$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa File: c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa (raw, json) Hash identifier: reA+ugwvmFXsy8l5PFxvQSeLw4SoBZakoEfiDZPjA+A= Subject key identifier: A0:AE:9A:91:D2:9A:C4:FC:ED:95:BE:D6:A1:CC:EC:B5:6D:7F:CE:BC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB77B5FB50BAAAEAE5CB20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 34.154.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:77:b5:fb:50:ba:aa:ea:e5:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=f27aedd7-87bb-4e5f-940f-30248760781f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:92:63:23:7d:be:69:f6:6d:42:2d:4b:35: d3:2c:68:dd:e0:b6:99:f2:cb:08:1a:37:56:d5:bd: a5:b0:d1:67:70:f5:08:23:e1:84:66:45:03:f9:e4: d6:58:c3:9d:64:4a:0c:09:e3:e1:47:04:59:cf:11: bc:19:d6:24:fa:91:a6:35:d0:83:12:2d:67:10:1d: 7f:05:a2:e4:be:8d:8e:80:f4:19:21:e1:cc:49:01: 60:8c:67:80:b6:54:04:3f:ad:76:ee:f9:7f:26:d3: ee:ec:11:9e:cd:d2:ff:42:c3:f1:73:67:7e:66:bc: b2:74:e7:eb:80:de:bc:26:00:9e:8b:20:30:ee:33: ef:53:f9:31:91:06:17:f5:4e:3e:89:84:3d:90:db: 67:89:3c:07:5f:b1:ed:e3:ea:1a:fe:72:99:2e:fb: dc:28:d1:5e:af:0c:4c:68:c8:a0:c3:a5:e3:36:47: 84:70:a6:29:3a:e8:6d:2a:e7:76:96:1f:b7:b7:23: 71:5d:8d:20:b4:a0:28:09:64:6a:c8:28:d2:c8:6c: 56:28:b5:b6:30:1d:38:c1:a9:b7:eb:d5:90:2e:7f: 00:03:3b:81:6e:ae:b5:aa:0c:d0:3f:be:ef:df:4a: 3d:ac:9a:5d:4f:ac:5c:ba:95:23:ee:4f:81:78:4f: b0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AE:9A:91:D2:9A:C4:FC:ED:95:BE:D6:A1:CC:EC:B5:6D:7F:CE:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.154.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:75:9c:d6:df:ca:95:fb:e5:7b:07:27:98:22:d0:fb:e4:28: bf:4d:b4:02:06:c5:bf:ef:21:40:6d:dd:48:e3:b1:46:45:70: f0:7d:12:6d:03:cb:e1:ba:6d:a3:9b:b1:5a:ff:79:5b:17:b9: e9:3f:1a:88:bb:d7:08:1e:fc:10:02:26:f5:a0:97:0b:0f:87: bd:97:16:31:0f:10:a1:13:66:9b:dc:a8:ed:e9:b3:56:08:ab: 91:9f:d1:ac:4a:ac:82:a8:d0:ef:2c:0e:58:8e:3f:4f:6b:df: d8:40:8a:2f:24:b3:ed:c3:f6:4f:44:06:68:e8:57:34:c5:5f: 96:4a:46:1c:1d:9c:ef:d6:35:8a:d7:8a:f2:82:cc:0b:6c:da: f9:51:29:72:2d:21:e7:3d:0f:b8:3a:8e:c7:fe:ac:d0:5d:0d: 15:52:1b:2c:23:d3:a2:50:ff:ac:7d:c5:d8:95:fa:44:e2:89: 6f:9b:95:0b:c3:09:dd:0b:0c:db:dd:70:0d:49:84:c9:d0:48: d0:3a:2f:a3:83:93:f2:58:c1:bf:89:83:8c:a0:33:dd:a8:39: 48:78:a8:74:25:07:af:1b:30:62:7b:88:09:69:af:ff:3c:db: 13:02:d4:eb:b6:1c:3a:2e:97:0b:ed:ca:d5:9b:97:2e:54:16: 77:5d:4e:8b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqG23e1+1C6qurlyyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjI3YWVkZDctODdiYi00ZTVmLTk0MGYtMzAyNDg3NjA3ODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWuSYyN9vmn2bUItSzXTLGjd4LaZ8ssIGjdW 1b2lsNFncPUII+GEZkUD+eTWWMOdZEoMCePhRwRZzxG8GdYk+pGmNdCDEi1nEB1/ BaLkvo2OgPQZIeHMSQFgjGeAtlQEP6127vl/JtPu7BGezdL/QsPxc2d+ZryydOfr gN68JgCeiyAw7jPvU/kxkQYX9U4+iYQ9kNtniTwHX7Ht4+oa/nKZLvvcKNFerwxM aMigw6XjNkeEcKYpOuhtKud2lh+3tyNxXY0gtKAoCWRqyCjSyGxWKLW2MB04wam3 69WQLn8AAzuBbq61qgzQP77v30o9rJpdT6xcupUj7k+BeE+w3wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKCumpHSmsT87ZW+1qHM7LVtf868MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzBmNWE5ZmQtZTIzMi0z MThkLWI0ZjItMDgyZmZjMjc5NDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIpowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQ3Wc1t/KlfvlewcnmCLQ++Qov020AgbFv+8hQG3dSOOxRkVw8H0SbQPL 4bpto5uxWv95Wxe56T8aiLvXCB78EAIm9aCXCw+HvZcWMQ8QoRNmm9yo7emzVgir kZ/RrEqsgqjQ7ywOWI4/T2vf2ECKLySz7cP2T0QGaOhXNMVflkpGHB2c79Y1iteK 8oLMC2za+VEpci0h5z0PuDqOx/6s0F0NFVIbLCPTolD/rH3F2JX6ROKJb5uVC8MJ 3QsM291wDUmEydBI0Dovo4OT8ljBv4mDjKAz3ag5SHiodCUHrxswYnuICWmv/zzb EwLU67YcOi6XC+3K1ZuXLlQWd11Oiw== -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:49 2025 by rpki-client