$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aac845f9-589f-38f6-8f22-50730393a4e2.roa File: aac845f9-589f-38f6-8f22-50730393a4e2.roa (raw, json) Hash identifier: 99Mlu0bWN0cyfF1akTmylMo9gMh/DPHDtxpvz+86O+Q= Subject key identifier: 68:96:F2:C6:C7:56:CB:35:94:C1:9C:9A:F5:7C:2F:73:01:89:6C:AC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE56D589FA14A215647C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aac845f9-589f-38f6-8f22-50730393a4e2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.64.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e5:6d:58:9f:a1:4a:21:56:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=664a0b3e-8445-40c8-b6fe-c95e9102c633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:36:fd:a5:bc:a7:85:c3:02:3f:6c:c7:d8: 08:22:aa:38:f1:2f:d6:11:d1:d8:8c:3a:5f:8f:8c: 5d:23:af:8b:ee:01:0b:2c:87:90:72:3a:fe:90:ca: 59:db:75:5d:d4:a1:41:e4:71:a6:6c:1e:ce:46:34: d2:85:c4:12:04:e9:42:d9:38:3f:35:79:af:86:f5: d4:39:78:33:3f:28:4e:11:07:1b:ef:7d:29:6e:eb: 64:ae:1e:97:b4:d2:78:db:da:fa:3c:21:8d:45:be: 5c:f4:70:61:2c:30:ff:9c:ec:1c:80:7c:cc:db:cd: 3e:17:81:6b:7b:e6:5d:51:c5:4e:5a:ef:ad:31:24: 82:55:4c:ee:58:9c:0c:42:26:89:f5:6d:c4:8c:d9: d0:da:82:aa:25:e7:77:17:9e:1e:10:6e:65:4c:f1: 1c:4e:8e:0b:2e:f0:de:06:af:31:f4:12:62:d1:df: d3:de:be:c7:06:47:c0:43:a4:98:34:a6:44:c7:9c: 2d:bd:f2:46:4f:d3:1d:a1:85:d7:fc:0c:5f:e1:54: e5:d2:f0:aa:dc:3c:11:4a:a6:71:19:9a:18:a8:3a: c1:f5:23:fa:9f:8a:11:d3:34:91:d5:7a:87:82:36: ac:78:e0:ab:05:7d:a2:a8:4c:23:d5:7c:24:33:a6: 8e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:96:F2:C6:C7:56:CB:35:94:C1:9C:9A:F5:7C:2F:73:01:89:6C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aac845f9-589f-38f6-8f22-50730393a4e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:57:6e:96:c1:aa:09:8a:57:fe:c0:03:c4:f1:fc:35:24:c6: 0b:65:8b:16:8b:09:54:fa:57:9e:b5:39:27:5b:e4:ca:24:f1: 85:7e:64:99:91:c8:79:2f:c5:7f:bb:53:5c:d5:3e:52:f6:72: af:a0:15:dc:0e:29:36:dc:60:86:d0:95:e3:ed:9a:50:23:2f: e0:ce:4a:20:2c:af:9b:ac:27:48:19:85:50:f8:b7:ce:54:de: d5:24:59:24:07:00:77:82:48:c9:e2:12:e7:a4:f4:6e:a6:35: 73:ee:f6:29:c2:ab:56:48:6d:93:01:45:f6:3a:f4:00:2b:0e: 6d:08:e0:49:17:ca:47:f0:6e:c0:6f:59:ce:5d:32:7a:9a:1f: 7a:bf:98:03:79:31:27:ef:da:38:2b:0f:d4:54:f6:a1:ce:29: 00:b9:ad:ce:3a:b5:60:e1:0a:20:6e:5b:3a:5b:d8:74:28:49: ed:81:4c:2a:3c:df:38:41:08:80:83:99:36:f4:ee:77:7a:d9: 59:1d:f5:34:49:ac:03:45:07:ab:66:90:ca:b8:54:a7:19:98: 48:ff:6b:ec:61:6c:42:53:28:c3:18:d4:ee:6b:73:7b:8b:27: 8b:d1:eb:fd:5d:6a:56:dd:2d:3a:77:b7:39:1f:54:3c:83:0a: 26:15:ab:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+VtWJ+hSiFWR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjY0YTBiM2UtODQ0NS00MGM4LWI2ZmUtYzk1ZTkxMDJjNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKk2/aW8p4XDAj9sx9gIIqo48S/WEdHYjDpf j4xdI6+L7gELLIeQcjr+kMpZ23Vd1KFB5HGmbB7ORjTShcQSBOlC2Tg/NXmvhvXU OXgzPyhOEQcb730pbutkrh6XtNJ429r6PCGNRb5c9HBhLDD/nOwcgHzM280+F4Fr e+ZdUcVOWu+tMSSCVUzuWJwMQiaJ9W3EjNnQ2oKqJed3F54eEG5lTPEcTo4LLvDe Bq8x9BJi0d/T3r7HBkfAQ6SYNKZEx5wtvfJGT9MdoYXX/Axf4VTl0vCq3DwRSqZx GZoYqDrB9SP6n4oR0zSR1XqHgjaseOCrBX2iqEwj1XwkM6aOHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiW8sbHVss1lMGcmvV8L3MBiWysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWFjODQ1ZjktNTg5Zi0z OGY2LThmMjItNTA3MzAzOTNhNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRXbpbBqgmKV/7AA8Tx/DUkxgtlixaLCVT6V561OSdb5Mok8YV+ZJmR yHkvxX+7U1zVPlL2cq+gFdwOKTbcYIbQlePtmlAjL+DOSiAsr5usJ0gZhVD4t85U 3tUkWSQHAHeCSMniEuek9G6mNXPu9inCq1ZIbZMBRfY69AArDm0I4EkXykfwbsBv Wc5dMnqaH3q/mAN5MSfv2jgrD9RU9qHOKQC5rc46tWDhCiBuWzpb2HQoSe2BTCo8 3zhBCICDmTb07nd62Vkd9TRJrANFB6tmkMq4VKcZmEj/a+xhbEJTKMMY1O5rc3uL J4vR6/1dalbdLTp3tzkfVDyDCiYVq9w= -----END CERTIFICATE-----Generated at Tue Jul 22 04:35:29 2025 by rpki-client