$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa File: bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa (raw, json) Hash identifier: hjAWkPzw7FIrogGcLFKlL6znTz/uMvVZJPkv45nvPgk= Subject key identifier: 87:E4:8A:E6:87:8B:83:1B:60:65:42:47:16:9A:C7:E6:24:B2:73:00 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB92E2C47636D527DD33F0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.123.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:92:e2:c4:76:36:d5:27:dd:33:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1950bb64-67d6-4a9c-89c4-9acb26782117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0e:25:47:85:76:75:ef:bc:c6:8a:b9:74:df: 06:85:2c:f4:fa:a0:63:82:6a:02:4e:34:35:df:09: 51:e5:1f:1f:ab:85:a1:ff:37:b9:3c:25:6d:d0:2a: 6b:c8:43:e6:ec:cd:d3:5b:90:5e:e0:ab:b0:85:b2: 06:37:56:3a:12:df:1e:96:5f:bc:01:ea:9a:56:60: 5b:ab:06:90:db:f4:1d:da:28:98:13:82:52:31:d7: 80:44:11:97:93:9f:f8:22:da:0d:60:3b:3d:83:a4: 15:66:49:9f:35:ae:75:42:39:8d:bd:48:24:73:28: 0e:d6:c9:cc:0a:64:99:80:2e:c5:3b:e9:73:a9:89: 5e:dc:53:57:98:d9:7f:9f:f4:d6:39:78:1d:0c:f9: a1:a9:60:dc:40:d7:9a:f0:21:22:55:53:34:04:7e: 99:e1:7c:7d:3f:01:11:6e:88:c1:7e:47:d6:60:93: 95:da:56:2d:79:88:67:5f:78:70:5b:b5:bf:d8:d4: 22:19:80:51:9d:3c:90:67:b8:f6:3a:15:5d:6f:c4: c5:ee:7e:c1:04:c9:85:c3:e0:00:25:e7:4b:48:d0: c5:c3:19:de:09:48:dd:58:12:9c:ab:8b:54:46:25: 82:d9:ab:8e:5f:f4:01:9e:f9:14:b3:94:6b:82:a3: 39:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E4:8A:E6:87:8B:83:1B:60:65:42:47:16:9A:C7:E6:24:B2:73:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:95:64:64:89:3b:61:c4:48:06:ce:b4:38:38:e8:f4:d2:e1: 84:27:29:3e:a8:44:9a:40:00:1f:c2:b8:70:51:40:6e:2e:6f: 54:73:12:54:53:e2:f8:8b:2d:49:27:e0:2b:08:92:4c:6d:4b: 70:ce:fe:77:d8:6d:11:71:69:00:34:b0:98:88:92:61:01:69: 9c:9c:74:ec:63:05:c8:21:2a:a1:d7:2c:3a:9e:e3:f5:cf:74: ff:0a:fb:96:22:64:ef:23:20:10:29:91:55:1a:d3:59:0b:25: c8:a0:cb:4e:32:51:5d:1e:35:b7:56:e5:fb:cf:f4:aa:34:c5: a6:e3:f5:82:df:0d:fb:03:38:6d:fa:81:6f:05:a9:b8:95:e1: af:35:d1:1a:98:0a:c3:cb:d0:78:c7:42:f6:08:eb:08:49:5a: e0:06:08:b2:be:e3:85:83:3f:b7:dd:ea:69:e8:ae:14:3b:31: c8:9f:a8:57:3c:9a:6e:fd:b2:e8:eb:2f:5b:9d:db:63:15:f9: 56:0c:d1:0c:15:67:17:45:56:97:fe:04:fd:61:d2:45:a5:d2: 20:77:bd:59:09:f6:d9:33:17:7f:6f:2a:15:6c:f2:ea:48:2c: e7:5e:48:77:bc:32:fc:6b:94:ef:8b:53:1f:f6:a5:1d:5c:64: 0b:93:bd:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25LixHY21SfdM/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTk1MGJiNjQtNjdkNi00YTljLTg5YzQtOWFjYjI2NzgyMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA4lR4V2de+8xoq5dN8GhSz0+qBjgmoCTjQ1 3wlR5R8fq4Wh/ze5PCVt0CpryEPm7M3TW5Be4KuwhbIGN1Y6Et8ell+8AeqaVmBb qwaQ2/Qd2iiYE4JSMdeARBGXk5/4ItoNYDs9g6QVZkmfNa51QjmNvUgkcygO1snM CmSZgC7FO+lzqYle3FNXmNl/n/TWOXgdDPmhqWDcQNea8CEiVVM0BH6Z4Xx9PwER bojBfkfWYJOV2lYteYhnX3hwW7W/2NQiGYBRnTyQZ7j2OhVdb8TF7n7BBMmFw+AA JedLSNDFwxneCUjdWBKcq4tURiWC2auOX/QBnvkUs5RrgqM5PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfkiuaHi4MbYGVCRxaax+YksnMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmMyYTg4NjEtMzgyMi0z N2FmLTg5YjMtMWM5Y2ViZTBkYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImVZGSJO2HESAbOtDg46PTS4YQnKT6oRJpAAB/CuHBRQG4ub1RzElRT 4viLLUkn4CsIkkxtS3DO/nfYbRFxaQA0sJiIkmEBaZycdOxjBcghKqHXLDqe4/XP dP8K+5YiZO8jIBApkVUa01kLJcigy04yUV0eNbdW5fvP9Ko0xabj9YLfDfsDOG36 gW8FqbiV4a810RqYCsPL0HjHQvYI6whJWuAGCLK+44WDP7fd6mnorhQ7McifqFc8 mm79sujrL1ud22MV+VYM0QwVZxdFVpf+BP1h0kWl0iB3vVkJ9tkzF39vKhVs8upI LOdeSHe8MvxrlO+LUx/2pR1cZAuTvTk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:27 2025 by rpki-client