$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4b5fbda-9f99-3103-95a1-23ba74645b75.roa File: b4b5fbda-9f99-3103-95a1-23ba74645b75.roa (raw, json) Hash identifier: zVOrz2gHdD8HVWLNM0AcBjNaPDS/rciDZoyT/aC1rjM= Subject key identifier: 48:AE:B6:5D:9C:F2:4B:16:1B:F2:A8:E7:C2:78:46:B1:AE:57:04:EE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9A673D748F9F7CFE6100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4b5fbda-9f99-3103-95a1-23ba74645b75.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.86.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9a:67:3d:74:8f:9f:7c:fe:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a39c3d83-c603-4d20-8a92-70ab24f0e3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:30:dc:39:2e:13:b3:3f:f3:a2:4d:63:fe:28: 0e:90:cf:05:07:80:83:4e:df:1b:c3:a4:02:d2:2f: 0e:62:02:a1:08:9a:d2:44:d0:84:b6:00:3a:f2:e4: 43:38:24:ad:07:f1:e0:2d:c3:df:01:fc:cb:fb:e9: a3:41:ef:ea:2c:8e:d3:2d:bc:7d:35:28:44:58:a6: 0e:9a:8a:3a:85:43:24:5d:af:fb:b0:15:66:6c:b6: 53:a5:87:f0:e5:dd:f5:b0:ef:83:25:9b:5f:a7:68: 83:b6:bc:b7:91:dc:46:a5:48:06:e5:69:a5:ee:8a: ef:a3:3f:c3:9a:ea:7d:97:4e:d6:56:10:56:e8:5c: c0:f6:d8:7a:96:bb:6f:fe:fc:d4:60:14:e7:2a:1e: d0:46:5a:6b:3e:57:8f:40:dd:57:c4:da:ac:81:ec: ce:1a:27:36:42:9a:d6:bd:63:63:16:b9:c2:f2:37: 1b:d5:d2:73:73:a2:2e:b1:29:a9:d1:e1:eb:71:c1: 83:4a:27:1d:cc:8a:16:5d:49:48:70:25:b2:8e:f6: f8:87:23:ba:f6:f1:72:39:37:1e:2a:12:16:06:5f: 42:86:14:d1:c5:4e:47:71:2e:19:f8:67:72:3c:91: 55:06:10:ce:1d:a5:4d:6f:ea:b2:61:6f:47:dd:4d: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AE:B6:5D:9C:F2:4B:16:1B:F2:A8:E7:C2:78:46:B1:AE:57:04:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4b5fbda-9f99-3103-95a1-23ba74645b75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:84:b4:b6:b1:ed:82:74:a2:55:d0:c9:5a:c9:30:81:3e:8b: 07:06:84:c5:25:e7:f1:77:bd:af:15:e1:73:38:37:3d:2b:59: 7d:47:4d:22:72:18:0e:eb:3d:0d:cc:53:e2:bc:3d:71:8e:76: 27:31:f2:22:b4:af:e0:22:25:18:d0:c2:c1:e0:34:12:69:ed: 26:9a:c1:b4:86:31:dd:11:e5:95:a1:9e:73:49:d9:20:7a:55: 5b:7d:78:53:e0:9b:a6:0e:55:55:23:9f:ca:aa:6c:2a:0a:bf: 4c:35:72:84:3a:75:cb:cd:6c:5b:14:29:dc:d0:8b:1e:56:f1: 7f:12:a4:88:c2:74:f9:d4:fd:f3:bb:f0:72:7c:e7:4e:f9:c0: 2b:be:7f:8b:4a:51:2c:ac:5f:d6:fb:cf:ea:9d:e2:b6:01:56: 7f:60:66:bd:2e:24:e3:c5:a2:f8:60:60:0e:2a:28:42:35:fd: 75:e4:63:be:cf:af:5a:5a:31:35:14:9d:45:2a:89:b3:8f:5a: 80:6e:78:5b:2a:62:73:bd:cd:e2:f5:33:31:9c:17:7a:a3:79: 46:d5:b2:5c:72:0f:0d:41:22:30:5b:79:50:2c:37:9f:7b:af: 03:44:ff:bd:d6:e6:0f:63:f4:f7:78:f5:70:0c:11:89:6a:5f: b2:c3:87:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25pnPXSPn3z+YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YTM5YzNkODMtYzYwMy00ZDIwLThhOTItNzBhYjI0ZjBlM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTDcOS4Tsz/zok1j/igOkM8FB4CDTt8bw6QC 0i8OYgKhCJrSRNCEtgA68uRDOCStB/HgLcPfAfzL++mjQe/qLI7TLbx9NShEWKYO moo6hUMkXa/7sBVmbLZTpYfw5d31sO+DJZtfp2iDtry3kdxGpUgG5Wml7orvoz/D mup9l07WVhBW6FzA9th6lrtv/vzUYBTnKh7QRlprPlePQN1XxNqsgezOGic2QprW vWNjFrnC8jcb1dJzc6IusSmp0eHrccGDSicdzIoWXUlIcCWyjvb4hyO69vFyOTce KhIWBl9ChhTRxU5HcS4Z+GdyPJFVBhDOHaVNb+qyYW9H3U08rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiutl2c8ksWG/Ko58J4RrGuVwTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjRiNWZiZGEtOWY5OS0z MTAzLTk1YTEtMjNiYTc0NjQ1Yjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOEtLax7YJ0olXQyVrJMIE+iwcGhMUl5/F3va8V4XM4Nz0rWX1HTSJy GA7rPQ3MU+K8PXGOdicx8iK0r+AiJRjQwsHgNBJp7SaawbSGMd0R5ZWhnnNJ2SB6 VVt9eFPgm6YOVVUjn8qqbCoKv0w1coQ6dcvNbFsUKdzQix5W8X8SpIjCdPnU/fO7 8HJ85075wCu+f4tKUSysX9b7z+qd4rYBVn9gZr0uJOPFovhgYA4qKEI1/XXkY77P r1paMTUUnUUqibOPWoBueFsqYnO9zeL1MzGcF3qjeUbVslxyDw1BIjBbeVAsN597 rwNE/73W5g9j9Pd49XAMEYlqX7LDh1I= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:30 2025 by rpki-client