$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aa28be0-a15b-300d-b61a-97e24dd981c7.roa File: 9aa28be0-a15b-300d-b61a-97e24dd981c7.roa (raw, json) Hash identifier: RBVCWM+Ngawi2hE4xMqgllqonBw2upxZ4TyQxjfWOVU= Subject key identifier: 35:73:4F:55:33:1C:04:F5:F5:E5:D3:F7:0F:B0:C1:65:D2:CA:5A:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8412290B7B84702FAD64D900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aa28be0-a15b-300d-b61a-97e24dd981c7.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.105.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:29:0b:7b:84:70:2f:ad:64:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=56f4ea7e-563f-4200-a46d-366f3c08ddc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:71:38:c0:64:64:9c:61:ee:fa:44:fc:17: 66:b0:98:3a:e3:7e:79:78:c9:8a:0d:97:6f:b6:b8: db:1a:19:36:6c:c3:f4:78:db:20:b2:9c:b0:c2:f3: d6:48:ec:03:36:75:ef:46:0c:17:d0:e7:bd:00:70: 1c:88:f7:87:67:ea:13:7a:32:6e:d4:03:47:78:99: 31:05:ab:88:6f:89:10:dc:74:ef:76:72:71:d6:15: a3:42:19:f5:b2:95:4f:e4:cb:75:db:1a:2f:95:70: a7:73:c9:e4:1c:c6:39:cb:ce:52:36:f2:57:b3:d9: 5b:ae:c2:68:cf:71:0d:c5:3c:47:8d:56:10:dc:91: 83:fc:36:2c:b2:3c:97:2a:a2:5a:35:4e:2c:4e:f1: b4:28:82:f5:e0:6c:dd:d3:f2:cb:6e:15:d7:14:10: 3e:cf:09:ea:50:91:93:ca:6c:f8:c6:60:b1:73:ee: 87:b4:0e:b1:67:70:52:1b:3c:8d:02:a6:cd:6b:f4: 9f:84:d8:08:b8:2e:42:62:d0:97:64:4b:6b:ee:14: f7:56:49:60:ae:93:24:73:ef:89:74:a2:f2:df:a8: a5:e4:87:fc:89:c4:72:fc:bd:a1:93:bf:34:05:76: 3d:a7:cd:10:5b:4a:a5:59:2b:18:97:c4:f4:82:8c: 83:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:73:4F:55:33:1C:04:F5:F5:E5:D3:F7:0F:B0:C1:65:D2:CA:5A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aa28be0-a15b-300d-b61a-97e24dd981c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.105.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a2:20:9b:c3:d5:80:e9:ac:3a:de:6c:35:18:67:46:50:2f: ae:7b:98:c7:7a:30:c9:5d:49:f8:ea:2e:71:3d:a0:d4:2f:16: 1b:2b:a6:c9:6e:86:ed:85:b8:35:9c:93:4e:0f:a7:e7:0b:3b: ea:88:ae:26:96:fc:95:53:9d:d6:ab:45:c5:f8:73:97:c3:0b: b2:fd:f8:28:d2:2e:82:14:1f:aa:b9:40:c6:cc:11:b6:50:d7: a8:cf:f0:51:28:0c:36:9c:8b:19:3d:29:5a:f5:15:f5:53:12: ff:f0:ed:8e:8f:87:76:38:43:7e:67:fd:38:87:38:1e:70:67: 48:0d:70:b6:c1:4b:7c:e0:45:db:ca:9c:85:bd:9b:80:1b:c9: d4:a5:80:ea:ad:35:67:5e:f3:77:d1:60:34:53:54:6d:ef:ca: 2d:b4:7d:99:c6:c8:bc:59:28:8b:bd:44:e9:09:85:17:15:60: ed:b5:d3:f1:6b:e7:89:06:b9:e3:9e:40:4e:7d:4a:07:f1:a2: 60:6d:f6:fc:56:1e:52:0a:61:c0:a7:a2:10:b7:d9:f8:96:cc: fe:c6:d9:bf:54:f5:8e:1d:59:41:d3:77:2f:69:dd:c2:54:44: 8e:4c:3e:a4:d3:7e:f8:a9:0f:7a:ed:ce:f1:7d:a0:88:90:0f: d2:1e:ff:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEikLe4RwL61k2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTZmNGVhN2UtNTYzZi00MjAwLWE0NmQtMzY2ZjNjMDhkZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBhxOMBkZJxh7vpE/BdmsJg64355eMmKDZdv trjbGhk2bMP0eNsgspywwvPWSOwDNnXvRgwX0Oe9AHAciPeHZ+oTejJu1ANHeJkx BauIb4kQ3HTvdnJx1hWjQhn1spVP5Mt12xovlXCnc8nkHMY5y85SNvJXs9lbrsJo z3ENxTxHjVYQ3JGD/DYssjyXKqJaNU4sTvG0KIL14Gzd0/LLbhXXFBA+zwnqUJGT ymz4xmCxc+6HtA6xZ3BSGzyNAqbNa/SfhNgIuC5CYtCXZEtr7hT3VklgrpMkc++J dKLy36il5If8icRy/L2hk780BXY9p80QW0qlWSsYl8T0goyDSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVzT1UzHAT19eXT9w+wwWXSylqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWFhMjhiZTAtYTE1Yi0z MDBkLWI2MWEtOTdlMjRkZDk4MWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuiIJvD1YDprDrebDUYZ0ZQL657mMd6MMldSfjqLnE9oNQvFhsrpslu hu2FuDWck04Pp+cLO+qIriaW/JVTndarRcX4c5fDC7L9+CjSLoIUH6q5QMbMEbZQ 16jP8FEoDDacixk9KVr1FfVTEv/w7Y6Ph3Y4Q35n/TiHOB5wZ0gNcLbBS3zgRdvK nIW9m4AbydSlgOqtNWde83fRYDRTVG3vyi20fZnGyLxZKIu9ROkJhRcVYO210/Fr 54kGueOeQE59SgfxomBt9vxWHlIKYcCnohC32fiWzP7G2b9U9Y4dWUHTdy9p3cJU RI5MPqTTfvipD3rtzvF9oIiQD9Ie/78= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:05 2025 by rpki-client