$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b819afde-db05-35ff-b3f5-40159e8c48cd.roa File: b819afde-db05-35ff-b3f5-40159e8c48cd.roa (raw, json) Hash identifier: DlmRw3GygU3MA9muNLSIzEFypiwJ6SPmJsV9sj1mZSo= Subject key identifier: B5:73:4C:0C:19:5F:7D:95:C1:B3:FC:5F:1F:4E:18:F8:DD:BF:39:CD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBB9C77D7BEE749EC6E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b819afde-db05-35ff-b3f5-40159e8c48cd.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.85.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:bb:9c:77:d7:be:e7:49:ec:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2f25587a-2b4c-4104-b6f8-21f98e31164d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:96:df:9c:34:73:d9:65:d6:46:c4:21:f1:03: 9c:60:62:33:77:a5:37:60:f2:1f:df:8f:50:99:2b: 16:2d:e0:49:13:91:09:05:f6:14:29:91:d3:4b:49: cc:97:34:1f:d6:98:00:9a:d4:2f:18:9f:35:3c:3f: 9b:6d:a5:7a:7f:d6:81:09:d0:0f:61:13:de:bd:93: 89:e7:00:5e:5f:4a:d7:f2:88:68:ba:3d:51:4e:22: 56:1e:20:13:39:91:a5:c0:a0:04:c3:b7:0d:9d:6d: fb:6a:61:ae:cd:ca:cb:e9:e4:fb:3a:2d:31:26:58: 2c:cb:f5:e1:46:e3:56:4b:24:af:3d:a7:79:d4:a2: f5:af:43:5e:37:6c:08:53:7a:3b:a0:36:5b:65:a0: 30:6c:e3:44:98:46:e9:25:ab:cc:c7:0a:1a:74:21: b7:e9:ff:70:4f:b3:77:54:8e:70:4c:85:1e:72:3d: cd:0e:9f:74:cf:b4:a6:77:6f:4c:cd:e9:e0:5a:74: 7f:48:9e:77:31:32:35:91:14:bf:38:fb:ad:92:af: 4b:8a:e2:7b:f1:b1:8f:a2:0d:4b:24:bc:6f:c6:9d: 08:c4:20:e2:6b:89:11:bc:f3:c8:63:47:c7:b4:12: fa:ff:45:cd:b0:25:37:33:89:ac:1f:11:c5:83:46: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:73:4C:0C:19:5F:7D:95:C1:B3:FC:5F:1F:4E:18:F8:DD:BF:39:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b819afde-db05-35ff-b3f5-40159e8c48cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:56:10:6d:33:bd:e1:9f:7b:76:b3:61:e7:40:c2:37:ae:52: 6c:5f:ce:64:07:ad:74:a1:87:a2:25:49:2a:a8:5c:f9:7e:e4: dd:8a:7b:68:63:fa:88:f1:98:39:ca:e3:43:c0:86:cf:4b:85: d8:5a:41:77:aa:74:4c:02:b8:63:3e:8d:c6:c9:f2:01:83:ab: 41:34:8c:48:01:cb:50:08:21:d6:b7:14:e3:7e:10:bb:17:63: 04:2e:c8:e8:24:b4:14:5c:80:7b:9e:d5:8a:99:57:6e:b8:41: d6:42:b9:0e:77:13:4e:f3:80:5e:1f:1d:61:a0:ab:2f:9e:5a: 58:57:fb:7e:c9:21:37:62:be:15:2c:cc:72:67:5f:df:7e:91: 35:43:c0:b9:41:17:52:ca:25:6e:e1:e3:d0:3a:9a:fd:fa:59: 46:26:5f:47:5e:f6:33:9d:f3:cc:5b:aa:5e:1a:a9:eb:96:c7: a1:30:f9:3c:2b:01:da:31:4a:83:98:f1:61:03:ec:1e:70:b5: 87:0a:20:9b:e6:6b:87:26:62:a0:55:49:b5:04:e2:09:37:7f: 3f:05:56:3b:25:ca:da:6a:47:8d:35:7b:bb:91:e6:3e:8e:6c: 1d:85:e9:86:3c:01:37:01:0e:67:af:66:5c:58:25:1d:b4:d0: 3f:60:12:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27ucd9e+50nsbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MmYyNTU4N2EtMmI0Yy00MTA0LWI2ZjgtMjFmOThlMzExNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5bfnDRz2WXWRsQh8QOcYGIzd6U3YPIf349Q mSsWLeBJE5EJBfYUKZHTS0nMlzQf1pgAmtQvGJ81PD+bbaV6f9aBCdAPYRPevZOJ 5wBeX0rX8ohouj1RTiJWHiATOZGlwKAEw7cNnW37amGuzcrL6eT7Oi0xJlgsy/Xh RuNWSySvPad51KL1r0NeN2wIU3o7oDZbZaAwbONEmEbpJavMxwoadCG36f9wT7N3 VI5wTIUecj3NDp90z7Smd29MzengWnR/SJ53MTI1kRS/OPutkq9LiuJ78bGPog1L JLxvxp0IxCDia4kRvPPIY0fHtBL6/0XNsCU3M4msHxHFg0Za8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVzTAwZX32VwbP8Xx9OGPjdvznNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjgxOWFmZGUtZGIwNS0z NWZmLWIzZjUtNDAxNTllOGM0OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNWEG0zveGfe3azYedAwjeuUmxfzmQHrXShh6IlSSqoXPl+5N2Ke2hj +ojxmDnK40PAhs9LhdhaQXeqdEwCuGM+jcbJ8gGDq0E0jEgBy1AIIda3FON+ELsX YwQuyOgktBRcgHue1YqZV264QdZCuQ53E07zgF4fHWGgqy+eWlhX+37JITdivhUs zHJnX99+kTVDwLlBF1LKJW7h49A6mv36WUYmX0de9jOd88xbql4aqeuWx6Ew+Twr AdoxSoOY8WED7B5wtYcKIJvma4cmYqBVSbUE4gk3fz8FVjslytpqR401e7uR5j6O bB2F6YY8ATcBDmevZlxYJR200D9gEkQ= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:09 2025 by rpki-client