$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5e0edf3-4a9e-3035-8292-c043825a0c27.roa File: c5e0edf3-4a9e-3035-8292-c043825a0c27.roa (raw, json) Hash identifier: 5vCL+PbN4ZLVlpMKjFPZvy1n4FZT18bpFc26NEA7jnY= Subject key identifier: 03:60:0A:23:E9:4F:6C:C3:5C:05:44:E3:2A:0F:0D:C7:0D:CE:9B:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC1E2B42B5557483552C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5e0edf3-4a9e-3035-8292-c043825a0c27.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.69.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c1:e2:b4:2b:55:57:48:35:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=9a22d713-db4a-4c5d-b076-c62d7b9dbfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:ed:66:86:ce:5e:bc:bd:3f:6c:78:8e:dd: 62:1a:a2:19:99:25:db:e7:e8:aa:5d:4a:ec:4b:59: 7d:cf:be:84:16:ea:41:69:69:60:ce:26:0b:6a:25: 39:39:bd:c2:32:2a:f5:a4:9e:c0:a4:97:e4:7c:64: 41:7b:9a:c3:24:72:6d:aa:15:b0:10:98:ea:a0:5d: c9:0b:15:52:dd:31:15:6f:91:a8:b9:16:80:39:5f: 3c:ea:fb:85:e1:e8:03:71:76:b3:8f:3a:9c:f7:19: a8:2f:d1:13:67:b8:1d:36:3c:9d:56:31:42:f4:b5: a3:9e:96:97:ee:d2:49:8f:37:b8:56:24:22:22:99: 5e:5e:e4:67:28:13:2e:40:51:e0:ca:be:75:38:8a: 27:69:b4:77:0e:f5:4e:45:af:a1:48:09:d4:6f:21: d1:22:0c:9f:f2:35:a9:7a:31:53:16:d3:f7:33:42: 7d:09:15:cf:6b:42:f2:d9:4f:71:e2:b4:9c:7f:a2: 44:78:51:0f:fd:08:33:66:43:a6:d5:88:72:59:fd: 14:4b:c0:99:66:ac:8c:35:24:36:49:ea:7e:53:99: 60:d4:58:67:b6:b4:f7:5e:0d:bf:4f:01:72:1a:fb: fe:dd:d0:f5:52:79:84:2d:58:1c:dc:1c:68:64:a0: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:60:0A:23:E9:4F:6C:C3:5C:05:44:E3:2A:0F:0D:C7:0D:CE:9B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5e0edf3-4a9e-3035-8292-c043825a0c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:73:df:22:29:e3:c4:00:8d:bd:94:2d:67:4f:99:4b:7f:2d: 33:d0:05:d5:50:02:9b:5c:49:f0:5a:87:22:5a:f8:55:b6:73: cb:37:68:e4:88:27:1f:65:e2:70:04:68:07:fa:9b:56:a0:9f: c6:f8:c7:6b:10:b3:ca:00:64:b3:ef:0f:d0:53:a6:6c:e0:0c: 47:fc:9f:f9:91:8c:47:ec:63:67:dc:b1:b3:85:db:1b:16:63: 9a:fa:fb:73:c9:18:32:cb:da:6a:8f:e8:87:db:cf:3e:b7:ef: 4f:68:58:f0:a2:9d:31:3b:88:a6:f1:f2:80:37:76:52:7a:44: 42:69:2e:91:66:86:88:2f:1b:c5:4a:1f:a6:7c:c0:10:67:67: 37:fc:be:82:90:1e:a2:50:25:2f:2b:9e:31:72:84:98:19:a5: 20:80:8b:d2:5f:07:fc:ec:1e:40:a1:14:f9:84:6d:6d:37:4d: 2c:2b:c3:91:06:7c:0e:7d:07:4d:fe:37:3b:f0:7c:9c:48:c9: a8:77:c3:e7:0c:e0:cf:97:e6:5f:fc:1a:d5:f6:b7:37:6e:a7: 9e:a6:6c:b7:f0:ce:72:e8:15:61:03:f4:70:6c:9b:7f:e7:ee: 75:02:eb:da:fc:08:45:a0:d8:08:86:8d:c0:35:83:d8:53:e8: d3:0d:72:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28HitCtVV0g1UsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OWEyMmQ3MTMtZGI0YS00YzVkLWIwNzYtYzYyZDdiOWRiZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbntZobOXry9P2x4jt1iGqIZmSXb5+iqXUrs S1l9z76EFupBaWlgziYLaiU5Ob3CMir1pJ7ApJfkfGRBe5rDJHJtqhWwEJjqoF3J CxVS3TEVb5GouRaAOV886vuF4egDcXazjzqc9xmoL9ETZ7gdNjydVjFC9LWjnpaX 7tJJjze4ViQiIpleXuRnKBMuQFHgyr51OIonabR3DvVORa+hSAnUbyHRIgyf8jWp ejFTFtP3M0J9CRXPa0Ly2U9x4rScf6JEeFEP/QgzZkOm1YhyWf0US8CZZqyMNSQ2 Sep+U5lg1FhntrT3Xg2/TwFyGvv+3dD1UnmELVgc3BxoZKAqWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANgCiPpT2zDXAVE4yoPDccNzpv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzVlMGVkZjMtNGE5ZS0z MDM1LTgyOTItYzA0MzgyNWEwYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1z3yIp48QAjb2ULWdPmUt/LTPQBdVQAptcSfBahyJa+FW2c8s3aOSI Jx9l4nAEaAf6m1agn8b4x2sQs8oAZLPvD9BTpmzgDEf8n/mRjEfsY2fcsbOF2xsW Y5r6+3PJGDLL2mqP6Ifbzz63709oWPCinTE7iKbx8oA3dlJ6REJpLpFmhogvG8VK H6Z8wBBnZzf8voKQHqJQJS8rnjFyhJgZpSCAi9JfB/zsHkChFPmEbW03TSwrw5EG fA59B03+NzvwfJxIyah3w+cM4M+X5l/8GtX2tzdup56mbLfwznLoFWED9HBsm3/n 7nUC69r8CEWg2AiGjcA1g9hT6NMNcqU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:06 2025 by rpki-client