$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa File: a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa (raw, json) Hash identifier: x668VoZ8Ow4UwIw8PYCNyDXJzwN5FPi19yhPwSUE/rc= Subject key identifier: 99:F1:46:88:D5:60:B5:2E:70:A6:43:75:F3:FE:6E:E1:FF:C3:FB:DD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEAC25AF15E1297842540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.85.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ea:c2:5a:f1:5e:12:97:84:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=04a23771-d5d5-44f1-9291-f01adfb7fb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:1c:6b:17:0e:d0:5b:c3:ef:d5:a9:c1:70: 28:03:27:40:92:70:d2:1d:19:dd:3e:7c:8a:d2:d5: 48:a3:81:be:20:f7:28:eb:80:f5:ce:a0:91:4c:3d: be:70:00:48:fc:0b:41:f1:2f:bb:6f:99:92:7e:9e: 06:55:f8:98:d2:08:b4:c2:82:51:81:87:c7:68:12: f4:dd:04:1a:f4:5d:c5:39:9a:4c:a6:72:b4:5d:5c: c2:db:53:c4:a4:04:62:b5:0d:f4:ad:4e:92:74:7d: 10:4b:51:4c:c0:8d:9f:52:5e:0f:cd:36:f6:34:57: b4:7f:47:3e:97:2c:ef:30:fe:b4:8f:07:f9:b2:d3: 14:3c:dd:7d:c8:11:68:d4:fc:6e:2f:e8:6b:77:ce: 47:35:e2:42:00:8c:9c:92:9d:31:4d:d1:51:c0:23: d7:ff:35:88:39:2e:ff:51:02:e6:ae:d3:34:77:62: 45:1e:0e:4d:2d:83:6e:d9:d1:db:ee:62:09:15:42: 04:2a:9d:e1:7c:78:c7:d0:40:bc:53:d8:89:2a:87: fa:7a:ff:4f:f2:44:b7:2d:1b:1c:55:c6:95:02:fe: ff:1f:80:0a:60:9a:6d:78:28:10:05:df:74:ad:22: ce:0f:6c:17:02:66:b1:84:fc:b5:f7:b3:77:33:fe: 50:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F1:46:88:D5:60:B5:2E:70:A6:43:75:F3:FE:6E:E1:FF:C3:FB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:58:ba:5a:02:44:4f:7a:ae:04:19:c6:ac:81:a4:6d:1e:74: 01:08:d2:54:be:bd:1b:fd:c4:e5:a0:8c:6e:91:50:fc:81:1a: 85:7b:13:33:f1:8f:48:47:b8:4c:f3:d7:75:ab:d1:8a:28:f7: 1d:c5:34:f2:8a:1c:7f:1f:e5:0b:a8:4b:90:dc:57:fd:b2:d0: 8b:43:be:a0:2a:4c:98:1a:06:ca:30:86:c2:1c:45:45:a3:1e: f1:85:b1:56:15:0b:6a:2e:24:b4:9e:9a:2d:99:ba:5b:c9:54: 53:6b:98:b0:ff:b4:de:ff:b0:0b:ba:fe:64:86:b3:b3:a8:2e: 19:ab:48:33:54:c8:ec:ba:f2:0f:a9:8f:4b:42:1e:86:a8:50: 27:20:a6:05:4e:75:73:43:54:13:1b:f4:e1:e3:cb:11:46:37: 73:d2:19:56:da:42:07:c0:62:f4:8c:61:96:59:6e:bb:1b:18: 0c:13:6a:8e:b5:a2:ef:cc:f5:29:5d:76:76:b7:1a:d4:7e:61: 39:b7:13:5b:ca:aa:0e:54:10:f8:25:15:c4:8a:0d:ae:99:14: 0b:42:c5:5a:3f:b0:de:4c:4a:a9:35:36:97:a3:40:6f:29:1c: d9:11:a4:6c:d9:ba:2b:e7:17:bf:5a:91:53:e7:0c:c2:b0:4c: ae:b2:4e:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+rCWvFeEpeEJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MDRhMjM3NzEtZDVkNS00NGYxLTkyOTEtZjAxYWRmYjdmYjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7IcaxcO0FvD79WpwXAoAydAknDSHRndPnyK 0tVIo4G+IPco64D1zqCRTD2+cABI/AtB8S+7b5mSfp4GVfiY0gi0woJRgYfHaBL0 3QQa9F3FOZpMpnK0XVzC21PEpARitQ30rU6SdH0QS1FMwI2fUl4PzTb2NFe0f0c+ lyzvMP60jwf5stMUPN19yBFo1PxuL+hrd85HNeJCAIyckp0xTdFRwCPX/zWIOS7/ UQLmrtM0d2JFHg5NLYNu2dHb7mIJFUIEKp3hfHjH0EC8U9iJKof6ev9P8kS3LRsc VcaVAv7/H4AKYJpteCgQBd90rSLOD2wXAmaxhPy197N3M/5Q+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnxRojVYLUucKZDdfP+buH/w/vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTJjZmM2YTctMGNlMS0z ODE2LTg4ODAtZDQ1MGNiNGEzZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBYuloCRE96rgQZxqyBpG0edAEI0lS+vRv9xOWgjG6RUPyBGoV7EzPx j0hHuEzz13Wr0Yoo9x3FNPKKHH8f5QuoS5DcV/2y0ItDvqAqTJgaBsowhsIcRUWj HvGFsVYVC2ouJLSemi2ZulvJVFNrmLD/tN7/sAu6/mSGs7OoLhmrSDNUyOy68g+p j0tCHoaoUCcgpgVOdXNDVBMb9OHjyxFGN3PSGVbaQgfAYvSMYZZZbrsbGAwTao61 ou/M9Slddna3GtR+YTm3E1vKqg5UEPglFcSKDa6ZFAtCxVo/sN5MSqk1NpejQG8p HNkRpGzZuivnF79akVPnDMKwTK6yTvU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:35 2025 by rpki-client