$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea4721b-2e1f-3fdc-8afc-8d381df68056.roa File: aea4721b-2e1f-3fdc-8afc-8d381df68056.roa (raw, json) Hash identifier: j6GiKotox7dE2rutvHleqLwA80YFkge0uTqhKSQRgro= Subject key identifier: F3:7F:ED:AC:02:FE:AF:A3:A7:E0:59:37:72:C6:27:D3:33:76:F4:62 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD44F90CBF62D6AE51600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea4721b-2e1f-3fdc-8afc-8d381df68056.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.133.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d4:4f:90:cb:f6:2d:6a:e5:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=fcd222a7-549c-4720-ad18-5d76645bfcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:47:4b:a4:ba:7f:88:c3:62:31:a2:65:90: 73:8b:9c:69:3b:22:a6:3a:8f:4d:2e:c7:2b:8a:7e: e0:e1:e7:a7:78:d3:1c:17:60:67:a4:a6:12:d6:86: b8:0b:dd:5c:84:6e:25:69:61:7b:bf:e5:88:c2:ea: d7:60:12:81:a2:01:2d:03:48:0d:ac:22:72:e9:e4: eb:b6:65:e6:a7:a5:1c:75:df:dd:e8:ce:cd:29:4a: 95:9c:6b:cc:0c:10:6f:b9:56:e1:48:5d:44:5b:ad: dc:1b:0c:ef:c8:dd:5e:d2:d1:88:56:d8:65:73:22: 2f:f2:c6:c3:e6:b4:c2:f7:03:f8:0e:ab:81:4b:14: 69:21:6e:7a:45:9a:03:ba:d1:59:a5:27:9a:1a:11: f6:86:7f:2e:d4:2c:91:49:77:fd:b2:a1:a1:26:e0: 57:c4:fe:20:b6:57:77:25:bd:60:d9:dc:f3:6d:09: aa:ef:40:56:4d:c1:b9:c8:bd:48:5f:27:5d:46:9a: dd:ca:9b:30:87:5f:b9:0b:b3:60:6d:cd:0c:d1:62: 07:fe:17:1c:f4:f4:bc:f7:a2:25:87:c9:84:e2:89: 68:bb:80:28:47:f8:54:eb:d0:23:fb:66:f8:6f:e9: ab:9b:45:8f:aa:68:45:a8:e5:2e:49:42:dd:8c:80: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7F:ED:AC:02:FE:AF:A3:A7:E0:59:37:72:C6:27:D3:33:76:F4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea4721b-2e1f-3fdc-8afc-8d381df68056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b0:a4:1a:01:af:f7:08:7e:e7:54:f7:d0:0e:32:ce:a9:20: e6:21:6f:b7:98:db:92:2b:c6:65:9d:8e:7f:ab:f7:88:19:b1: 2e:a3:d6:6c:96:41:d0:8c:37:d8:35:e8:41:ff:eb:79:fe:c8: 30:ed:b2:4a:8b:fa:dc:7e:fa:73:63:df:45:13:6a:8c:57:e7: 32:b1:e1:90:f5:c0:d5:b9:e1:3d:80:ab:d4:9c:d4:26:3d:1e: db:a0:07:50:05:9d:76:11:0d:66:83:3c:89:c9:7e:3a:29:af: 4f:ff:2e:bb:12:af:07:37:50:8b:dd:59:e0:48:67:06:2f:89: 4f:fa:5f:f8:1b:b4:1d:ed:b2:ad:46:d5:12:9a:dd:a1:41:e2: dd:3f:e0:54:b1:27:b8:ea:e1:a2:12:ed:37:ed:6d:4d:ff:3c: 35:fa:07:c4:8a:c0:67:2b:6b:46:da:a2:9a:18:cf:62:2b:30: 5b:8d:7a:6f:7f:54:d9:eb:09:59:30:ac:95:b2:05:5b:85:2e: 04:8a:75:5c:49:5b:3d:3f:56:67:09:e2:bc:d1:78:04:3a:f9: 2f:24:0b:c3:99:8d:2d:81:a6:65:f9:26:39:db:40:07:8c:b4: 7d:12:30:42:1d:01:a9:72:23:e0:de:32:64:06:89:34:16:db: d9:7a:7d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29RPkMv2LWrlFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZmNkMjIyYTctNTQ5Yy00NzIwLWFkMTgtNWQ3NjY0NWJmY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOdHS6S6f4jDYjGiZZBzi5xpOyKmOo9NLscr in7g4eeneNMcF2BnpKYS1oa4C91chG4laWF7v+WIwurXYBKBogEtA0gNrCJy6eTr tmXmp6Ucdd/d6M7NKUqVnGvMDBBvuVbhSF1EW63cGwzvyN1e0tGIVthlcyIv8sbD 5rTC9wP4DquBSxRpIW56RZoDutFZpSeaGhH2hn8u1CyRSXf9sqGhJuBXxP4gtld3 Jb1g2dzzbQmq70BWTcG5yL1IXyddRprdypswh1+5C7Ngbc0M0WIH/hcc9PS896Il h8mE4olou4AoR/hU69Aj+2b4b+mrm0WPqmhFqOUuSULdjIDx1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN/7awC/q+jp+BZN3LGJ9MzdvRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVhNDcyMWItMmUxZi0z ZmRjLThhZmMtOGQzODFkZjY4MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGwpBoBr/cIfudU99AOMs6pIOYhb7eY25IrxmWdjn+r94gZsS6j1myW QdCMN9g16EH/63n+yDDtskqL+tx++nNj30UTaoxX5zKx4ZD1wNW54T2Aq9Sc1CY9 HtugB1AFnXYRDWaDPInJfjopr0//LrsSrwc3UIvdWeBIZwYviU/6X/gbtB3tsq1G 1RKa3aFB4t0/4FSxJ7jq4aIS7TftbU3/PDX6B8SKwGcra0baopoYz2IrMFuNem9/ VNnrCVkwrJWyBVuFLgSKdVxJWz0/VmcJ4rzReAQ6+S8kC8OZjS2BpmX5JjnbQAeM tH0SMEIdAalyI+DeMmQGiTQW29l6fU0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:45 2025 by rpki-client