$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c96d8fba-6779-31c7-84da-36c8a1315169.roa File: c96d8fba-6779-31c7-84da-36c8a1315169.roa (raw, json) Hash identifier: XGI3qD83ckWp+VQF5nYfp3+RmqhHE0ZKLhhwEgmemh4= Subject key identifier: 91:37:EA:4B:51:D7:E9:1E:64:DC:4F:E3:9B:44:6A:01:DB:21:3B:30 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF24F7AAD489A0CF3FB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c96d8fba-6779-31c7-84da-36c8a1315169.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.24.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f2:4f:7a:ad:48:9a:0c:f3:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=e9fbdd8c-40c1-44eb-93d8-df94c8891988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:20:8e:85:c5:3f:ab:bc:79:b3:67:d4:7f: f9:df:85:b3:05:a0:11:d6:34:96:22:f4:2a:da:58: 7b:de:45:88:80:97:25:5d:02:0e:2d:e1:3b:d2:59: 0b:08:76:0b:0a:7b:bb:c8:88:e4:0f:18:52:a7:bd: 30:47:cc:ad:10:89:d5:4b:09:9e:c3:82:68:4a:fa: d3:fe:da:b7:1b:39:fb:1a:76:0d:45:65:09:6b:bb: 8c:21:e9:30:2e:a3:27:17:20:34:93:da:7e:01:c5: 65:7f:cf:6e:69:14:12:8d:2d:9b:c9:11:66:b1:4f: 78:ea:e3:d7:07:42:50:a5:0a:52:2b:26:aa:97:ad: 01:ad:a0:43:ac:b1:12:2d:9c:7a:d9:56:07:29:f2: 68:4d:f3:8a:cc:89:31:50:5e:fe:b6:c9:90:85:48: cf:f3:a6:a6:ac:eb:ba:e0:c0:82:c2:28:14:70:94: 6b:75:4f:55:06:52:92:cf:02:9d:29:70:85:5b:96: e2:32:22:88:21:18:1b:27:cc:13:3d:21:ac:7a:9e: b4:79:92:21:1b:77:fe:50:55:8a:23:0d:47:51:51: 32:1b:fd:bd:68:3c:68:ab:99:4a:05:2b:e6:a7:d1: e6:df:21:84:37:fa:66:55:5e:c8:95:e5:ae:79:b0: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:37:EA:4B:51:D7:E9:1E:64:DC:4F:E3:9B:44:6A:01:DB:21:3B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c96d8fba-6779-31c7-84da-36c8a1315169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.24.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:71:c8:7f:bc:5e:c2:ea:1b:b8:79:26:02:d4:b0:78:13:22: 4e:42:76:ba:8e:82:da:3d:a6:36:6a:b0:9f:cd:5b:b5:e9:0e: 3b:28:07:90:28:59:cd:ef:d2:e2:99:fa:e8:a3:fa:02:06:a5: 5c:98:16:d7:6e:00:c2:e3:f8:72:4e:58:58:b0:b0:7e:da:82: 3b:76:ed:b3:63:e0:c9:ac:3a:f3:1a:7c:75:47:00:f9:c0:00: ef:cf:01:e7:ef:8c:be:96:f2:50:10:49:fa:08:0d:95:78:68: 5a:86:87:8f:c8:69:bc:2a:f9:e3:61:00:58:d6:23:4d:86:bc: 1b:dd:de:7a:2e:e9:1e:1d:45:1d:ed:35:54:b4:1b:4b:39:64: e4:cb:61:74:fe:91:14:29:4c:49:1d:48:48:de:5a:71:0b:2c: 89:5e:e5:e9:aa:84:f4:b6:8c:8c:bd:09:0c:7a:9b:28:75:8b: 68:84:ab:48:62:26:61:d2:99:21:3d:24:36:da:85:1a:15:b4: 44:3d:2d:de:a4:cb:cb:e2:55:da:76:91:18:40:78:e8:3c:c2: 42:ad:2e:1b:f5:aa:18:20:2c:73:40:06:e5:ff:7a:e4:fc:00: 92:f3:8b:96:1a:b3:9e:c5:a7:81:61:0d:e7:a0:62:8e:11:7a: 14:74:ae:77 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqG2/JPeq1Imgzz+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZTlmYmRkOGMtNDBjMS00NGViLTkzZDgtZGY5NGM4ODkxOTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlsgjoXFP6u8ebNn1H/534WzBaAR1jSWIvQq 2lh73kWIgJclXQIOLeE70lkLCHYLCnu7yIjkDxhSp70wR8ytEInVSwmew4JoSvrT /tq3Gzn7GnYNRWUJa7uMIekwLqMnFyA0k9p+AcVlf89uaRQSjS2byRFmsU946uPX B0JQpQpSKyaql60BraBDrLESLZx62VYHKfJoTfOKzIkxUF7+tsmQhUjP86amrOu6 4MCCwigUcJRrdU9VBlKSzwKdKXCFW5biMiKIIRgbJ8wTPSGsep60eZIhG3f+UFWK Iw1HUVEyG/29aDxoq5lKBSvmp9Hm3yGEN/pmVV7IleWuebCLDQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJE36ktR1+keZNxP45tEagHbITswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzk2ZDhmYmEtNjc3OS0z MWM3LTg0ZGEtMzZjOGExMzE1MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIhgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAknHIf7xewuobuHkmAtSweBMiTkJ2uo6C2j2mNmqwn81btekOOygHkChZ ze/S4pn66KP6AgalXJgW124AwuP4ck5YWLCwftqCO3bts2Pgyaw68xp8dUcA+cAA 788B5++MvpbyUBBJ+ggNlXhoWoaHj8hpvCr542EAWNYjTYa8G93eei7pHh1FHe01 VLQbSzlk5MthdP6RFClMSR1ISN5acQssiV7l6aqE9LaMjL0JDHqbKHWLaISrSGIm YdKZIT0kNtqFGhW0RD0t3qTLy+JV2naRGEB46DzCQq0uG/WqGCAsc0AG5f965PwA kvOLlhqznsWngWEN56BijhF6FHSudw== -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:16 2025 by rpki-client