$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9cc0377e-81c6-3a18-894a-897b37de3f9d.roa File: 9cc0377e-81c6-3a18-894a-897b37de3f9d.roa (raw, json) Hash identifier: 76qzGAD0HUb66VwJtW8dcINPqjsujvFjDjnTr2t8OOU= Subject key identifier: 81:46:2A:E6:3B:C4:8F:22:B2:79:16:DF:84:D9:5C:B8:56:5D:7F:BC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEC8ACAFAE9D60B259860 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9cc0377e-81c6-3a18-894a-897b37de3f9d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.146.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ec:8a:ca:fa:e9:d6:0b:25:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ba500ea6-86d9-40fc-a050-037cbc93a28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:05:85:03:d0:55:9c:73:90:67:ab:4d:71:56: 43:41:56:c9:20:e7:be:80:31:55:36:ad:fe:11:ee: ad:a2:22:70:a1:6d:5d:b9:0c:72:1e:5a:6d:77:8d: c7:4e:2f:e3:74:c1:d4:f9:bb:26:71:b6:ed:ad:a5: d0:01:42:4b:99:ad:e4:2c:1e:6c:41:0d:d5:78:60: 1f:18:9c:15:c1:b2:de:89:53:9d:0b:d7:98:73:64: 74:eb:68:86:50:42:ec:ff:15:b9:b1:88:2a:5d:6c: ce:7c:4a:ce:47:40:05:ae:ed:ba:e6:1a:34:7e:bd: 7f:13:94:64:83:6c:79:28:60:07:47:cc:45:ac:c4: df:8d:2a:bb:2b:7a:fd:d1:6f:97:d4:d6:51:7b:13: 1f:74:a7:12:a0:cd:e1:85:d2:30:c1:da:f1:77:aa: b3:81:d6:19:a9:ee:65:eb:53:fb:cf:a5:31:fc:58: b8:03:a2:89:d1:cb:73:1b:98:1e:10:f8:eb:4b:ff: 61:4f:e2:04:c6:fb:1a:10:7a:c0:82:e5:80:50:a6: 34:96:71:0f:5c:f3:c4:b8:ef:9e:f4:cc:2c:45:cc: 0c:78:62:b0:51:1b:7c:23:72:7a:79:a2:cc:1f:24: 47:39:ce:82:ad:df:74:de:f2:9a:cd:db:97:0c:cb: 82:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:46:2A:E6:3B:C4:8F:22:B2:79:16:DF:84:D9:5C:B8:56:5D:7F:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9cc0377e-81c6-3a18-894a-897b37de3f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.146.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e7:5e:50:38:7d:2c:d5:42:2a:33:31:ab:36:5b:94:39:2e: ee:c2:10:86:36:89:7d:a7:67:f4:54:64:19:44:9e:f5:e8:c7: 28:1d:39:b4:30:35:ca:13:11:cf:82:ab:38:2a:43:6a:f3:28: fd:4b:a8:50:15:6f:3d:a1:d2:7d:5e:f2:02:f3:ff:90:e3:1f: cf:c7:09:4b:22:b5:e7:a5:6d:75:4e:17:c0:bc:21:e8:24:ac: 70:8a:75:53:a4:1f:41:51:3f:e0:90:7c:91:ad:02:ee:a4:d9: 6d:67:49:fe:50:f3:de:63:ba:5c:4b:45:98:5f:1e:21:fd:8d: 0e:d8:2a:28:7a:76:17:1d:c5:09:56:c7:5e:63:43:f2:03:d2: f9:89:77:fe:6b:be:14:90:ef:7f:01:5b:05:a7:46:7e:cf:b3: 00:df:43:f5:23:36:9b:92:32:80:56:96:b4:3d:b6:4b:fd:77: 9f:fd:47:11:dc:5d:49:61:4a:04:b3:51:7b:b8:0f:9f:3c:4b: e7:63:e7:99:d7:4e:7e:11:4f:48:a0:40:2f:3a:dc:80:f9:12: 40:21:a7:ab:ae:ce:c8:50:49:be:c4:48:0a:61:bd:94:12:0f: c5:fb:02:d5:22:75:af:88:a5:05:b5:02:10:d5:fd:2f:2d:a6: 6c:40:48:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+yKyvrp1gslmGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YmE1MDBlYTYtODZkOS00MGZjLWEwNTAtMDM3Y2JjOTNhMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwWFA9BVnHOQZ6tNcVZDQVbJIOe+gDFVNq3+ Ee6toiJwoW1duQxyHlptd43HTi/jdMHU+bsmcbbtraXQAUJLma3kLB5sQQ3VeGAf GJwVwbLeiVOdC9eYc2R062iGUELs/xW5sYgqXWzOfErOR0AFru265ho0fr1/E5Rk g2x5KGAHR8xFrMTfjSq7K3r90W+X1NZRexMfdKcSoM3hhdIwwdrxd6qzgdYZqe5l 61P7z6Ux/Fi4A6KJ0ctzG5geEPjrS/9hT+IExvsaEHrAguWAUKY0lnEPXPPEuO+e 9MwsRcwMeGKwURt8I3J6eaLMHyRHOc6Crd903vKazduXDMuChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFGKuY7xI8isnkW34TZXLhWXX+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWNjMDM3N2UtODFjNi0z YTE4LTg5NGEtODk3YjM3ZGUzZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnnXlA4fSzVQiozMas2W5Q5Lu7CEIY2iX2nZ/RUZBlEnvXoxygdObQw NcoTEc+CqzgqQ2rzKP1LqFAVbz2h0n1e8gLz/5DjH8/HCUsiteelbXVOF8C8Iegk rHCKdVOkH0FRP+CQfJGtAu6k2W1nSf5Q895julxLRZhfHiH9jQ7YKih6dhcdxQlW x15jQ/ID0vmJd/5rvhSQ738BWwWnRn7PswDfQ/UjNpuSMoBWlrQ9tkv9d5/9RxHc XUlhSgSzUXu4D588S+dj55nXTn4RT0igQC863ID5EkAhp6uuzshQSb7ESAphvZQS D8X7AtUida+IpQW1AhDV/S8tpmxASNE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:30 2025 by rpki-client