$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5dd507c-2031-35e3-a85f-266fb48df32d.roa File: b5dd507c-2031-35e3-a85f-266fb48df32d.roa (raw, json) Hash identifier: aLhNrBQwbeD4FF0eYATg5GAINSEidOT5r6H+wPHrhLY= Subject key identifier: 7F:7A:02:37:7F:D3:21:DB:01:F1:82:71:B7:93:21:FB:5A:46:F1:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9D465C9D8B158377CF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5dd507c-2031-35e3-a85f-266fb48df32d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.70.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9d:46:5c:9d:8b:15:83:77:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0f03ee64-820e-4109-b435-b6f8b61144ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:9d:00:c1:cb:02:0e:bf:7e:9a:17:62:c0: bf:16:cc:f6:cb:96:c6:86:63:cb:d8:29:5c:92:bd: 3d:06:d0:a7:01:81:b9:55:3a:cd:96:2f:5c:6b:e8: eb:fc:7f:48:a6:81:51:4c:7e:bb:7a:7d:73:48:1e: 67:ca:3a:3b:10:2d:07:af:eb:c7:74:f8:e7:00:58: c6:4e:7e:96:5d:45:cd:e6:fa:15:2c:bc:42:cb:b3: d6:d9:32:48:c7:29:00:d4:2c:8b:d7:c5:e7:08:58: 3e:a2:38:01:14:e7:81:26:1d:b7:2a:ba:9e:b8:6c: 83:d2:38:22:a4:cf:7d:30:ad:49:2e:cd:ce:e7:d1: 25:59:d1:ef:31:ce:e7:e3:98:8d:eb:c6:9e:2d:ad: 1e:45:45:27:5b:c0:73:65:95:ef:32:00:b8:cf:81: 40:75:ee:6d:7b:81:56:34:b5:37:24:88:79:bc:b1: 29:ab:fd:c2:e5:ed:b7:9c:85:ab:ed:ca:cf:1b:6e: a0:ff:a6:e8:10:67:7a:34:6e:2a:23:a3:0b:e8:2b: e3:74:a9:52:3d:a2:06:7a:ed:01:e1:1b:65:53:cc: 77:4c:61:e0:cc:9b:16:3f:fb:0d:c9:e8:60:aa:ac: 75:7b:96:79:78:c2:fc:9d:1c:67:fd:9f:41:a5:eb: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7A:02:37:7F:D3:21:DB:01:F1:82:71:B7:93:21:FB:5A:46:F1:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5dd507c-2031-35e3-a85f-266fb48df32d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f0:8e:bb:a7:61:9b:3c:6e:d0:f1:c3:f1:17:88:e2:e5:bf: fe:74:b0:90:49:e7:47:fd:51:50:18:e0:0e:f2:7b:40:06:06: b5:0a:12:62:db:67:89:73:62:07:81:28:f9:b5:18:5d:3d:16: 4c:c9:1f:1f:b6:d6:a5:bf:42:24:8b:ef:02:a5:15:1d:31:8e: ab:f0:1b:73:c5:11:5f:f0:83:22:b0:42:4c:9e:77:ea:d8:32: e4:1f:e9:14:b7:5d:f4:8a:1d:6f:06:9b:ed:8a:38:b5:6a:9e: 28:67:46:20:1b:9e:b9:5d:e2:f8:16:3f:09:63:31:d1:db:16: 46:52:f4:14:56:d7:eb:df:ad:d3:76:6b:01:48:47:bd:22:8a: 80:92:54:80:1d:18:6e:28:f6:25:2d:d4:70:59:ed:43:bc:7d: 59:0b:f1:03:7c:f3:cf:e1:79:9e:22:14:61:3b:18:98:c4:07: 70:a5:c2:57:e0:f7:c8:9a:6f:60:f3:14:94:1a:27:0e:7d:9c: d9:26:58:7f:ae:d3:b6:e9:51:f8:02:74:ea:c9:4f:2f:f1:43: 0a:9d:16:8c:c1:65:2e:0d:f3:50:f6:05:16:a7:c3:e4:91:07: 80:03:3f:d1:87:c6:1e:1e:bb:53:71:8b:e1:96:67:31:8d:de: 37:5a:49:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG251GXJ2LFYN3z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGYwM2VlNjQtODIwZS00MTA5LWI0MzUtYjZmOGI2MTE0NGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ydAMHLAg6/fpoXYsC/Fsz2y5bGhmPL2Clc kr09BtCnAYG5VTrNli9ca+jr/H9IpoFRTH67en1zSB5nyjo7EC0Hr+vHdPjnAFjG Tn6WXUXN5voVLLxCy7PW2TJIxykA1CyL18XnCFg+ojgBFOeBJh23KrqeuGyD0jgi pM99MK1JLs3O59ElWdHvMc7n45iN68aeLa0eRUUnW8BzZZXvMgC4z4FAde5te4FW NLU3JIh5vLEpq/3C5e23nIWr7crPG26g/6boEGd6NG4qI6ML6CvjdKlSPaIGeu0B 4RtlU8x3TGHgzJsWP/sNyehgqqx1e5Z5eML8nRxn/Z9Bpes1VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH96Ajd/0yHbAfGCcbeTIftaRvGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjVkZDUwN2MtMjAzMS0z NWUzLWE4NWYtMjY2ZmI0OGRmMzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7wjrunYZs8btDxw/EXiOLlv/50sJBJ50f9UVAY4A7ye0AGBrUKEmLb Z4lzYgeBKPm1GF09FkzJHx+21qW/QiSL7wKlFR0xjqvwG3PFEV/wgyKwQkyed+rY MuQf6RS3XfSKHW8Gm+2KOLVqnihnRiAbnrld4vgWPwljMdHbFkZS9BRW1+vfrdN2 awFIR70iioCSVIAdGG4o9iUt1HBZ7UO8fVkL8QN888/heZ4iFGE7GJjEB3Clwlfg 98iab2DzFJQaJw59nNkmWH+u07bpUfgCdOrJTy/xQwqdFozBZS4N81D2BRanw+SR B4ADP9GHxh4eu1Nxi+GWZzGN3jdaSYE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:17 2025 by rpki-client