$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aef67419-5b25-3dac-916f-5eef2ac5fd52.roa File: aef67419-5b25-3dac-916f-5eef2ac5fd52.roa (raw, json) Hash identifier: aUlUbMOeQ87hO3gVwOfqctxQbz7q3bqoiwaZUW+lRdw= Subject key identifier: F3:7C:8A:2C:AB:BA:1D:CC:B4:E5:7B:F9:C1:B9:6A:5E:57:F2:E8:E5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBAD240CC198DA6E97040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aef67419-5b25-3dac-916f-5eef2ac5fd52.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.136.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ba:d2:40:cc:19:8d:a6:e9:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0b80a3a1-3e85-40eb-9ee6-bf99b066d2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9c:98:bf:68:1d:bb:f1:50:6a:80:97:07:3e: 47:a6:fa:2e:dd:e6:c2:0c:75:1c:a5:f5:e8:92:1a: 92:e7:ad:5d:96:88:9b:2f:f2:fa:25:5f:62:df:db: e1:5b:18:8d:92:a3:e9:2c:23:b5:d1:96:00:65:36: d0:70:1d:9c:ad:83:34:8c:cb:d3:1b:80:85:46:7e: 5d:a3:ec:f0:8d:e3:e0:2f:d2:e6:ab:a9:2d:cd:bd: ec:11:39:51:5b:7b:5e:0a:f4:f1:0f:e2:dd:3d:b5: 50:f3:4e:79:55:cc:b0:52:dc:04:18:0d:f2:f3:63: f8:7c:50:20:b8:46:17:04:f1:bd:11:4a:0b:e9:91: fc:bc:81:a3:45:ac:f7:79:41:3c:fe:7d:3c:95:f8: d1:ac:8b:de:94:00:a9:52:c6:e8:f9:9c:e5:1d:67: 83:f2:1b:de:cb:78:bc:f7:70:39:8c:10:3a:fd:7f: 18:15:e0:1c:1d:df:5d:66:85:20:f6:27:52:9e:0a: 02:52:19:ba:5f:7e:d0:7d:c0:68:7a:f5:c1:02:30: db:0d:aa:cc:d5:62:80:78:e9:d5:c4:bd:dc:3f:15: d0:bc:4c:75:89:3d:d9:ae:4c:4d:0c:e4:43:fa:bb: a3:29:10:97:8c:89:dc:95:53:ba:9d:4e:95:aa:43: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7C:8A:2C:AB:BA:1D:CC:B4:E5:7B:F9:C1:B9:6A:5E:57:F2:E8:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aef67419-5b25-3dac-916f-5eef2ac5fd52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:3b:f0:40:b7:f5:89:58:b0:3e:15:88:de:2d:a6:f0:ed:b4: de:23:da:91:5a:ad:37:03:28:d7:be:4c:a0:cc:0f:df:18:10: 44:46:e1:68:94:46:53:8a:86:27:71:59:77:61:bd:44:e0:f8: f9:3b:6c:de:35:7d:25:2b:dd:20:81:c0:30:84:2d:53:6b:70: 9f:73:30:27:34:4e:38:28:db:f9:7b:53:ef:73:6f:3c:3a:7e: bc:86:ec:32:5f:d9:dc:11:ba:d3:44:df:c9:6f:90:a3:3e:bd: 17:43:c8:24:af:7c:cc:78:77:68:a7:a3:e6:52:ef:4a:d7:9e: 88:f7:c0:9b:f1:91:0b:0e:47:d3:62:70:71:61:8f:48:63:98: 8a:ff:27:1e:3a:82:1c:6a:33:4a:43:3e:e3:a1:f7:c7:78:a0: 14:05:88:a7:86:17:66:95:00:fe:2c:07:f5:3a:dd:03:dc:49: 23:34:80:a1:64:56:15:b2:a3:c9:c0:d9:cd:f9:59:9e:f1:32: 6d:ed:a6:68:81:41:4a:51:b8:11:71:74:e5:84:63:d3:74:f1: a0:26:33:5c:78:6d:be:75:61:68:0d:25:c9:e2:7b:20:77:86: 4c:9d:0e:5b:fb:20:0d:f1:34:d5:cb:a6:7b:13:f4:c9:b8:b5: 3b:15:92:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27rSQMwZjabpcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGI4MGEzYTEtM2U4NS00MGViLTllZTYtYmY5OWIwNjZkMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JyYv2gdu/FQaoCXBz5Hpvou3ebCDHUcpfXo khqS561dloibL/L6JV9i39vhWxiNkqPpLCO10ZYAZTbQcB2crYM0jMvTG4CFRn5d o+zwjePgL9Lmq6ktzb3sETlRW3teCvTxD+LdPbVQ8055VcywUtwEGA3y82P4fFAg uEYXBPG9EUoL6ZH8vIGjRaz3eUE8/n08lfjRrIvelACpUsbo+ZzlHWeD8hvey3i8 93A5jBA6/X8YFeAcHd9dZoUg9idSngoCUhm6X37QfcBoevXBAjDbDarM1WKAeOnV xL3cPxXQvEx1iT3ZrkxNDORD+rujKRCXjInclVO6nU6VqkMybwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN8iiyruh3MtOV7+cG5al5X8ujlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVmNjc0MTktNWIyNS0z ZGFjLTkxNmYtNWVlZjJhYzVmZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIojgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKU78EC39YlYsD4ViN4tpvDttN4j2pFarTcDKNe+TKDMD98YEERG4WiU RlOKhidxWXdhvUTg+Pk7bN41fSUr3SCBwDCELVNrcJ9zMCc0Tjgo2/l7U+9zbzw6 fryG7DJf2dwRutNE38lvkKM+vRdDyCSvfMx4d2ino+ZS70rXnoj3wJvxkQsOR9Ni cHFhj0hjmIr/Jx46ghxqM0pDPuOh98d4oBQFiKeGF2aVAP4sB/U63QPcSSM0gKFk VhWyo8nA2c35WZ7xMm3tpmiBQUpRuBFxdOWEY9N08aAmM1x4bb51YWgNJcnieyB3 hkydDlv7IA3xNNXLpnsT9Mm4tTsVkm0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:34:30 2025 by rpki-client