$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c407de36-1988-3e5d-83c0-862a9a9f7064.roa File: c407de36-1988-3e5d-83c0-862a9a9f7064.roa (raw, json) Hash identifier: AZK8qvp07H1/qhJ4cLKpa+1h7p00hn+4GRfRitIgpHo= Subject key identifier: 67:DE:DE:AE:E1:15:9D:8F:F2:B8:CA:F3:93:72:EE:FA:5D:5E:E5:94 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF8FFFBF6F9599B82B800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c407de36-1988-3e5d-83c0-862a9a9f7064.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.65.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f8:ff:fb:f6:f9:59:9b:82:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2cb88c9a-92c3-4b7a-9bee-82b49ca39546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0e:8c:7a:a5:5a:a9:4a:8f:0e:41:9e:72:97: 05:84:53:16:bd:9a:56:fd:fc:e0:6c:3e:89:08:c1: 2d:d0:a4:75:2c:59:f6:90:39:0b:0e:1e:1b:1c:31: b9:db:8e:59:25:0e:f6:50:fd:df:85:fa:9c:f3:99: a7:eb:71:6f:6b:d9:18:9d:55:90:46:86:94:89:ec: 70:b4:e0:1a:67:f0:68:84:35:7d:ab:fc:06:c8:83: 40:29:44:6e:f2:7b:e4:d4:a8:a7:43:00:3c:9b:bf: 96:9b:f4:5c:f7:ce:44:e1:3b:a1:fb:35:c6:c9:97: 69:c0:ed:b5:51:2b:1c:0c:bc:89:46:82:2d:ae:5e: b0:95:26:55:20:9a:76:47:ae:d0:a6:67:bd:cb:25: ba:30:0a:fe:3b:b8:b5:00:94:a8:93:27:6b:4b:88: 9d:c1:87:ec:05:69:b4:e7:6d:c1:85:01:22:64:68: 1f:5d:a6:f7:79:ac:55:69:b3:a4:85:ee:41:bd:38: a3:20:21:e5:92:6a:7c:53:5b:61:62:27:a9:cc:ea: 97:e4:93:6e:5b:4b:45:79:5a:c8:5a:5f:54:c1:07: 81:a7:55:ce:75:14:5c:ba:62:a0:cc:14:19:f4:61: 16:c0:18:3c:06:01:d0:1d:c6:6f:fe:d9:c2:db:8b: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DE:DE:AE:E1:15:9D:8F:F2:B8:CA:F3:93:72:EE:FA:5D:5E:E5:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c407de36-1988-3e5d-83c0-862a9a9f7064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b0:10:b7:3e:98:98:f7:fc:b7:c0:e7:42:35:97:e6:e1:df: c7:81:be:98:78:1f:78:d1:0c:bc:bf:42:3a:3a:4f:6d:9c:87: fa:c0:85:d3:63:9f:60:f1:ee:ae:c3:da:ca:99:0b:f7:ae:77: 23:1e:c1:09:12:b1:13:fc:95:43:91:3f:7d:5e:16:d6:c1:87: 58:df:1c:45:db:9e:0f:93:37:05:38:67:41:5f:56:a3:11:49: 5a:85:6d:a8:5b:65:78:cf:5a:e7:f8:a5:09:fe:37:df:51:e5: 30:2f:db:41:00:de:d0:75:47:e3:db:8c:d4:50:d1:e7:66:ad: 69:ee:bf:75:7b:20:24:28:16:11:4f:59:a3:f2:41:dc:3a:0c: 4b:83:6e:02:15:33:b8:a6:b8:9d:72:55:af:bf:ec:2b:06:e6: 86:fb:2e:ad:9b:c7:8a:ed:9e:3a:a8:49:db:7f:dc:34:0b:0e: d6:b2:82:d9:4c:9e:cb:c3:04:56:e3:bf:8b:ad:75:6f:ad:5c: 46:b3:42:90:18:ff:1e:af:70:e0:2b:02:01:67:ed:a4:9b:c3: 2c:d7:6f:1b:5f:d5:61:35:ca:66:11:07:b5:dc:4f:dc:ad:29: a4:6a:e9:2a:b1:f5:0d:35:3e:84:b5:56:37:8c:2d:87:16:3f: 37:19:c3:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/j/+/b5WZuCuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MmNiODhjOWEtOTJjMy00YjdhLTliZWUtODJiNDljYTM5NTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw6MeqVaqUqPDkGecpcFhFMWvZpW/fzgbD6J CMEt0KR1LFn2kDkLDh4bHDG5245ZJQ72UP3fhfqc85mn63Fva9kYnVWQRoaUiexw tOAaZ/BohDV9q/wGyINAKURu8nvk1KinQwA8m7+Wm/Rc985E4Tuh+zXGyZdpwO21 USscDLyJRoItrl6wlSZVIJp2R67Qpme9yyW6MAr+O7i1AJSokydrS4idwYfsBWm0 523BhQEiZGgfXab3eaxVabOkhe5BvTijICHlkmp8U1thYiepzOqX5JNuW0tFeVrI Wl9UwQeBp1XOdRRcumKgzBQZ9GEWwBg8BgHQHcZv/tnC24sjkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfe3q7hFZ2P8rjK85Ny7vpdXuWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzQwN2RlMzYtMTk4OC0z ZTVkLTgzYzAtODYyYTlhOWY3MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIawELc+mJj3/LfA50I1l+bh38eBvph4H3jRDLy/Qjo6T22ch/rAhdNj n2Dx7q7D2sqZC/eudyMewQkSsRP8lUORP31eFtbBh1jfHEXbng+TNwU4Z0FfVqMR SVqFbahbZXjPWuf4pQn+N99R5TAv20EA3tB1R+PbjNRQ0edmrWnuv3V7ICQoFhFP WaPyQdw6DEuDbgIVM7imuJ1yVa+/7CsG5ob7Lq2bx4rtnjqoSdt/3DQLDtaygtlM nsvDBFbjv4utdW+tXEazQpAY/x6vcOArAgFn7aSbwyzXbxtf1WE1ymYRB7XcT9yt KaRq6Sqx9Q01PoS1VjeMLYcWPzcZw/w= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:34 2025 by rpki-client