$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa File: bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa (raw, json) Hash identifier: vO8e/9sgMNjPLhsbPmE2f6po4MqQj5dt2F5z/2hFpwE= Subject key identifier: B2:7E:2C:60:8E:66:D5:57:1D:E8:D5:B2:3E:93:43:9D:5B:37:2C:3E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB91AFF7FE12A8E16B6380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.145.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:91:af:f7:fe:12:a8:e1:6b:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=f93ee3b3-9011-49c5-bda6-c8adac8235a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:c7:3a:26:93:a7:3d:f9:49:4b:50:17:97: e4:a0:a2:57:bd:47:9c:26:9b:b6:da:cc:50:95:9f: d3:81:cb:f5:ee:f3:28:73:05:d2:ff:b6:f0:67:4e: 46:00:28:3f:fe:c4:91:6a:36:3a:34:09:e0:c0:7e: 1b:3c:5a:7e:05:3d:49:28:d9:73:ea:ae:32:28:24: 07:c2:b9:41:35:ca:2d:38:f9:79:35:ae:d1:be:0c: 1a:a7:28:be:c9:43:69:31:8e:04:18:f0:9c:cd:56: 2d:73:4e:13:87:67:79:22:14:21:fe:ef:ef:5f:ed: 7c:1e:a4:45:7e:68:6f:1e:86:8b:a9:03:d8:b5:ab: 55:ae:00:ac:8d:48:b2:35:1d:f6:aa:7c:3e:c9:e1: 07:28:90:82:16:03:48:c7:8e:4c:52:d5:13:2e:71: cb:41:7b:48:c7:17:3d:c5:0a:2f:1a:0a:d3:dc:2c: 86:c6:ad:e7:80:03:e8:36:72:89:61:d6:b5:98:d9: 60:4d:45:f9:e9:91:1e:48:d3:1b:02:92:59:b1:82: b7:e3:87:1d:2a:3e:9c:e1:e1:b9:d5:25:4c:68:b1: 1f:ca:94:30:98:00:01:21:da:5b:df:db:d3:64:93: d1:44:29:0c:30:be:bd:56:68:46:4d:8a:ee:0c:44: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7E:2C:60:8E:66:D5:57:1D:E8:D5:B2:3E:93:43:9D:5B:37:2C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:75:c7:ec:48:8c:5c:80:38:9e:91:d5:3f:5e:21:bf:83:1f: d4:60:62:c8:00:bb:1c:0f:78:ef:14:36:36:f6:b9:e5:46:0b: 3b:1c:8b:bf:64:37:d0:ac:d2:6a:65:8a:67:df:3a:52:6d:40: 17:d5:85:b9:3b:17:bf:b7:3a:f0:f3:d6:68:e0:45:66:49:2f: 99:10:8a:96:f9:cb:8e:c9:4d:e4:40:5f:53:27:2b:da:be:a0: 52:ce:3c:f5:95:43:c4:e2:33:3f:fc:f9:d3:27:71:ed:a0:58: 8a:91:66:d7:64:f3:f2:09:1a:11:a5:52:04:aa:c7:c3:8f:e2: 62:f4:bd:51:08:b4:e9:38:0f:db:fb:f2:98:d8:2b:d5:5e:4f: ad:c4:99:bc:42:f1:98:cf:49:80:0d:7a:8c:9f:16:14:d8:dc: 59:c9:51:4f:bd:60:82:8a:7e:70:1d:3a:8b:15:3e:a5:eb:4f: 75:8a:64:0d:70:5d:79:a3:14:39:4e:14:76:05:ee:48:25:eb: 64:9d:9d:28:0a:c9:ff:b5:6c:1e:09:49:4f:25:c8:fc:e6:cd: 77:32:77:63:cb:98:34:2a:31:4b:5d:73:d4:02:c4:8f:d5:f8: d3:c9:66:dc:b9:5c:f8:0e:db:61:45:b0:7a:3e:bb:32:1e:df: 29:c3:39:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25Gv9/4SqOFrY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjkzZWUzYjMtOTAxMS00OWM1LWJkYTYtYzhhZGFjODIzNWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKfHOiaTpz35SUtQF5fkoKJXvUecJpu22sxQ lZ/Tgcv17vMocwXS/7bwZ05GACg//sSRajY6NAngwH4bPFp+BT1JKNlz6q4yKCQH wrlBNcotOPl5Na7Rvgwapyi+yUNpMY4EGPCczVYtc04Th2d5IhQh/u/vX+18HqRF fmhvHoaLqQPYtatVrgCsjUiyNR32qnw+yeEHKJCCFgNIx45MUtUTLnHLQXtIxxc9 xQovGgrT3CyGxq3ngAPoNnKJYda1mNlgTUX56ZEeSNMbApJZsYK344cdKj6c4eG5 1SVMaLEfypQwmAABIdpb39vTZJPRRCkMML69VmhGTYruDETJJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ+LGCOZtVXHejVsj6TQ51bNyw+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY2NTI5YzEtZjIwMS0z YmY1LThjM2EtYTkwNjVjODkzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt1x+xIjFyAOJ6R1T9eIb+DH9RgYsgAuxwPeO8UNjb2ueVGCzsci79k N9Cs0mplimffOlJtQBfVhbk7F7+3OvDz1mjgRWZJL5kQipb5y47JTeRAX1MnK9q+ oFLOPPWVQ8TiMz/8+dMnce2gWIqRZtdk8/IJGhGlUgSqx8OP4mL0vVEItOk4D9v7 8pjYK9VeT63EmbxC8ZjPSYANeoyfFhTY3FnJUU+9YIKKfnAdOosVPqXrT3WKZA1w XXmjFDlOFHYF7kgl62SdnSgKyf+1bB4JSU8lyPzmzXcyd2PLmDQqMUtdc9QCxI/V +NPJZty5XPgO22FFsHo+uzIe3ynDOSU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:19:58 2025 by rpki-client