$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9c268ece-471b-3212-8527-a6a0938e4ff6.roa File: 9c268ece-471b-3212-8527-a6a0938e4ff6.roa (raw, json) Hash identifier: SG/fCOu6xI2J80Qla/5Obcqj3FUI8RQNvL5KL0K/IGk= Subject key identifier: 43:CC:7F:7E:B8:AA:B2:78:FA:CB:1A:B5:C6:C4:6A:28:15:27:FB:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7EA21F9270496A131BC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9c268ece-471b-3212-8527-a6a0938e4ff6.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.135.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7e:a2:1f:92:70:49:6a:13:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=8b9dd33d-c689-4e30-aa14-2f342d2c11e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:37:7c:b3:2d:c0:d7:58:62:99:3d:76:0d:99: 62:4d:33:2e:a4:c5:6a:26:bf:f8:5a:91:51:3d:9c: 65:d3:b0:57:0c:99:b8:d6:e2:8c:90:04:83:85:65: 73:c5:92:af:f7:25:52:1b:41:6d:7d:c7:d5:8a:4f: 08:fc:5c:ba:4c:d0:e7:cd:f7:ad:a6:13:33:51:7c: c7:ea:97:63:bf:81:f0:69:40:44:c8:9d:41:84:97: 13:f3:c4:47:32:f5:a1:19:67:30:20:a0:e8:df:e2: 14:39:5e:16:3b:dc:ca:5a:7c:82:33:13:20:a9:28: d8:52:29:0b:7d:83:63:7a:8c:2d:9a:81:44:6a:c0: 73:d8:2d:ac:aa:cc:c9:9f:a8:81:16:cc:25:48:72: c6:eb:6a:86:fc:60:12:43:5b:43:42:f5:6f:ea:a4: f4:b1:e7:7d:8f:1e:19:10:2e:1d:8a:0a:fc:11:c9: 61:7c:73:53:14:b8:be:5a:7f:8c:a9:05:4d:8b:f9: f7:53:8a:86:4a:66:ec:f1:3a:2f:e6:d5:bf:eb:22: b7:2e:80:f8:c7:2d:ad:26:3e:72:dd:97:19:52:50: c3:29:9f:be:b0:35:b8:65:bd:15:1a:0e:fb:80:1c: 67:4d:7a:1f:dd:44:64:0e:b2:62:99:0a:ce:27:74: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CC:7F:7E:B8:AA:B2:78:FA:CB:1A:B5:C6:C4:6A:28:15:27:FB:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9c268ece-471b-3212-8527-a6a0938e4ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f4:9e:64:3d:4d:c0:57:b8:6a:95:31:3b:fb:01:91:d2:b7: d8:cc:f4:09:1c:b4:04:b2:5e:82:b9:2e:c0:73:2c:0f:9f:64: d8:8b:6e:5b:bf:3b:08:72:52:96:b5:11:a9:2d:d4:97:f5:e3: 8a:34:41:67:e0:72:e0:7f:e0:16:43:cf:e2:04:40:57:57:aa: 32:fa:ec:c4:b3:e6:88:79:93:45:18:68:f8:2f:71:7e:ae:0b: 05:55:2a:19:ea:41:27:8b:bb:53:d9:eb:de:9f:41:8a:da:2a: 2a:ba:40:4e:c4:cd:17:76:ca:3b:d9:0d:a0:08:bb:7f:12:32: 84:d1:a9:c6:b4:20:c6:63:90:11:e6:02:7c:1f:87:2b:1b:d5: 1b:82:95:97:0d:18:7c:20:31:54:3e:32:68:42:ed:d0:7b:08: 13:3c:c7:da:81:41:36:82:8a:5f:d5:b3:4a:bd:a1:15:f9:93: b7:fe:30:66:e5:5b:6c:dc:4b:ef:8c:df:a5:43:0a:4c:23:10: 3f:bf:96:a4:89:74:a3:1f:33:bf:27:5d:33:ac:fa:50:88:44: 1c:ab:b5:de:ed:bc:55:eb:6b:43:95:7b:ba:0b:9b:2e:b8:21: a3:08:d0:ff:5e:bf:8f:b7:3c:22:6c:e5:73:a6:28:3d:11:4b: 7d:0d:4a:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG236iH5JwSWoTG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OGI5ZGQzM2QtYzY4OS00ZTMwLWFhMTQtMmYzNDJkMmMxMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjd8sy3A11himT12DZliTTMupMVqJr/4WpFR PZxl07BXDJm41uKMkASDhWVzxZKv9yVSG0FtfcfVik8I/Fy6TNDnzfetphMzUXzH 6pdjv4HwaUBEyJ1BhJcT88RHMvWhGWcwIKDo3+IUOV4WO9zKWnyCMxMgqSjYUikL fYNjeowtmoFEasBz2C2sqszJn6iBFswlSHLG62qG/GASQ1tDQvVv6qT0sed9jx4Z EC4digr8EclhfHNTFLi+Wn+MqQVNi/n3U4qGSmbs8Tov5tW/6yK3LoD4xy2tJj5y 3ZcZUlDDKZ++sDW4Zb0VGg77gBxnTXof3URkDrJimQrOJ3S2EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPMf364qrJ4+ssatcbEaigVJ/s1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWMyNjhlY2UtNDcxYi0z MjEyLTg1MjctYTZhMDkzOGU0ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIodQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKj0nmQ9TcBXuGqVMTv7AZHSt9jM9AkctASyXoK5LsBzLA+fZNiLblu/ OwhyUpa1Eakt1Jf144o0QWfgcuB/4BZDz+IEQFdXqjL67MSz5oh5k0UYaPgvcX6u CwVVKhnqQSeLu1PZ696fQYraKiq6QE7EzRd2yjvZDaAIu38SMoTRqca0IMZjkBHm Anwfhysb1RuClZcNGHwgMVQ+MmhC7dB7CBM8x9qBQTaCil/Vs0q9oRX5k7f+MGbl W2zcS++M36VDCkwjED+/lqSJdKMfM78nXTOs+lCIRByrtd7tvFXra0OVe7oLmy64 IaMI0P9ev4+3PCJs5XOmKD0RS30NSuw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:06 2025 by rpki-client