$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a80d53f5-622b-3923-83fb-6a4f50d3ee9b.roa File: a80d53f5-622b-3923-83fb-6a4f50d3ee9b.roa (raw, json) Hash identifier: 4VwQbaTsDlUGekAhDhME6PUQFF9N8/JNw5WmScfgGqc= Subject key identifier: 49:DF:87:1E:E7:30:F8:A6:52:22:8C:59:FF:6D:AC:71:A7:24:97:D7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA7554AAC7681464B7550 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a80d53f5-622b-3923-83fb-6a4f50d3ee9b.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.70.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a7:55:4a:ac:76:81:46:4b:75:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=8fe7ba90-140e-44d3-a831-51f22293e2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:6e:4f:91:c0:da:08:89:bc:45:01:9c:57: 57:bc:b2:cf:dd:a7:c8:93:2c:ca:1a:2c:6a:37:1e: 36:1f:21:9f:3a:59:b2:66:78:f0:a6:0d:27:89:0a: c6:2a:c8:e0:30:db:e3:83:09:4f:c3:b5:b7:ca:a4: 6c:c4:2a:b8:da:10:a6:34:66:6d:c6:75:0b:f1:5a: 86:25:2d:05:bb:31:4f:6d:0b:32:6c:0e:16:17:fd: d6:a6:05:5d:e6:80:13:e5:83:e0:0c:00:93:29:b8: 23:9e:5b:57:53:7a:0d:f7:cd:d5:c9:77:9e:fa:a6: 47:18:a4:b0:4d:f1:6a:1d:de:c5:0d:c9:b3:a2:2a: 1b:60:10:50:f1:f5:ac:b0:97:42:a0:6a:53:30:ec: 9e:06:f5:1b:7f:be:35:e9:de:dc:8a:9b:76:15:f9: 0e:e7:54:60:a6:9f:44:12:3e:0e:9e:a5:4b:8c:0d: 9b:33:20:d8:9f:0a:58:52:3a:80:c2:74:e1:2b:b2: d7:36:30:d8:a1:29:55:76:ca:5c:33:2d:b3:d3:cf: 34:02:5e:66:c2:3d:c0:73:87:85:80:2e:6d:16:ac: 63:c2:b2:b1:22:5a:31:29:95:54:68:f5:45:67:09: df:89:ab:d6:20:72:7a:25:d2:34:4b:66:e1:ba:08: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DF:87:1E:E7:30:F8:A6:52:22:8C:59:FF:6D:AC:71:A7:24:97:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a80d53f5-622b-3923-83fb-6a4f50d3ee9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:24:d5:42:76:b9:14:7c:4a:1a:8c:a3:e8:16:32:fe:df:87: d8:fd:35:08:2f:d8:e1:c4:9c:77:63:6f:3f:a5:5a:66:7f:69: af:cb:de:65:b3:55:3e:37:df:b6:ae:6d:11:89:9f:e0:3e:a4: ee:f4:af:0e:ee:b5:7f:c6:c8:09:9c:c3:82:1e:59:b6:90:84: cb:b7:b9:f8:02:e4:10:d0:6f:76:b6:d7:3c:89:f2:45:42:09: e1:12:cb:68:46:50:af:bb:ef:31:6d:46:97:f0:19:0d:79:b9: 23:cc:93:3d:09:15:06:f4:82:41:68:fc:cc:0b:c9:60:29:03: f6:bc:f6:bf:04:f9:80:ac:24:49:c3:39:e1:8d:bd:56:95:e8: 98:94:ae:17:c1:89:69:29:c3:62:6b:97:ba:27:a3:ab:0a:77: 33:b8:7f:51:c2:8a:37:eb:4e:bc:b1:d5:47:98:31:3a:33:36: dc:d4:ea:f9:c8:49:e7:31:58:32:cc:66:94:db:b5:6b:0b:b1: 6b:1e:58:66:a7:5f:1a:6e:eb:81:c6:10:53:dc:a3:c6:dd:c0: c9:d8:96:bb:b6:81:90:06:77:d7:8c:01:57:c4:24:0d:29:0d: 80:9c:88:87:9f:24:e5:3b:d6:e8:58:17:5b:c3:9a:bd:cb:4c: 8a:c2:9d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26dVSqx2gUZLdVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OGZlN2JhOTAtMTQwZS00NGQzLWE4MzEtNTFmMjIyOTNlMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4RuT5HA2giJvEUBnFdXvLLP3afIkyzKGixq Nx42HyGfOlmyZnjwpg0niQrGKsjgMNvjgwlPw7W3yqRsxCq42hCmNGZtxnUL8VqG JS0FuzFPbQsybA4WF/3WpgVd5oAT5YPgDACTKbgjnltXU3oN983VyXee+qZHGKSw TfFqHd7FDcmzoiobYBBQ8fWssJdCoGpTMOyeBvUbf7416d7cipt2FfkO51Rgpp9E Ej4OnqVLjA2bMyDYnwpYUjqAwnThK7LXNjDYoSlVdspcMy2z0880Al5mwj3Ac4eF gC5tFqxjwrKxIloxKZVUaPVFZwnfiavWIHJ6JdI0S2bhugg6bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnfhx7nMPimUiKMWf9trHGnJJfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTgwZDUzZjUtNjIyYi0z OTIzLTgzZmItNmE0ZjUwZDNlZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUk1UJ2uRR8ShqMo+gWMv7fh9j9NQgv2OHEnHdjbz+lWmZ/aa/L3mWz VT4337aubRGJn+A+pO70rw7utX/GyAmcw4IeWbaQhMu3ufgC5BDQb3a21zyJ8kVC CeESy2hGUK+77zFtRpfwGQ15uSPMkz0JFQb0gkFo/MwLyWApA/a89r8E+YCsJEnD OeGNvVaV6JiUrhfBiWkpw2Jrl7ono6sKdzO4f1HCijfrTryx1UeYMTozNtzU6vnI SecxWDLMZpTbtWsLsWseWGanXxpu64HGEFPco8bdwMnYlru2gZAGd9eMAVfEJA0p DYCciIefJOU71uhYF1vDmr3LTIrCncs= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:13 2025 by rpki-client