$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfb3a033-a324-3a8f-a3b4-efd5f46f5350.roa File: bfb3a033-a324-3a8f-a3b4-efd5f46f5350.roa (raw, json) Hash identifier: 2Cxd0MoKOd/TnadQIfKyNC8cz23EO/AjnBn0L218FE0= Subject key identifier: 3E:06:31:8A:BA:EB:2A:B9:47:82:90:49:B7:FC:A2:D1:ED:FB:B7:9C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBC0974B0C7C027493800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfb3a033-a324-3a8f-a3b4-efd5f46f5350.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.99.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:bc:09:74:b0:c7:c0:27:49:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=968d5de7-67b5-4b2a-916f-beb43963a4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:54:57:fb:a6:02:7d:11:94:69:93:56:bd: ef:ca:bc:60:23:cf:64:b1:36:0c:74:ea:2b:5c:c9: 9d:03:f3:07:9c:0b:96:53:af:16:d2:30:5e:70:f3: 8e:e7:96:f1:1e:32:e2:b2:f9:f2:05:d9:e9:f6:d1: c6:4c:55:71:c4:8b:d9:2e:ca:8b:c4:fa:2f:a3:06: 24:2a:d3:de:14:16:1b:fa:40:37:36:cf:57:cc:ca: 22:1d:39:b3:12:82:70:90:fe:64:f2:f6:a5:f9:9e: 37:e0:01:a0:80:c7:ea:84:cc:c1:bb:51:3e:15:83: 3d:aa:bd:0b:8d:33:8e:99:9a:0d:16:44:f4:fe:73: a9:49:f5:25:b4:ba:f1:9d:ae:73:f4:1d:4c:6d:d4: e1:bc:9d:bc:1d:50:1a:7d:1c:a1:07:40:3a:80:c7: 3b:bf:f4:51:86:f2:da:2c:de:6f:82:08:2a:ba:ae: 39:45:64:fa:8e:e5:76:1a:b3:0c:cd:52:9f:5a:96: ea:f8:76:6e:de:92:62:ea:a2:dd:7e:a4:ee:59:a4: 38:98:7a:f4:8a:1f:39:d5:9f:b9:f0:5f:bb:5c:a3: fc:9f:52:12:8f:d4:fa:70:1a:5c:df:0a:ea:79:ff: ae:f3:63:04:50:ae:bb:c4:d2:64:29:17:95:96:8e: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:06:31:8A:BA:EB:2A:B9:47:82:90:49:B7:FC:A2:D1:ED:FB:B7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfb3a033-a324-3a8f-a3b4-efd5f46f5350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a1:02:50:fb:78:82:6f:c2:98:87:35:95:6b:4c:37:3d:fb: 73:f5:cb:aa:cf:84:e0:a3:14:fc:eb:ea:d4:a1:a4:66:d1:c5: e9:73:67:91:3e:1f:02:12:cd:a0:cb:6d:29:a5:94:d4:3f:f4: 55:a6:97:cd:c5:56:3f:fb:05:a3:f8:ea:56:7b:1c:43:0f:07: c6:8a:5d:f6:da:06:12:06:16:ff:a5:25:65:ec:69:e9:cd:8f: e4:0c:09:eb:05:e5:75:e0:d9:15:1f:6c:60:0d:07:f3:0c:4f: 9d:56:65:14:d4:e4:a3:c0:ec:70:f0:90:a5:13:61:c9:89:65: d5:91:d6:36:a8:79:8f:49:bd:ad:55:78:ac:a1:7f:6a:ed:0e: 41:3d:cb:2d:25:ef:38:80:f0:b8:92:1e:f2:23:f4:8b:db:09: 64:96:f9:d9:6b:79:a2:5b:38:da:3d:59:af:24:c3:24:de:ad: 02:cc:62:cc:8d:13:37:29:84:8b:03:1f:f2:9f:c4:f8:ab:c8: 87:c0:6a:e8:e7:7d:ad:e5:43:d4:2c:d9:c2:74:8c:3f:b6:52: 02:8c:12:50:61:d8:65:a9:ed:86:32:f6:db:0c:82:a4:f2:ba: 98:9b:54:23:ca:dc:bf:e8:d9:eb:d9:f8:96:4c:f7:d0:bb:6f: b4:cc:89:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27wJdLDHwCdJOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OTY4ZDVkZTctNjdiNS00YjJhLTkxNmYtYmViNDM5NjNhNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ZUV/umAn0RlGmTVr3vyrxgI89ksTYMdOor XMmdA/MHnAuWU68W0jBecPOO55bxHjLisvnyBdnp9tHGTFVxxIvZLsqLxPovowYk KtPeFBYb+kA3Ns9XzMoiHTmzEoJwkP5k8val+Z434AGggMfqhMzBu1E+FYM9qr0L jTOOmZoNFkT0/nOpSfUltLrxna5z9B1MbdThvJ28HVAafRyhB0A6gMc7v/RRhvLa LN5vgggquq45RWT6juV2GrMMzVKfWpbq+HZu3pJi6qLdfqTuWaQ4mHr0ih851Z+5 8F+7XKP8n1ISj9T6cBpc3wrqef+u82MEUK67xNJkKReVlo53CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4GMYq66yq5R4KQSbf8otHt+7ecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZiM2EwMzMtYTMyNC0z YThmLWEzYjQtZWZkNWY0NmY1MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuhAlD7eIJvwpiHNZVrTDc9+3P1y6rPhOCjFPzr6tShpGbRxelzZ5E+ HwISzaDLbSmllNQ/9FWml83FVj/7BaP46lZ7HEMPB8aKXfbaBhIGFv+lJWXsaenN j+QMCesF5XXg2RUfbGANB/MMT51WZRTU5KPA7HDwkKUTYcmJZdWR1jaoeY9Jva1V eKyhf2rtDkE9yy0l7ziA8LiSHvIj9IvbCWSW+dlreaJbONo9Wa8kwyTerQLMYsyN EzcphIsDH/KfxPiryIfAaujnfa3lQ9Qs2cJ0jD+2UgKMElBh2GWp7YYy9tsMgqTy upibVCPK3L/o2evZ+JZM99C7b7TMiR8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:07 2025 by rpki-client