$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa File: aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa (raw, json) Hash identifier: f+NAJzzq/1ojqpzMmbTgZ671VMtqL2sOHaiQ9WHkBm4= Subject key identifier: 4B:3C:E7:A9:36:6D:0B:EA:2A:75:55:E0:29:61:65:F8:03:FA:56:C4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8C70C87374333FBA510B9080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.154.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:c8:73:74:33:3f:ba:51:0b:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=ea4dab4d-07c1-4642-946d-55a91abcc571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:ef:54:5f:06:5d:54:5e:46:42:03:da:85: c6:11:ba:0d:4f:3d:16:76:73:00:f5:ab:cb:1f:a5: 43:d4:ad:f1:40:15:ed:a4:29:0a:29:27:c6:7f:b0: db:f1:b4:f6:6c:12:3a:f1:a9:e1:45:4b:23:7e:c2: 9a:ae:f8:f0:4f:89:fd:fc:42:36:5c:5f:45:02:ce: 7f:a4:61:2f:6d:d9:b1:64:b5:d9:d0:29:cb:9d:6b: a6:db:ae:0d:d0:10:f3:89:48:6f:0a:66:8c:64:67: ec:2b:10:ed:bb:44:2e:1f:03:05:6d:42:d7:c6:3b: 88:34:47:7f:f9:50:9b:eb:91:2c:5d:7f:5c:dc:fd: 15:5b:67:a3:11:d6:3c:74:ba:eb:73:4d:97:46:78: 4c:44:e7:77:5d:fc:9c:aa:c3:1f:de:21:b5:ca:8f: 61:39:16:62:65:bc:8f:ab:92:4c:ec:9a:06:88:52: 91:5e:ba:02:13:28:4f:77:35:f6:1a:58:c8:01:6b: 79:2f:2b:f8:c8:ac:ac:92:7e:6b:9e:44:ac:01:36: d6:88:9d:9a:eb:54:4e:b3:9a:d5:70:70:eb:9d:65: fa:bb:f5:48:e2:c1:ec:7e:78:4f:f7:f0:95:36:9b: e0:f1:72:99:b9:5a:ca:3f:65:d5:58:2c:f4:47:81: d3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3C:E7:A9:36:6D:0B:EA:2A:75:55:E0:29:61:65:F8:03:FA:56:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.154.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c2:c3:97:cb:32:50:7a:38:65:26:2f:5a:c7:fc:79:66:48: d6:2e:5c:be:70:ec:21:e6:56:10:35:11:2d:f5:3f:76:08:fb: e3:b4:8e:f0:08:ca:ff:a3:c9:86:50:f7:27:6f:61:0f:93:69: 9c:a0:45:9e:85:ba:72:6d:ea:6a:9d:06:a2:cf:73:09:73:59: 3c:56:d0:e0:f7:03:ec:8c:c0:fc:04:53:a6:f6:2e:23:65:cf: fa:2f:67:fc:86:de:56:e9:98:88:5c:f5:9c:62:20:e0:f3:5d: 4a:f2:51:65:e1:b4:24:8c:a0:70:52:29:40:86:32:fc:b7:e6: 6e:04:6b:b2:f5:93:4f:29:75:12:e8:eb:0f:a0:33:21:77:1f: fb:90:c5:3e:cc:28:58:5a:c0:0e:10:e4:39:88:74:7e:7f:57: 0d:a1:9d:4c:0b:1f:7c:d3:54:70:57:90:af:f2:7d:16:bf:89: 11:40:8b:e6:b4:b8:78:8a:a4:f0:8b:12:7b:86:1c:18:4f:ee: 6d:7a:12:40:3f:76:65:cb:c4:87:cd:63:66:65:41:06:e3:d0: f2:f0:c0:89:c9:ab:35:ed:1c:88:a1:c3:0c:4e:b4:10:fd:c7: 24:4c:a5:f0:98:e0:19:b4:83:32:94:e6:86:67:01:00:d1:bb: 3c:56:9c:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMhzdDM/ulELkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk ZWE0ZGFiNGQtMDdjMS00NjQyLTk0NmQtNTVhOTFhYmNjNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEjvVF8GXVReRkID2oXGEboNTz0WdnMA9avL H6VD1K3xQBXtpCkKKSfGf7Db8bT2bBI68anhRUsjfsKarvjwT4n9/EI2XF9FAs5/ pGEvbdmxZLXZ0CnLnWum264N0BDziUhvCmaMZGfsKxDtu0QuHwMFbULXxjuINEd/ +VCb65EsXX9c3P0VW2ejEdY8dLrrc02XRnhMROd3XfycqsMf3iG1yo9hORZiZbyP q5JM7JoGiFKRXroCEyhPdzX2GljIAWt5Lyv4yKyskn5rnkSsATbWiJ2a61ROs5rV cHDrnWX6u/VI4sHsfnhP9/CVNpvg8XKZuVrKP2XVWCz0R4HTDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEs856k2bQvqKnVV4ClhZfgD+lbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE5OWJiZGEtZjBjYy0z NjhiLTlmNzktNWNlNGYzZTcxYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfCw5fLMlB6OGUmL1rH/HlmSNYuXL5w7CHmVhA1ES31P3YI++O0jvAI yv+jyYZQ9ydvYQ+TaZygRZ6FunJt6mqdBqLPcwlzWTxW0OD3A+yMwPwEU6b2LiNl z/ovZ/yG3lbpmIhc9ZxiIODzXUryUWXhtCSMoHBSKUCGMvy35m4Ea7L1k08pdRLo 6w+gMyF3H/uQxT7MKFhawA4Q5DmIdH5/Vw2hnUwLH3zTVHBXkK/yfRa/iRFAi+a0 uHiKpPCLEnuGHBhP7m16EkA/dmXLxIfNY2ZlQQbj0PLwwInJqzXtHIihwwxOtBD9 xyRMpfCY4Bm0gzKU5oZnAQDRuzxWnFw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:56 2025 by rpki-client