$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa File: c809be10-f019-3ce3-8366-95c1c2eec42b.roa (raw, json) Hash identifier: jEAs9h4HHUwzsg9pCs+jbm9wWX3lSXcJ0cwUZaEz5G0= Subject key identifier: A3:90:70:DC:9E:9B:20:4A:A3:5E:F7:A9:42:29:16:F0:15:44:D8:95 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84122B030C6E2CB6001CABF0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.121.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2b:03:0c:6e:2c:b6:00:1c:ab:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2cda408f-4f50-4a3b-ac40-5ab6e8de9c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:98:32:06:d0:67:0b:7a:d5:90:e1:98:08:ea: bb:4b:df:ec:29:26:2f:91:76:57:5b:9d:49:5b:41: 73:2a:17:e3:b9:aa:d6:38:07:10:45:b5:bd:54:cb: 5c:37:26:2d:fd:1b:af:84:67:2e:f1:b0:44:66:00: 5b:bc:38:28:c7:3a:39:e2:74:58:af:fe:c0:04:30: 0f:cd:25:34:24:ca:af:a4:c9:84:9e:7d:3d:1e:72: a2:f8:5b:0e:e9:25:20:d7:38:f7:8d:b2:11:ef:d5: 96:38:34:09:f3:0b:63:16:09:b5:fe:98:ba:ec:c7: c1:ca:cf:92:e3:ff:d0:cd:16:49:98:46:8c:48:4e: 5b:cc:e8:c3:40:b6:4e:2b:74:37:e3:be:fe:0e:3f: 46:3d:75:85:03:45:40:1c:7f:d1:e2:5a:d2:0f:b9: 08:e3:f2:f0:39:93:0f:9d:9b:4b:90:3d:06:74:92: cb:7c:a6:ed:41:7b:4f:30:0c:02:7b:05:78:ca:76: 86:bb:9a:e3:8c:13:60:fe:86:6e:ff:52:f0:dc:9f: 7a:15:4e:2d:fe:7e:03:ad:bf:63:02:1c:48:5c:a8: 83:0e:8d:22:1b:1c:de:42:e5:d4:40:da:d8:51:99: 2c:f8:93:aa:c1:4d:3e:c3:70:2a:fd:4b:29:14:55: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:90:70:DC:9E:9B:20:4A:A3:5E:F7:A9:42:29:16:F0:15:44:D8:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:15:85:44:51:f2:a0:3f:f2:a1:d4:26:88:a4:ae:7b:bb:59: d3:34:74:0a:fb:82:4c:86:24:3c:a5:8d:98:78:a0:c6:df:5d: cf:02:84:42:a6:a8:db:a2:4e:4b:2d:3d:76:86:c7:a4:9a:eb: a3:e9:e1:bc:f1:75:0a:fe:a6:59:e6:2e:6d:96:21:27:60:7b: 33:67:a6:6d:e3:e4:e5:e6:85:09:a1:e6:d1:80:d0:71:c4:83: 0f:76:b4:77:b8:8a:54:b7:a2:26:9e:4b:97:b3:cd:d0:40:6c: 43:ec:f3:c7:ed:4e:49:76:4f:82:b3:22:5b:a8:22:2a:90:58: fa:6f:b2:ca:6a:bd:af:03:c2:ab:50:7f:c7:49:e4:d4:3c:be: fb:9c:cb:4e:a4:7b:45:ad:3d:d7:32:f6:2e:16:eb:5a:83:b0: 9a:dc:9e:09:47:e0:6e:54:90:60:a8:d7:17:15:14:5a:ad:d1: 61:0b:c4:91:8f:9c:26:ae:98:61:87:c9:2c:23:ce:f0:38:14: 33:50:93:3a:65:79:1d:3b:d5:36:ea:24:bc:3a:2c:2d:12:88: d9:92:9b:e3:49:60:82:ca:72:85:8f:d8:48:02:f2:17:9c:ff: 99:d1:df:24:1d:b7:af:4a:30:ee:82:b6:f1:e8:c2:7a:47:d9: 12:da:6d:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEisDDG4stgAcq/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmNkYTQwOGYtNGY1MC00YTNiLWFjNDAtNWFiNmU4ZGU5YzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJgyBtBnC3rVkOGYCOq7S9/sKSYvkXZXW51J W0FzKhfjuarWOAcQRbW9VMtcNyYt/RuvhGcu8bBEZgBbvDgoxzo54nRYr/7ABDAP zSU0JMqvpMmEnn09HnKi+FsO6SUg1zj3jbIR79WWODQJ8wtjFgm1/pi67MfBys+S 4//QzRZJmEaMSE5bzOjDQLZOK3Q3477+Dj9GPXWFA0VAHH/R4lrSD7kI4/LwOZMP nZtLkD0GdJLLfKbtQXtPMAwCewV4ynaGu5rjjBNg/oZu/1Lw3J96FU4t/n4Drb9j AhxIXKiDDo0iGxzeQuXUQNrYUZks+JOqwU0+w3Aq/UspFFXq3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOQcNyemyBKo173qUIpFvAVRNiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzgwOWJlMTAtZjAxOS0z Y2UzLTgzNjYtOTVjMWMyZWVjNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoVhURR8qA/8qHUJoikrnu7WdM0dAr7gkyGJDyljZh4oMbfXc8ChEKm qNuiTkstPXaGx6Sa66Pp4bzxdQr+plnmLm2WISdgezNnpm3j5OXmhQmh5tGA0HHE gw92tHe4ilS3oiaeS5ezzdBAbEPs88ftTkl2T4KzIluoIiqQWPpvsspqva8DwqtQ f8dJ5NQ8vvucy06ke0WtPdcy9i4W61qDsJrcnglH4G5UkGCo1xcVFFqt0WELxJGP nCaumGGHySwjzvA4FDNQkzpleR071TbqJLw6LC0SiNmSm+NJYILKcoWP2EgC8hec /5nR3yQdt69KMO6CtvHownpH2RLabbw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:34:44 2025 by rpki-client