$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa File: a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa (raw, json) Hash identifier: LLWj1ZsA8lJ0tiDkf6eidAdyrk3hFGz7TY83vzX46Fo= Subject key identifier: 18:38:59:4B:59:67:98:0F:77:5D:2B:1C:68:CE:37:10:B0:86:A3:AB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF2D2B124931B38D48800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.70.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f2:d2:b1:24:93:1b:38:d4:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=844bb561-2ae1-457c-99f5-7fc78406d983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:6e:21:70:a7:a6:e0:bb:c5:91:ae:29:63: 7f:30:35:8f:d0:d1:19:26:9c:ec:37:60:82:f5:e2: 1d:ce:68:07:df:d8:3b:34:42:13:ed:53:b9:fb:90: a0:03:14:94:24:55:be:db:41:f1:f9:1b:e9:d3:46: 16:b3:87:1d:9e:ba:0b:1e:25:b4:7e:e9:da:03:11: 78:9c:98:f4:9e:5a:9c:d1:21:07:2d:59:07:22:d5: 0e:91:bf:6b:8f:0b:40:5f:46:01:34:0b:3b:5e:06: c0:84:9b:d5:51:af:ae:09:9c:fa:6d:55:29:f7:b2: 20:d1:00:2b:c1:8a:8d:32:3d:f5:b5:06:f9:83:77: ad:ce:71:18:3a:bc:66:93:68:9a:60:95:74:6f:70: 54:29:61:a1:2d:84:41:ab:02:24:71:65:d0:53:b9: e0:c0:97:96:a6:f0:82:40:ab:11:b6:bb:da:d9:3b: 31:9f:5d:e1:dc:a4:85:f1:61:d0:4d:47:93:61:4e: e8:46:f1:e9:bb:8e:91:c8:9a:c0:79:2e:b6:b5:10: 57:73:d2:11:d3:17:fe:f8:e2:e5:f2:bf:2f:f4:2a: 37:0e:6e:76:87:3d:e1:4b:0f:ce:d1:d0:88:4a:2a: 92:25:49:cb:a6:d9:ff:c0:ec:42:9c:63:43:5a:f4: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:38:59:4B:59:67:98:0F:77:5D:2B:1C:68:CE:37:10:B0:86:A3:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e5:2d:cb:f5:e3:b6:03:fe:b7:37:97:8f:a5:92:8a:62:e5: 31:a3:dc:c7:2c:04:91:66:c7:2e:c7:48:14:85:e3:19:04:07: 9c:4c:0b:5d:44:a3:de:fc:44:b6:77:9d:b3:ef:89:16:f0:01: ad:1d:93:01:23:b8:9d:37:a2:a5:fe:7d:67:4a:6e:d1:cd:d8: 4b:be:f2:40:c0:31:73:26:aa:a5:ef:17:db:10:4b:f3:9b:2c: 7c:d7:e6:55:e9:22:13:68:44:bf:4a:9e:d2:d6:7d:8d:51:78: 51:1f:36:c4:bf:2e:64:a0:5a:3d:e9:8e:35:d7:fc:de:8a:88: ea:73:14:ee:89:1d:fc:26:d7:ae:14:80:dc:f1:09:6f:67:f7: 24:87:f8:22:f5:5c:c2:30:78:f4:8c:91:23:66:70:c4:d2:b3: 6e:df:60:51:9b:80:58:2a:43:18:46:8d:2c:80:7b:af:2f:0d: b2:e0:90:c1:a1:7a:7e:62:7d:1f:1d:e6:d0:e2:fc:0c:95:fc: 5b:89:76:85:a1:6f:ab:77:3d:df:a9:90:a6:cc:84:28:c4:8e: f7:39:e8:a6:3e:66:86:71:f1:e0:aa:c0:b8:2f:53:45:db:cb: fb:5b:a0:ee:42:18:62:e5:f1:f5:6c:a3:dd:62:8b:df:c2:b1: 45:1e:8d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/LSsSSTGzjUiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODQ0YmI1NjEtMmFlMS00NTdjLTk5ZjUtN2ZjNzg0MDZkOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW1uIXCnpuC7xZGuKWN/MDWP0NEZJpzsN2CC 9eIdzmgH39g7NEIT7VO5+5CgAxSUJFW+20Hx+Rvp00YWs4cdnroLHiW0funaAxF4 nJj0nlqc0SEHLVkHItUOkb9rjwtAX0YBNAs7XgbAhJvVUa+uCZz6bVUp97Ig0QAr wYqNMj31tQb5g3etznEYOrxmk2iaYJV0b3BUKWGhLYRBqwIkcWXQU7ngwJeWpvCC QKsRtrva2Tsxn13h3KSF8WHQTUeTYU7oRvHpu46RyJrAeS62tRBXc9IR0xf++OLl 8r8v9Co3Dm52hz3hSw/O0dCISiqSJUnLptn/wOxCnGNDWvQaMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBg4WUtZZ5gPd10rHGjONxCwhqOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTViNzU1NTQtZGQ3YS0z NWFhLWE5ZDMtYmY0NGMzNTEyYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7lLcv147YD/rc3l4+lkopi5TGj3McsBJFmxy7HSBSF4xkEB5xMC11E o978RLZ3nbPviRbwAa0dkwEjuJ03oqX+fWdKbtHN2Eu+8kDAMXMmqqXvF9sQS/Ob LHzX5lXpIhNoRL9KntLWfY1ReFEfNsS/LmSgWj3pjjXX/N6KiOpzFO6JHfwm164U gNzxCW9n9ySH+CL1XMIwePSMkSNmcMTSs27fYFGbgFgqQxhGjSyAe68vDbLgkMGh en5ifR8d5tDi/AyV/FuJdoWhb6t3Pd+pkKbMhCjEjvc56KY+ZoZx8eCqwLgvU0Xb y/tboO5CGGLl8fVso91ii9/CsUUejdo= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:53 2025 by rpki-client