$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3b1de46-3cfb-3916-9f41-5aca55846c3c.roa File: a3b1de46-3cfb-3916-9f41-5aca55846c3c.roa (raw, json) Hash identifier: WV+UJjcI9T/IRtemcrIiyP3nf53vOlo0ACQ8axDl+3M= Subject key identifier: 66:27:55:AA:F7:B8:DF:81:58:21:C8:C3:E7:81:37:6E:1C:A7:EC:41 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7C1D950D7421B1185A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3b1de46-3cfb-3916-9f41-5aca55846c3c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.170.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7c:1d:95:0d:74:21:b1:18:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=519c052f-2ad2-4a76-9a12-eb2bc61f8884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:2f:0e:cf:f6:0c:0d:12:2d:04:cc:c8:8a: 9c:97:38:5c:2b:5b:54:18:f1:54:43:0e:dc:eb:01: 22:03:24:bd:b3:0c:6a:52:11:1d:35:41:fd:59:a8: 04:58:aa:ae:15:93:6d:0f:19:c8:8a:2a:fe:20:b7: 12:39:34:e9:b9:e0:f6:c5:d2:b4:90:92:eb:4f:4f: 48:5a:0b:f1:ea:e9:50:f3:6c:60:ec:bf:4a:5b:a9: d8:75:4f:03:2e:04:f1:bf:1b:d0:1f:d9:24:0c:49: 19:02:30:c5:99:fb:70:05:dc:9f:51:13:04:d2:b1: 51:3c:7d:eb:98:8e:90:78:03:d5:e5:84:c7:21:b8: 67:17:56:2d:18:16:cd:96:4d:6a:0d:2d:b7:7c:f7: e0:b2:fd:31:d5:f9:a3:bb:ba:16:87:59:db:86:b7: 25:a1:fd:58:d5:33:c2:07:a5:d0:55:29:6f:58:4b: 78:f1:ec:d0:51:82:16:57:8e:e7:0b:ac:a6:cf:b0: 85:f7:e0:b8:9d:07:b4:4a:3a:62:5c:b8:9d:03:67: ef:94:4a:02:99:06:44:5b:e4:87:79:0d:d0:4e:d7: 7d:b8:ec:64:61:92:92:0f:7c:bb:23:55:4f:0a:68: 91:54:5c:48:67:d1:64:2b:46:5e:b2:45:8b:47:ed: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:27:55:AA:F7:B8:DF:81:58:21:C8:C3:E7:81:37:6E:1C:A7:EC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3b1de46-3cfb-3916-9f41-5aca55846c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.170.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b1:56:67:1e:a3:0a:a6:ae:72:e8:a4:12:b0:83:88:b7:64: 6a:62:fd:cf:ff:7f:aa:94:c9:b3:95:87:84:13:66:85:65:f8: b6:c0:04:80:87:59:55:f3:bd:61:67:38:d5:0a:79:b5:4d:ad: 44:42:de:4b:49:99:6f:c9:fa:3a:94:d4:ac:ee:ca:c4:95:6c: b6:a8:f3:13:a7:8b:95:76:cb:7f:49:e2:b7:e4:88:37:7b:07: 43:8e:b8:df:d6:34:fb:59:96:b8:ca:0c:82:33:98:4c:09:87: e9:70:6e:8b:2a:fe:3d:4a:73:97:9b:d6:99:26:8d:82:df:75: 67:f4:04:fe:70:97:8b:55:fb:07:2a:79:81:6c:84:60:0e:e2: 10:48:89:48:20:b4:f5:22:32:8d:56:fe:3f:34:98:1a:d8:05: d1:ff:eb:04:35:1b:63:d6:44:d3:7e:23:36:32:32:1e:62:13: d3:83:c0:3b:b9:79:34:69:c9:9a:3f:3d:ba:e9:3f:bb:19:e7: 74:2c:b7:be:a2:19:dd:be:94:ae:fa:39:41:01:6e:5f:80:d9: ab:d4:92:fb:f0:3d:ea:f5:ba:3d:b8:9c:9f:00:00:17:d5:a9: 8c:21:90:dc:ea:c6:4f:80:84:9d:bd:08:1f:5a:3b:9c:13:8d: 1b:5b:bf:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23wdlQ10IbEYWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NTE5YzA1MmYtMmFkMi00YTc2LTlhMTItZWIyYmM2MWY4ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbovDs/2DA0SLQTMyIqclzhcK1tUGPFUQw7c 6wEiAyS9swxqUhEdNUH9WagEWKquFZNtDxnIiir+ILcSOTTpueD2xdK0kJLrT09I Wgvx6ulQ82xg7L9KW6nYdU8DLgTxvxvQH9kkDEkZAjDFmftwBdyfURME0rFRPH3r mI6QeAPV5YTHIbhnF1YtGBbNlk1qDS23fPfgsv0x1fmju7oWh1nbhrclof1Y1TPC B6XQVSlvWEt48ezQUYIWV47nC6ymz7CF9+C4nQe0SjpiXLidA2fvlEoCmQZEW+SH eQ3QTtd9uOxkYZKSD3y7I1VPCmiRVFxIZ9FkK0ZeskWLR+1vbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYnVar3uN+BWCHIw+eBN24cp+xBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTNiMWRlNDYtM2NmYi0z OTE2LTlmNDEtNWFjYTU1ODQ2YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCxVmceowqmrnLopBKwg4i3ZGpi/c//f6qUybOVh4QTZoVl+LbABICH WVXzvWFnONUKebVNrURC3ktJmW/J+jqU1KzuysSVbLao8xOni5V2y39J4rfkiDd7 B0OOuN/WNPtZlrjKDIIzmEwJh+lwbosq/j1Kc5eb1pkmjYLfdWf0BP5wl4tV+wcq eYFshGAO4hBIiUggtPUiMo1W/j80mBrYBdH/6wQ1G2PWRNN+IzYyMh5iE9ODwDu5 eTRpyZo/PbrpP7sZ53Qst76iGd2+lK76OUEBbl+A2avUkvvwPer1uj24nJ8AABfV qYwhkNzqxk+AhJ29CB9aO5wTjRtbv2g= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:54 2025 by rpki-client