$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aabf953e-34cb-365f-bcc7-06a3c6183f6b.roa File: aabf953e-34cb-365f-bcc7-06a3c6183f6b.roa (raw, json) Hash identifier: dRCgGRaMwQu3t/htzghK0J+ZBdCPoeD0q8C1Kg+RTGc= Subject key identifier: 75:AF:52:B7:49:BE:27:90:DE:08:99:6A:CF:1C:2C:E7:6D:17:8B:7A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB8C3D2437792B20BF2A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aabf953e-34cb-365f-bcc7-06a3c6183f6b.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.85.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:8c:3d:24:37:79:2b:20:bf:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=17e1f6fe-39fb-45d5-b2c7-a46b4d650f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:5a:53:ae:60:48:c7:35:3f:28:66:65:dc: a0:0f:d8:af:46:51:a9:32:3c:bb:0a:a5:be:0f:50: a0:ef:1c:32:03:86:42:f1:b4:2b:49:f5:8c:9e:79: 1c:b8:d3:5b:af:36:e8:63:06:38:62:92:cc:23:7d: 03:bb:9b:73:ba:88:5d:ac:01:88:64:d4:89:6c:cb: 20:e1:6b:69:bd:d2:02:dc:61:a9:87:50:10:0f:1d: 33:60:2d:59:ae:aa:40:f4:49:92:6d:7e:bf:3b:f9: 9c:9d:10:f1:da:04:85:9e:7f:37:4b:8d:ba:56:c7: 14:4f:ff:75:2b:af:fa:8e:eb:0b:6c:46:96:27:d9: 03:24:c6:cf:65:36:fb:e3:cb:4c:de:dd:83:9e:b4: 1f:66:57:b7:89:b4:41:e1:7e:c7:ef:96:8d:78:4c: 40:39:62:5e:17:51:17:a5:0e:bc:55:f5:1e:6a:e4: 1e:9c:82:87:ec:9c:a1:9d:cc:29:6f:eb:26:a7:3d: f9:04:2d:40:91:78:b7:8a:b8:a3:11:f3:09:22:06: 35:37:bc:7e:11:a7:f4:ed:fe:95:fb:a7:6e:f7:13: a8:eb:54:60:48:b4:fa:b4:fd:b6:33:b8:47:c1:30: 37:70:16:7d:1e:50:99:92:b2:27:a2:54:ed:b5:ee: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:52:B7:49:BE:27:90:DE:08:99:6A:CF:1C:2C:E7:6D:17:8B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aabf953e-34cb-365f-bcc7-06a3c6183f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8f:72:c3:d3:2b:84:15:ae:eb:cf:f3:54:0e:01:88:28:10: 60:4e:45:dc:21:f6:79:01:6b:7f:19:7c:9d:c7:43:b9:15:18: 3b:2c:44:53:e3:8d:9a:72:cb:ae:f9:4a:9b:0d:50:d6:7f:a1: ba:e9:0a:8a:52:92:42:55:c8:29:7e:25:4c:34:da:c0:ab:bc: 91:4d:c7:fb:cd:6e:28:5a:7d:42:f4:33:04:1d:70:32:3f:2c: 8f:90:8b:07:93:20:3c:91:85:3c:dd:36:d0:8a:25:18:87:6d: f6:6a:ae:93:8e:af:e4:f8:3b:cb:5c:4c:42:f5:4f:24:f5:b7: 42:75:77:30:0b:76:34:66:9b:0d:1b:19:a5:00:8b:0a:f7:66: 85:5f:4b:c6:11:fa:d8:2e:0b:b4:6a:7f:8c:04:99:86:a9:e2: 6b:c5:5f:75:3f:1a:d3:9c:27:94:95:b8:5d:fa:48:42:5e:6d: 1d:65:d6:38:97:e1:75:9b:0c:55:20:28:c2:43:0e:0a:52:7d: ce:9c:8c:6d:e8:bd:93:fa:69:16:44:23:c2:f6:43:4f:47:7c: 46:36:18:e5:32:bc:9c:95:43:5e:9f:e6:0d:a4:a5:34:cb:b0: 0f:59:29:97:3f:e6:2c:9c:2b:f2:04:bd:e0:c5:0e:86:7a:9c: 33:29:51:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24w9JDd5KyC/KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTdlMWY2ZmUtMzlmYi00NWQ1LWIyYzctYTQ2YjRkNjUwZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQhaU65gSMc1PyhmZdygD9ivRlGpMjy7CqW+ D1Cg7xwyA4ZC8bQrSfWMnnkcuNNbrzboYwY4YpLMI30Du5tzuohdrAGIZNSJbMsg 4WtpvdIC3GGph1AQDx0zYC1ZrqpA9EmSbX6/O/mcnRDx2gSFnn83S426VscUT/91 K6/6jusLbEaWJ9kDJMbPZTb748tM3t2DnrQfZle3ibRB4X7H75aNeExAOWJeF1EX pQ68VfUeauQenIKH7Jyhncwpb+smpz35BC1AkXi3irijEfMJIgY1N7x+Eaf07f6V +6du9xOo61RgSLT6tP22M7hHwTA3cBZ9HlCZkrInolTtte6/jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWvUrdJvieQ3giZas8cLOdtF4t6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWFiZjk1M2UtMzRjYi0z NjVmLWJjYzctMDZhM2M2MTgzZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOPcsPTK4QVruvP81QOAYgoEGBORdwh9nkBa38ZfJ3HQ7kVGDssRFPj jZpyy675SpsNUNZ/obrpCopSkkJVyCl+JUw02sCrvJFNx/vNbihafUL0MwQdcDI/ LI+QiweTIDyRhTzdNtCKJRiHbfZqrpOOr+T4O8tcTEL1TyT1t0J1dzALdjRmmw0b GaUAiwr3ZoVfS8YR+tguC7Rqf4wEmYap4mvFX3U/GtOcJ5SVuF36SEJebR1l1jiX 4XWbDFUgKMJDDgpSfc6cjG3ovZP6aRZEI8L2Q09HfEY2GOUyvJyVQ16f5g2kpTTL sA9ZKZc/5iycK/IEveDFDoZ6nDMpUds= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:34 2025 by rpki-client