78:6f:85:3f:aa:36:d2:f4: f6:92:9b:b8:1f:b0:5d:c4:59:84:1b:ad:8a:8d:08: c1:93:d3:b5:c7:7e:5e:62:4f:ee:05:bd:a1:7e:b8: 89:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:13:A0:B4:D5:C1:4A:27:42:62:3E:5E:E6:4C:65:8C:91:CA:6F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996a1474-ca17-3cb6-9699-eb216581e662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ce:59:dc:0d:1d:40:ab:ec:28:a8:b0:1d:e9:63:c0:e8:9c: 53:f3:ba:5c:b5:0d:4b:49:de:49:c5:fe:6c:0f:b0:a0:55:67: cb:f1:74:12:13:6c:2e:e3:c2:6b:77:2b:1b:ee:59:5d:2f:da: de:9e:f7:ba:d9:1b:a4:7c:0c:ca:2c:86:00:51:4a:66:af:96: a1:86:7d:4d:c1:1b:58:2d:fb:ec:6e:af:74:3f:aa:7f:d6:8d: 4e:e7:cd:f6:bc:b3:09:30:a0:ec:cc:4d:0f:d8:a5:81:ca:cf: ea:ae:d3:14:2a:62:df:8d:3b:ab:7c:2e:13:92:00:bd:dd:63: 10:90:ac:53:c7:47:da:07:bf:88:ba:3a:98:1f:10:ce:81:69: ac:12:13:65:55:53:2c:b6:da:0d:c1:8f:72:23:81:56:09:73: 3a:1d:fa:7e:df:f1:0d:60:e1:77:bb:78:d1:50:98:08:09:fe: 11:c1:6a:a3:76:37:4c:85:52:1d:bc:89:17:76:44:43:31:7e: 04:c9:a4:5b:5e:3f:ed:4a:bc:43:99:c4:85:d9:5e:c6:3d:62: f2:6c:6d:4b:a5:23:ed:70:5d:32:fd:bc:e3:02:92:4e:71:df: 96:3f:10:4f:d4:ba:82:82:22:53:38:c7:59:54:40:f8:80:2f: 6d:d6:de:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28bFWRLc9uXiEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZDJmZTkwOTgtYjZmMy00MDE4LWE0M2ItODQ5YTcyYzM4MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPggc5Z9rnFoM/q1Rryjy8eu3r1hSN119W80 XWTY1mpARmASrrvXEnA1ks+UwTYUmFQFVlnDRpolX3+rzCBR8LoWvqzG7xNG+44X xFuZBmSx7kS4AJLHkZ90FRBx2FbcjqoSSJflQv48+oPV+7bqh0JT1ECCoC4iDd5X aZWNhKtMZtE9I6iIYJmo0SI3b+7beQElV0wrcXUKAqkYjeAfUc9x1SPOsjlshLqK 4g7E1dzZXXx+ZrP2YO86YL1wCNouQ9oVpb9TNZbIqMKL8uoiadWxYgcYen07eG+F P6o20vT2kpu4H7BdxFmEG62KjQjBk9O1x35eYk/uBb2hfriJzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIToLTVwUonQmI+XuZMZYyRym8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTk2YTE0NzQtY2ExNy0z Y2I2LTk2OTktZWIyMTY1ODFlNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvOWdwNHUCr7CiosB3pY8DonFPzuly1DUtJ3knF/mwPsKBVZ8vxdBIT bC7jwmt3KxvuWV0v2t6e97rZG6R8DMoshgBRSmavlqGGfU3BG1gt++xur3Q/qn/W jU7nzfa8swkwoOzMTQ/YpYHKz+qu0xQqYt+NO6t8LhOSAL3dYxCQrFPHR9oHv4i6 OpgfEM6BaawSE2VVUyy22g3Bj3IjgVYJczod+n7f8Q1g4Xe7eNFQmAgJ/hHBaqN2 N0yFUh28iRd2REMxfgTJpFteP+1KvEOZxIXZXsY9YvJsbUulI+1wXTL9vOMCkk5x 35Y/EE/UuoKCIlM4x1lUQPiAL23W3lY= -----END CERTIFICATE-----Generated at Tue Jul 22 11:57:18 2025 by rpki-client