$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa File: aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa (raw, json) Hash identifier: Bk9rrIQQN23ZcDsVn+fRAxs2otgKo3gFjc4rt6fvcUY= Subject key identifier: 3A:AB:26:FA:AF:EF:46:E4:F5:FD:2C:CA:D3:8C:B0:55:C4:19:3E:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA47C2E891C7374C6AA40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.66.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a4:7c:2e:89:1c:73:74:c6:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2e51925a-e947-4fbe-8e62-0ed4ee7c78cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:bb:67:eb:6f:26:3a:7b:18:97:e3:66:d7: c4:06:6b:2a:15:8d:6f:0f:f4:16:b2:d9:fd:a9:63: cb:f8:f1:1d:5c:90:1d:d2:ad:26:a3:7f:d6:c3:09: 1c:3c:dd:11:e2:c7:8a:3d:54:f9:3f:5b:31:fe:53: 0e:91:0d:40:7e:b2:cc:ff:d0:04:7a:bb:c2:b5:c8: 18:55:d4:25:4c:f5:25:b7:0b:77:64:79:fc:b6:a0: dd:44:5e:9e:be:9d:ad:49:53:d8:8c:b9:87:ae:e9: 67:e3:37:1f:a0:ac:c9:f0:e3:f7:53:fd:5a:7c:21: c4:3c:67:da:ca:5c:ae:1d:b9:d1:a8:8a:32:73:0a: 1b:a9:34:d8:40:d0:f1:2e:fd:14:7c:b2:e2:d1:96: 8e:93:aa:de:bc:84:6d:2e:60:1b:21:0b:a0:d6:6d: bf:cf:b6:f6:c6:fd:8d:10:5f:98:e6:47:7e:e0:db: 1f:1f:4c:d6:11:06:1e:02:54:9d:09:6a:5e:6f:76: 6e:62:13:3f:a1:b6:20:dc:10:51:4a:e7:ff:ef:b6: 1f:19:2a:00:e6:43:0f:b1:a2:a0:51:58:e6:90:52: ff:30:b5:bb:58:5d:29:f6:77:62:92:24:c2:3d:f4: 93:0b:14:16:7d:04:4f:69:ed:7e:0f:69:a0:a9:03: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AB:26:FA:AF:EF:46:E4:F5:FD:2C:CA:D3:8C:B0:55:C4:19:3E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:2f:f3:83:04:e4:af:e1:48:c1:dd:a8:b8:cb:5e:59:1d:ef: a4:80:bd:63:52:8e:a7:cc:d8:12:18:2a:d8:8d:f8:0b:42:bc: 9d:a2:8b:31:43:40:65:87:73:f2:99:92:b1:a1:37:f9:71:fd: 1a:0a:2e:5c:cc:22:5f:42:3e:1c:b7:c5:58:20:97:9e:59:fd: b0:88:d8:21:7f:9e:a3:f9:26:e8:ae:61:31:8b:c3:47:f4:8f: df:c9:2b:53:13:ea:b7:e5:49:1a:ec:6e:24:5f:e8:3e:92:fa: a2:f4:60:7f:06:1c:02:e7:87:5e:8d:0f:94:ac:71:d1:88:da: b2:74:78:d8:2f:ea:72:30:27:73:65:6c:bf:60:9f:31:c6:bb: 2c:f6:a6:58:2c:56:fe:cc:e8:a8:86:96:51:59:84:e0:6e:01: 31:79:a7:e2:ef:99:42:d7:c0:bf:96:4d:a4:ef:82:25:d6:5b: 42:17:e4:07:a4:6d:eb:d9:c1:84:82:7f:fd:a9:28:97:c4:dc: f3:ee:4b:e2:04:e6:60:fe:02:c3:f8:f7:e2:5a:c3:88:c9:75: bc:42:c2:29:fa:5d:85:75:74:2f:57:b6:5f:d1:9b:18:c6:85: 53:51:e6:f1:7b:28:75:0d:fe:d9:d8:50:79:cd:89:f0:a1:d4: 52:1b:7c:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26R8Lokcc3TGqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MmU1MTkyNWEtZTk0Ny00ZmJlLThlNjItMGVkNGVlN2M3OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1m7Z+tvJjp7GJfjZtfEBmsqFY1vD/QWstn9 qWPL+PEdXJAd0q0mo3/WwwkcPN0R4seKPVT5P1sx/lMOkQ1AfrLM/9AEervCtcgY VdQlTPUltwt3ZHn8tqDdRF6evp2tSVPYjLmHruln4zcfoKzJ8OP3U/1afCHEPGfa ylyuHbnRqIoycwobqTTYQNDxLv0UfLLi0ZaOk6revIRtLmAbIQug1m2/z7b2xv2N EF+Y5kd+4NsfH0zWEQYeAlSdCWpeb3ZuYhM/obYg3BBRSuf/77YfGSoA5kMPsaKg UVjmkFL/MLW7WF0p9ndikiTCPfSTCxQWfQRPae1+D2mgqQN9nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqrJvqv70bk9f0sytOMsFXEGT5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEzZjcyOGMtMmI1Zi0z M2NjLWE3ODYtZjVhOTMzM2FjYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUv84ME5K/hSMHdqLjLXlkd76SAvWNSjqfM2BIYKtiN+AtCvJ2iizFD QGWHc/KZkrGhN/lx/RoKLlzMIl9CPhy3xVggl55Z/bCI2CF/nqP5JuiuYTGLw0f0 j9/JK1MT6rflSRrsbiRf6D6S+qL0YH8GHALnh16ND5SscdGI2rJ0eNgv6nIwJ3Nl bL9gnzHGuyz2plgsVv7M6KiGllFZhOBuATF5p+LvmULXwL+WTaTvgiXWW0IX5Aek bevZwYSCf/2pKJfE3PPuS+IE5mD+AsP49+Jaw4jJdbxCwin6XYV1dC9Xtl/RmxjG hVNR5vF7KHUN/tnYUHnNifCh1FIbfAw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:38:02 2025 by rpki-client