$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5b41771-9bb5-3e3f-ac5f-9745c6256297.roa File: b5b41771-9bb5-3e3f-ac5f-9745c6256297.roa (raw, json) Hash identifier: HsGhBZwehwS4QdWSn6t5V5+e+Zd8L6wy+FaLMqEJbWE= Subject key identifier: 11:A3:96:85:CA:A6:98:13:0B:0F:34:06:FA:42:D1:83:34:31:1C:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE343DA5366C0B850B9C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5b41771-9bb5-3e3f-ac5f-9745c6256297.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.128.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e3:43:da:53:66:c0:b8:50:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=44a485c0-c092-4b93-a5f3-79498338c982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:3a:55:0b:c5:cc:e8:04:2b:7a:05:82:4b: ce:75:f4:a1:5b:f4:2f:58:00:13:f5:f9:99:ba:0e: 18:1f:99:8e:20:a2:83:9c:07:7d:dd:bf:2c:a3:8b: bd:21:4b:d4:50:de:ad:2c:b0:4a:0b:71:48:4b:12: 9e:9b:34:8d:7f:21:5f:c0:fe:96:a2:bb:49:55:e6: 63:80:ae:b2:38:c4:4e:bd:9b:bd:87:ff:47:d7:93: 50:33:73:92:b3:b0:f2:b0:6c:fa:a6:bf:c9:70:aa: a0:c4:c4:18:89:c2:3a:f6:0c:33:de:53:23:b9:9b: 56:a9:54:27:eb:46:5e:aa:87:fa:d8:d4:3e:5a:ce: 06:38:a7:96:a8:70:b6:03:72:c4:ad:db:94:c0:65: dc:0c:f3:16:c3:6c:6d:ae:c2:cf:70:20:33:7d:4f: 02:9d:53:4d:33:5e:05:dc:00:b2:21:44:4a:38:73: 44:b0:4c:8d:b0:76:40:96:70:8d:ce:4a:d6:17:04: 75:15:67:7a:03:07:fc:11:b0:f0:f5:58:21:fd:17: 7c:6d:84:24:2b:c2:b4:d5:14:89:2b:12:ac:36:e0: 81:f4:a7:25:57:d7:b1:05:11:57:cf:27:f0:50:19: 9b:65:35:bf:20:78:13:eb:40:6f:d7:e2:d8:d2:03: c9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A3:96:85:CA:A6:98:13:0B:0F:34:06:FA:42:D1:83:34:31:1C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5b41771-9bb5-3e3f-ac5f-9745c6256297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:32:69:54:e8:8a:5b:ae:50:c2:30:39:bd:45:c7:88:4a:21: 74:bf:69:fc:01:0d:6f:72:9b:00:98:19:c0:bc:91:46:1b:68: d0:09:02:08:28:ad:e5:d3:29:0b:ca:b8:a8:ba:29:ac:53:c2: c0:f5:76:71:d8:06:f5:8b:fc:c2:05:26:48:ad:25:1c:30:85: 7b:26:ae:fb:df:39:66:eb:f3:c4:dc:cd:e5:0c:b6:b6:91:17: f0:a7:8e:ba:9c:d4:cb:01:f8:12:ec:37:22:7a:29:83:3f:0b: 09:bf:f3:7d:4d:43:b9:cd:a2:52:96:9b:ee:7d:a2:5b:7c:ed: ac:bf:1c:90:94:a7:a6:7e:8e:c0:65:39:77:3e:1b:eb:6e:f6: 3d:ba:b8:36:36:5f:0c:34:44:e6:9d:42:fe:64:37:11:56:1b: 9e:1d:0e:93:d8:05:c2:2c:b9:a9:eb:5c:03:3d:87:04:26:e9: 53:4d:74:3b:c8:96:39:a8:79:d2:62:6c:de:7e:5c:a5:83:04: 7f:e8:f3:1d:d1:93:78:fd:20:d1:71:28:e8:35:e3:0b:f7:f8: ca:86:03:ec:dd:62:a2:54:c3:96:7e:1e:9a:b9:2d:94:13:bc: da:3d:54:29:c7:16:98:b0:73:02:cf:dd:39:09:4d:07:f8:8c: c5:ef:e5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+ND2lNmwLhQucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDRhNDg1YzAtYzA5Mi00YjkzLWE1ZjMtNzk0OTgzMzhjOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYQ6VQvFzOgEK3oFgkvOdfShW/QvWAAT9fmZ ug4YH5mOIKKDnAd93b8so4u9IUvUUN6tLLBKC3FISxKemzSNfyFfwP6WortJVeZj gK6yOMROvZu9h/9H15NQM3OSs7DysGz6pr/JcKqgxMQYicI69gwz3lMjuZtWqVQn 60Zeqof62NQ+Ws4GOKeWqHC2A3LErduUwGXcDPMWw2xtrsLPcCAzfU8CnVNNM14F 3ACyIURKOHNEsEyNsHZAlnCNzkrWFwR1FWd6Awf8EbDw9Vgh/Rd8bYQkK8K01RSJ KxKsNuCB9KclV9exBRFXzyfwUBmbZTW/IHgT60Bv1+LY0gPJYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGjloXKppgTCw80BvpC0YM0MRywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjViNDE3NzEtOWJiNS0z ZTNmLWFjNWYtOTc0NWM2MjU2Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIoBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMyaVToiluuUMIwOb1Fx4hKIXS/afwBDW9ymwCYGcC8kUYbaNAJAggo reXTKQvKuKi6KaxTwsD1dnHYBvWL/MIFJkitJRwwhXsmrvvfOWbr88TczeUMtraR F/Cnjrqc1MsB+BLsNyJ6KYM/Cwm/831NQ7nNolKWm+59olt87ay/HJCUp6Z+jsBl OXc+G+tu9j26uDY2Xww0ROadQv5kNxFWG54dDpPYBcIsuanrXAM9hwQm6VNNdDvI ljmoedJibN5+XKWDBH/o8x3Rk3j9INFxKOg14wv3+MqGA+zdYqJUw5Z+Hpq5LZQT vNo9VCnHFpiwcwLP3TkJTQf4jMXv5Vk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:26:47 2025 by rpki-client