$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1c8af58-75a5-30f6-ac5c-18b759d556fd.roa File: a1c8af58-75a5-30f6-ac5c-18b759d556fd.roa (raw, json) Hash identifier: enFzkZOObL93DqrjGCMw4/aG8SG5HtzNe5gsakZRLD4= Subject key identifier: 68:5C:36:AD:D7:FB:0E:87:E1:09:4D:EB:40:70:D5:D6:B5:F3:7E:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBD6E275611475D9DA500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1c8af58-75a5-30f6-ac5c-18b759d556fd.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.20.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:bd:6e:27:56:11:47:5d:9d:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=7ac4de4f-9faf-46b4-baea-f8be94d61bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d8:f5:38:53:b5:ab:ea:68:5f:c4:90:25:2b: dc:26:38:28:01:5a:fe:34:4a:26:f2:79:c9:aa:25: 02:aa:fe:53:83:ea:ec:0e:81:bf:13:98:31:75:5a: 9e:6e:0d:c5:69:a9:e9:cd:f5:6a:4b:a0:91:74:ed: 00:62:43:79:27:dc:17:50:49:1b:8e:98:1a:c7:d1: e2:73:65:e1:23:a8:8c:22:cb:4f:58:d0:17:b5:e3: fb:64:ee:4a:33:b0:5d:af:c8:f0:d7:9a:b6:e3:1b: 8d:46:eb:78:7e:b6:a4:a3:3f:9f:31:8d:c0:86:a4: eb:92:e1:cf:fd:21:80:a3:07:d6:88:e0:5f:2a:95: f6:31:32:b4:84:fb:aa:99:20:10:47:13:16:11:a7: 47:36:87:c7:e9:72:6f:30:32:b7:ca:6b:9e:b2:23: 58:78:d2:e5:9f:ea:8b:54:30:ed:84:d2:ae:9c:0a: f2:18:af:ad:d7:a2:e8:b1:7d:0a:5b:76:a2:50:d0: b8:ac:1c:75:ac:b8:a4:98:cc:36:a6:aa:9a:a8:6b: 65:cf:e7:49:83:8d:be:41:4a:76:fa:99:6a:47:2e: a3:b7:ef:5e:4f:e5:7b:41:72:15:37:b4:ca:15:35: 18:b3:d7:5c:64:3b:53:1f:53:7e:45:87:68:1a:46: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5C:36:AD:D7:FB:0E:87:E1:09:4D:EB:40:70:D5:D6:B5:F3:7E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1c8af58-75a5-30f6-ac5c-18b759d556fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.20.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:85:29:d3:ab:f8:a8:40:47:e2:e2:54:e6:1c:29:fd:57:1e: 68:d8:ad:7c:da:6c:e5:79:1c:d4:9c:ed:79:93:dc:29:b7:3f: 22:fa:b7:2e:ce:0f:5f:87:4d:c6:1a:9a:5c:62:70:14:32:d4: 3d:44:35:87:bb:85:22:39:40:24:79:2f:de:5e:f5:95:90:c4: 25:5a:05:44:76:fc:d9:22:e7:42:ce:9b:bf:80:91:b9:aa:d1: e6:53:83:fc:cd:39:3e:7f:d2:c8:98:7d:73:d3:99:c1:51:44: 21:49:af:41:4b:27:01:ab:fb:e0:af:a3:36:73:2e:05:7e:04: fc:2d:7c:6c:5b:8e:37:76:f4:2f:ed:f1:7d:db:b4:25:42:56: af:de:52:17:34:6c:a3:41:a7:a4:bf:4c:ef:2c:4b:34:f7:f3: 3c:cd:ee:4f:28:28:3e:46:c9:2d:47:a5:1a:26:48:4d:01:94: aa:e5:96:62:82:84:21:db:5a:37:c7:86:be:86:d3:99:3c:59: b9:7e:8a:c2:d1:ba:7f:d7:b6:96:0b:bd:97:36:52:a6:e5:00: 1d:14:86:05:be:de:27:08:af:73:5a:e5:f6:a8:8a:fd:d8:b7: f6:bc:b0:02:e0:78:a2:53:b5:3f:29:8d:4d:b3:9a:0e:f3:c6: 03:a1:5e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG271uJ1YRR12dpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk N2FjNGRlNGYtOWZhZi00NmI0LWJhZWEtZjhiZTk0ZDYxYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdj1OFO1q+poX8SQJSvcJjgoAVr+NEom8nnJ qiUCqv5Tg+rsDoG/E5gxdVqebg3FaanpzfVqS6CRdO0AYkN5J9wXUEkbjpgax9Hi c2XhI6iMIstPWNAXteP7ZO5KM7Bdr8jw15q24xuNRut4frakoz+fMY3AhqTrkuHP /SGAowfWiOBfKpX2MTK0hPuqmSAQRxMWEadHNofH6XJvMDK3ymuesiNYeNLln+qL VDDthNKunAryGK+t16LosX0KW3aiUNC4rBx1rLikmMw2pqqaqGtlz+dJg42+QUp2 +plqRy6jt+9eT+V7QXIVN7TKFTUYs9dcZDtTH1N+RYdoGkZmPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhcNq3X+w6H4QlN60Bw1da1836pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTFjOGFmNTgtNzVhNS0z MGY2LWFjNWMtMThiNzU5ZDU1NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWFKdOr+KhAR+LiVOYcKf1XHmjYrXzabOV5HNSc7XmT3Cm3PyL6ty7O D1+HTcYamlxicBQy1D1ENYe7hSI5QCR5L95e9ZWQxCVaBUR2/Nki50LOm7+Akbmq 0eZTg/zNOT5/0siYfXPTmcFRRCFJr0FLJwGr++CvozZzLgV+BPwtfGxbjjd29C/t 8X3btCVCVq/eUhc0bKNBp6S/TO8sSzT38zzN7k8oKD5GyS1HpRomSE0BlKrllmKC hCHbWjfHhr6G05k8Wbl+isLRun/XtpYLvZc2UqblAB0UhgW+3icIr3Na5faoiv3Y t/a8sALgeKJTtT8pjU2zmg7zxgOhXnE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:26 2025 by rpki-client