$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af393c4d-3b10-368a-9910-6365e5643920.roa File: af393c4d-3b10-368a-9910-6365e5643920.roa (raw, json) Hash identifier: mKl4YwhAvJwJkJiV8jg0rwZUWeQw5DeyZ9iCSPReDJ0= Subject key identifier: 39:66:DB:42:48:A5:5C:5A:F1:DB:1E:2A:F5:29:D3:08:EC:96:CD:BA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB3145A804FD042BC0940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af393c4d-3b10-368a-9910-6365e5643920.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.83.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b3:14:5a:80:4f:d0:42:bc:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a5891b0f-0c78-4d6a-aa4d-14d2834faf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:2e:d2:b5:b7:c7:bc:18:75:24:c2:cf:88: a3:f0:5e:ed:78:56:2a:83:58:91:2f:ba:e5:31:61: 7a:15:f8:18:b3:a9:bf:d2:98:7f:19:bf:4a:d6:96: 5e:cb:f1:23:21:2b:db:83:45:40:07:0b:db:3b:a1: b4:68:4a:81:7d:e8:c6:ee:2c:e1:61:c2:7d:fc:4a: 12:a7:e7:90:4e:50:47:5a:1e:4d:25:d2:69:b4:09: a3:1f:6d:98:64:4e:09:28:aa:03:2e:57:e9:d0:a8: 51:e4:0b:82:9e:91:85:70:fc:7c:b9:a3:24:0a:4b: 93:6e:61:86:8d:7a:2f:60:ce:fe:87:fa:61:36:a1: 4b:15:30:61:02:26:e3:51:97:e1:ab:12:43:73:cc: ff:69:ed:a1:6c:69:77:c8:43:19:a4:8d:0f:04:2c: 5c:24:dc:ad:e7:2f:3c:7c:72:74:10:4e:c1:1e:53: c5:18:9a:b6:ce:69:50:65:04:96:54:a2:4e:f6:47: 12:37:a1:75:bc:8a:d6:0b:36:29:a7:d7:dc:2d:cd: 20:42:82:8b:35:fb:61:a8:8e:57:82:a5:93:06:58: 1a:67:a8:4b:12:84:a5:ed:35:04:c9:4d:64:0e:91: 62:71:16:79:45:af:7c:e0:e3:29:a8:c1:66:0c:db: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:66:DB:42:48:A5:5C:5A:F1:DB:1E:2A:F5:29:D3:08:EC:96:CD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af393c4d-3b10-368a-9910-6365e5643920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.83.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:34:72:68:75:9e:29:ef:b5:b0:21:26:b4:f7:9f:37:7c:bf: 27:a9:3b:fb:ce:1a:bf:ff:b8:0c:81:e3:dc:9d:ea:8b:22:cd: e1:c5:6c:d0:30:35:87:d2:e1:c6:81:c4:e4:2a:e9:2c:87:43: 03:d0:69:e6:bc:26:c6:e9:69:1a:9b:ff:fb:40:72:6b:81:31: 9c:af:12:36:6b:52:df:b4:63:57:6e:45:c5:ef:ec:a0:e2:bb: 8c:75:96:4e:6c:1e:71:36:8e:28:e5:20:3b:86:b4:78:05:dc: 54:57:01:1a:a9:0f:10:5d:35:06:b9:18:b0:a5:04:f9:87:f7: 53:ea:9b:d7:b2:32:86:9b:3b:04:eb:7c:30:1d:4e:59:89:ab: fb:0f:c0:6f:c4:89:be:38:65:d3:d8:ed:09:ac:80:1b:0e:e6: 3a:30:8a:0a:fc:92:82:92:e7:9c:94:5f:a7:66:bb:de:86:cf: de:26:f5:ba:5f:49:b0:f3:ea:48:91:63:a9:a0:cb:74:3c:60: f1:f6:c1:09:64:ef:6a:f7:1a:25:e6:72:bc:dd:ad:de:ed:8c: 07:3b:20:b6:22:38:92:60:7c:a9:5e:59:4b:71:58:84:94:69: 72:d2:f2:3f:a1:81:70:3a:51:45:e5:94:a8:09:92:99:1d:d6: 45:7e:06:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27MUWoBP0EK8CUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YTU4OTFiMGYtMGM3OC00ZDZhLWFhNGQtMTRkMjgzNGZhZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQMu0rW3x7wYdSTCz4ij8F7teFYqg1iRL7rl MWF6FfgYs6m/0ph/Gb9K1pZey/EjISvbg0VABwvbO6G0aEqBfejG7izhYcJ9/EoS p+eQTlBHWh5NJdJptAmjH22YZE4JKKoDLlfp0KhR5AuCnpGFcPx8uaMkCkuTbmGG jXovYM7+h/phNqFLFTBhAibjUZfhqxJDc8z/ae2hbGl3yEMZpI0PBCxcJNyt5y88 fHJ0EE7BHlPFGJq2zmlQZQSWVKJO9kcSN6F1vIrWCzYpp9fcLc0gQoKLNfthqI5X gqWTBlgaZ6hLEoSl7TUEyU1kDpFicRZ5Ra984OMpqMFmDNsU4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlm20JIpVxa8dseKvUp0wjsls26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWYzOTNjNGQtM2IxMC0z NjhhLTk5MTAtNjM2NWU1NjQzOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs0cmh1ninvtbAhJrT3nzd8vyepO/vOGr//uAyB49yd6osizeHFbNAw NYfS4caBxOQq6SyHQwPQaea8JsbpaRqb//tAcmuBMZyvEjZrUt+0Y1duRcXv7KDi u4x1lk5sHnE2jijlIDuGtHgF3FRXARqpDxBdNQa5GLClBPmH91Pqm9eyMoabOwTr fDAdTlmJq/sPwG/Eib44ZdPY7QmsgBsO5jowigr8koKS55yUX6dmu96Gz94m9bpf SbDz6kiRY6mgy3Q8YPH2wQlk72r3GiXmcrzdrd7tjAc7ILYiOJJgfKleWUtxWISU aXLS8j+hgXA6UUXllKgJkpkd1kV+Bs8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:23 2025 by rpki-client