$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a357310f-04c5-3f71-afa5-b6fa8b19fd0a.roa File: a357310f-04c5-3f71-afa5-b6fa8b19fd0a.roa (raw, json) Hash identifier: PitQsfovyeu9UTFG1zCwea8orK+8euUilsW4O5oGZXw= Subject key identifier: 55:C4:DB:BE:D2:88:1F:7D:DD:2E:72:5D:0A:8D:8D:27:03:16:AD:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8411711F40F9C43968EC33E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a357310f-04c5-3f71-afa5-b6fa8b19fd0a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.106.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:71:1f:40:f9:c4:39:68:ec:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f5adc292-41fc-4a43-8f0d-473be35b43f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:2a:6b:5a:02:96:46:45:57:7e:b2:52:3a: a0:d1:4e:67:21:f3:4d:53:21:58:86:08:82:ca:40: d3:11:60:ef:a6:b6:6b:89:40:5a:96:01:e5:5d:13: 89:d4:81:40:6f:c2:58:74:b6:ca:70:d7:35:b6:56: 92:6f:11:3c:2f:63:08:f8:af:65:87:80:73:b6:f4: 01:81:84:16:0e:cd:35:9e:09:c6:7c:22:df:50:65: d5:40:d4:62:e4:36:9f:ef:10:4c:d9:da:0b:18:32: ae:c3:bc:22:8e:fe:fe:f0:27:9b:d3:17:c4:70:2b: 0f:b3:e4:65:a1:4c:f0:70:08:e8:ce:49:a2:5f:7a: 6c:f7:14:30:ba:b4:8d:d5:66:56:17:cc:8d:e1:04: 16:ac:23:b7:c1:54:40:ec:33:45:7e:f6:d5:9e:82: 9a:70:04:d3:69:23:d4:c0:b7:1e:74:09:c9:90:9e: 96:c2:d5:c1:30:36:49:da:e4:e9:68:fd:44:f3:c0: e1:b2:2b:56:cf:09:2c:79:73:47:99:a3:1f:f7:6b: a0:06:b7:62:ab:c8:c1:de:a3:40:0b:4b:bf:a2:ea: 2a:56:1c:57:5a:83:7c:60:b6:d0:29:41:87:b4:bf: fa:aa:e6:7f:89:9c:a8:2a:16:5c:b4:7a:66:87:2c: 8b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C4:DB:BE:D2:88:1F:7D:DD:2E:72:5D:0A:8D:8D:27:03:16:AD:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a357310f-04c5-3f71-afa5-b6fa8b19fd0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.106.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:8a:43:d7:9c:2c:0f:e3:f8:96:98:4e:e9:2a:3b:44:c0:6f: e6:85:39:b8:62:75:3d:82:39:80:67:f8:e3:52:d3:fc:8d:7d: 2f:89:8f:4f:f3:66:13:7b:cd:0c:21:b2:d8:1d:55:f3:94:d0: b9:97:70:e4:41:81:d2:ba:94:f4:22:15:a0:64:11:b9:de:36: da:0e:ad:34:94:6c:c0:0d:e6:ee:6d:22:47:e3:04:43:cc:55: 34:72:90:b7:b0:b8:c6:bf:90:da:a5:24:42:b4:bb:16:df:60: ee:1e:b9:56:73:d8:bf:fe:1a:6a:d6:03:b4:0d:98:2b:bd:28: 77:b5:dd:27:69:c8:c5:5a:55:ce:4c:ad:73:c8:c0:c0:e9:3c: e3:57:66:41:ff:e9:b5:46:af:59:ec:c0:37:07:1a:f9:73:42: 56:ec:34:92:fe:58:41:a5:4e:4b:dd:00:d5:99:14:b4:77:61: 48:84:e4:8b:27:c0:ef:c3:38:6e:0c:44:fa:f1:82:2b:4b:6e: be:2b:15:a9:ba:38:1a:d0:ff:15:0d:51:82:b4:d0:a1:8d:24: 9b:cf:3f:6f:b3:59:29:a6:1e:81:b4:c6:ff:0b:dd:f5:83:0e: 5a:29:e8:c2:08:83:59:16:92:d6:62:fe:47:ae:32:55:50:7a: 25:b1:5d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXEfQPnEOWjsM+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjVhZGMyOTItNDFmYy00YTQzLThmMGQtNDczYmUzNWI0M2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf8qa1oClkZFV36yUjqg0U5nIfNNUyFYhgiC ykDTEWDvprZriUBalgHlXROJ1IFAb8JYdLbKcNc1tlaSbxE8L2MI+K9lh4BztvQB gYQWDs01ngnGfCLfUGXVQNRi5Daf7xBM2doLGDKuw7wijv7+8Ceb0xfEcCsPs+Rl oUzwcAjozkmiX3ps9xQwurSN1WZWF8yN4QQWrCO3wVRA7DNFfvbVnoKacATTaSPU wLcedAnJkJ6WwtXBMDZJ2uTpaP1E88DhsitWzwkseXNHmaMf92ugBrdiq8jB3qNA C0u/ouoqVhxXWoN8YLbQKUGHtL/6quZ/iZyoKhZctHpmhyyLBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXE277SiB993S5yXQqNjScDFq0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTM1NzMxMGYtMDRjNS0z ZjcxLWFmYTUtYjZmYThiMTlmZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqKQ9ecLA/j+JaYTukqO0TAb+aFObhidT2COYBn+ONS0/yNfS+Jj0/z ZhN7zQwhstgdVfOU0LmXcORBgdK6lPQiFaBkEbneNtoOrTSUbMAN5u5tIkfjBEPM VTRykLewuMa/kNqlJEK0uxbfYO4euVZz2L/+GmrWA7QNmCu9KHe13SdpyMVaVc5M rXPIwMDpPONXZkH/6bVGr1nswDcHGvlzQlbsNJL+WEGlTkvdANWZFLR3YUiE5Isn wO/DOG4MRPrxgitLbr4rFam6OBrQ/xUNUYK00KGNJJvPP2+zWSmmHoG0xv8L3fWD Dlop6MIIg1kWktZi/keuMlVQeiWxXXA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:14 2025 by rpki-client