$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa File: a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa (raw, json) Hash identifier: ZEzJAvAhEqgiGtYBmoK+wyF7o0R1ZYM/cjbq4UVlYH0= Subject key identifier: 51:67:20:DF:49:AE:4D:55:A1:DD:BF:7C:B4:35:B8:E1:3B:C7:05:D1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE42B556BDD405A7CE0C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.95.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e4:2b:55:6b:dd:40:5a:7c:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1cc547ee-11e6-4b2b-86c3-e73b01e10492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:16:4a:ea:c9:c2:15:b1:49:c6:7f:37:07: c5:93:2b:6c:2e:38:31:66:d9:5f:4f:28:b9:97:b6: b4:d1:1b:ba:53:3d:75:57:fe:5a:85:6c:82:bd:5c: d0:e6:13:92:5f:12:9c:22:a5:91:a0:75:7c:e8:2b: fe:e3:bf:f9:3b:c7:2d:ce:cc:79:fb:4a:68:be:af: 62:a4:b7:97:2b:61:b2:d5:e6:1e:3e:ec:bf:4f:ff: 00:8c:8d:4c:75:3f:ab:8f:d3:f5:53:d3:c4:a3:c9: ed:a9:78:c1:ac:3a:61:5a:ec:a2:b1:e5:bb:c8:a2: 29:f7:c0:c3:22:0a:d9:fc:50:cc:6b:14:df:40:a2: 7d:6b:2b:5a:44:34:78:40:cc:e1:99:71:f3:97:22: c7:b1:59:c3:fc:3a:c7:16:26:9d:68:a8:58:76:8b: a7:24:ad:db:c9:50:7d:8a:48:7d:e1:13:b4:8e:cf: 8f:f6:74:ed:9c:5f:97:66:2d:c3:79:5c:4c:72:55: e8:0e:68:cc:68:ec:20:1a:18:1d:7e:39:e7:fd:69: 92:ad:98:bc:cd:a6:2b:59:aa:6d:cd:0c:34:39:e0: e5:c8:7a:b3:fa:8d:e2:c8:3c:0b:54:ea:81:97:ed: 2d:51:3b:d9:2d:b9:3d:f6:55:79:81:65:31:e2:0e: c1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:67:20:DF:49:AE:4D:55:A1:DD:BF:7C:B4:35:B8:E1:3B:C7:05:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6b:64:d8:c5:52:bc:23:a9:7a:6e:e9:7d:a4:0e:f1:f4:ac: cb:eb:6c:fd:8f:d0:e5:6a:45:82:36:c8:0a:12:3d:0f:93:26: 7a:bf:2c:38:39:99:57:1c:ae:5a:06:2c:61:a0:52:cb:5b:5c: 39:54:7a:73:58:43:83:30:d3:d5:98:08:36:65:41:8d:cb:37: 13:d0:3a:42:73:f5:ae:ec:d3:05:69:06:f3:dd:0d:96:c1:c8: f8:b4:9b:94:0d:32:1c:44:f8:6a:d6:83:36:f5:4f:23:3e:6d: 93:8a:7d:a1:e4:9a:f0:d1:b6:71:f8:f3:b9:ed:5f:f0:53:cd: df:b8:c2:e4:f0:18:50:d6:1e:44:27:94:1a:70:df:a7:fa:70: 9f:28:a2:76:ac:48:54:b1:5e:83:08:3d:9f:e9:27:86:8c:db: db:d4:0e:e3:e0:8d:26:43:a1:16:34:47:a1:3c:52:3c:57:e2: 4d:fa:84:29:ce:09:9e:d0:b4:80:ac:17:bb:15:b7:f8:c1:4f: 66:6f:28:e8:4a:7f:5c:d6:de:b0:4e:48:6d:d7:66:b1:c6:02: 74:ab:ac:e9:05:68:79:a4:58:a2:bc:0e:6e:37:fb:6e:0a:e0: a6:e4:8a:ce:97:6d:27:e2:a5:06:eb:30:87:26:e4:10:30:9e: a9:ff:35:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+QrVWvdQFp84MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MWNjNTQ3ZWUtMTFlNi00YjJiLTg2YzMtZTczYjAxZTEwNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIEWSurJwhWxScZ/NwfFkytsLjgxZtlfTyi5 l7a00Ru6Uz11V/5ahWyCvVzQ5hOSXxKcIqWRoHV86Cv+47/5O8ctzsx5+0povq9i pLeXK2Gy1eYePuy/T/8AjI1MdT+rj9P1U9PEo8ntqXjBrDphWuyiseW7yKIp98DD IgrZ/FDMaxTfQKJ9aytaRDR4QMzhmXHzlyLHsVnD/DrHFiadaKhYdounJK3byVB9 ikh94RO0js+P9nTtnF+XZi3DeVxMclXoDmjMaOwgGhgdfjnn/WmSrZi8zaYrWapt zQw0OeDlyHqz+o3iyDwLVOqBl+0tUTvZLbk99lV5gWUx4g7BgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFnIN9Jrk1Vod2/fLQ1uOE7xwXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQwZWQwY2EtNjZiOS0z ZjMwLWJjZjAtNDI5ZDM1NzBmMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABrZNjFUrwjqXpu6X2kDvH0rMvrbP2P0OVqRYI2yAoSPQ+TJnq/LDg5 mVccrloGLGGgUstbXDlUenNYQ4Mw09WYCDZlQY3LNxPQOkJz9a7s0wVpBvPdDZbB yPi0m5QNMhxE+GrWgzb1TyM+bZOKfaHkmvDRtnH487ntX/BTzd+4wuTwGFDWHkQn lBpw36f6cJ8oonasSFSxXoMIPZ/pJ4aM29vUDuPgjSZDoRY0R6E8UjxX4k36hCnO CZ7QtICsF7sVt/jBT2ZvKOhKf1zW3rBOSG3XZrHGAnSrrOkFaHmkWKK8Dm43+24K 4Kbkis6XbSfipQbrMIcm5BAwnqn/NTc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:55 2025 by rpki-client