$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c654a6f8-aef6-317f-a926-74f89f16e7ec.roa File: c654a6f8-aef6-317f-a926-74f89f16e7ec.roa (raw, json) Hash identifier: nsbhCpOKobMC3aJf0orNSekbYGBlC6tGO6OGDcnA48o= Subject key identifier: A0:9C:95:B4:E3:03:E1:20:E9:A1:E6:2D:FB:8D:08:B3:32:3C:47:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB8CE4A859C6A53A2AA180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c654a6f8-aef6-317f-a926-74f89f16e7ec.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.44.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:8c:e4:a8:59:c6:a5:3a:2a:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=d14e72b2-14c7-4dad-8f51-4b56a9ef5e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:43:1d:2a:61:52:1b:09:54:c9:d6:d0:4b: 15:5a:df:34:04:6c:e7:54:64:c7:98:6a:6f:e2:25: 02:6b:f0:77:09:36:e2:51:31:fa:7e:e5:cb:37:5a: 39:d9:ce:c5:c6:0a:1d:77:ef:db:95:38:1c:4e:43: ee:82:48:6d:c5:7a:9d:a4:75:93:4d:4f:e3:bf:96: b1:a3:14:85:37:7b:19:6a:02:d6:88:d1:b6:8b:71: 00:ea:d2:02:4e:41:a2:c8:c5:82:d8:14:c0:e7:72: 25:df:f5:0f:54:94:ad:01:cf:77:9b:db:f6:73:0e: 45:77:ec:6b:72:15:d7:f1:27:c4:da:89:b9:b8:bf: 32:54:ee:d7:0c:e4:6f:91:08:ed:f7:33:00:b4:93: ce:05:26:77:29:bf:57:f7:b6:3a:b8:d4:91:0f:f5: e0:8a:23:c3:4d:e5:e4:38:13:b7:b4:f8:50:69:b4: dd:91:51:50:8f:c1:64:dc:14:5f:00:dd:0f:63:eb: cf:0a:87:f4:26:52:0b:cf:91:e0:94:04:3b:0e:5b: 86:68:63:d9:c2:9a:19:0e:de:fa:e0:02:d3:d6:d8: bb:f8:ed:38:5b:c8:8e:39:e1:ea:ce:0d:4d:1f:e7: f3:bd:f6:22:a4:d9:1d:2e:a0:e4:08:64:91:5e:98: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9C:95:B4:E3:03:E1:20:E9:A1:E6:2D:FB:8D:08:B3:32:3C:47:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c654a6f8-aef6-317f-a926-74f89f16e7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.44.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ec:25:bd:62:73:d6:ae:26:7b:ed:ba:9c:5d:c4:77:c9:a8: 13:29:f6:16:a4:d5:f2:f3:11:0b:12:df:be:85:b1:aa:63:5e: 28:78:f1:0a:03:26:96:f4:f8:df:43:1c:68:30:a6:ff:fd:47: 5b:dc:22:b9:a3:b2:1f:5b:e1:0e:72:0c:38:e7:ae:0e:7e:16: 9a:30:19:a1:56:83:46:8c:7b:74:03:91:ea:be:7e:cd:c8:5e: f1:5b:53:d1:26:ad:53:0f:a2:36:15:5c:ec:3e:6c:af:c9:74: 53:61:c6:5d:ad:ba:15:27:00:89:dc:cb:ba:c0:c9:3e:24:78: b6:0c:5e:11:43:7c:0d:3a:b3:63:a4:c1:8b:5e:a4:13:ed:e7: 1e:7e:2b:4c:60:89:80:89:bb:2f:9d:d1:ad:a8:49:36:bc:ac: 7a:25:f9:1c:c0:cd:26:6e:42:12:e7:15:dc:93:c5:2e:d2:ed: 42:80:e7:ae:b9:e7:79:4c:44:a1:da:7d:1a:db:c5:f0:c5:2d: 36:d3:a1:36:a3:2f:5f:5a:09:22:01:8d:00:4b:54:65:dc:64: 6a:f9:8a:92:ea:6c:76:8e:bb:93:72:a7:98:a2:88:52:c4:e0: 15:3d:a9:4b:ba:ae:3f:9a:27:0d:2d:ff:4b:dd:87:9a:f1:4f: bd:c8:81:88 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqG24zkqFnGpToqoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZDE0ZTcyYjItMTRjNy00ZGFkLThmNTEtNGI1NmE5ZWY1ZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohtDHSphUhsJVMnW0EsVWt80BGznVGTHmGpv 4iUCa/B3CTbiUTH6fuXLN1o52c7Fxgodd+/blTgcTkPugkhtxXqdpHWTTU/jv5ax oxSFN3sZagLWiNG2i3EA6tICTkGiyMWC2BTA53Il3/UPVJStAc93m9v2cw5Fd+xr chXX8SfE2om5uL8yVO7XDORvkQjt9zMAtJPOBSZ3Kb9X97Y6uNSRD/XgiiPDTeXk OBO3tPhQabTdkVFQj8Fk3BRfAN0PY+vPCof0JlILz5HglAQ7DluGaGPZwpoZDt76 4ALT1ti7+O04W8iOOeHqzg1NH+fzvfYipNkdLqDkCGSRXphJtQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKCclbTjA+Eg6aHmLfuNCLMyPEeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzY1NGE2ZjgtYWVmNi0z MTdmLWE5MjYtNzRmODlmMTZlN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIiwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjewlvWJz1q4me+26nF3Ed8moEyn2FqTV8vMRCxLfvoWxqmNeKHjxCgMm lvT430McaDCm//1HW9wiuaOyH1vhDnIMOOeuDn4WmjAZoVaDRox7dAOR6r5+zche 8VtT0SatUw+iNhVc7D5sr8l0U2HGXa26FScAidzLusDJPiR4tgxeEUN8DTqzY6TB i16kE+3nHn4rTGCJgIm7L53RrahJNryseiX5HMDNJm5CEucV3JPFLtLtQoDnrrnn eUxEodp9GtvF8MUtNtOhNqMvX1oJIgGNAEtUZdxkavmKkupsdo67k3KnmKKIUsTg FT2pS7quP5onDS3/S92HmvFPvciBiA== -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:07 2025 by rpki-client