$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca7e3781-d6de-35f1-96da-ea67e7ac9080.roa File: ca7e3781-d6de-35f1-96da-ea67e7ac9080.roa (raw, json) Hash identifier: TKrd7LxENaPYbp88ZTMd9XcAezxy4yn3vaorgYKbYZA= Subject key identifier: B5:85:ED:D8:58:DB:68:62:87:79:A7:BD:AE:F5:32:60:0D:E1:12:81 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9EE84D3F52F5AC069D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca7e3781-d6de-35f1-96da-ea67e7ac9080.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.125.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9e:e8:4d:3f:52:f5:ac:06:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=76378a1a-f30d-4859-b8d9-9798d971f179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:5f:22:94:dc:0b:46:8c:24:c0:b1:e0:06: cc:d8:03:6c:e5:a2:a0:cc:d3:94:8e:2f:f1:37:da: e2:c3:a5:ee:f9:97:64:a9:d2:ab:b1:91:a4:14:1a: cf:be:4f:af:5d:f0:a9:98:2c:da:0a:67:fc:a0:37: 51:f8:1c:49:a8:71:af:1d:56:2d:fd:3f:61:12:e8: c6:71:22:75:08:4b:44:63:26:21:08:c6:d1:be:bc: 88:52:82:28:b4:37:29:dc:c3:04:7c:44:f5:47:f6: e7:94:2b:c1:da:0d:1f:27:ca:98:52:ea:fd:0b:26: 52:51:ea:ca:d7:46:cf:d6:51:b6:df:60:d5:db:59: b4:db:99:0d:8d:c6:33:b4:b8:3d:9d:6a:57:65:a7: db:ba:a2:f2:db:36:5d:74:0d:25:a2:34:09:92:55: d8:87:4a:87:e5:62:6a:aa:9c:24:ec:c7:0d:dd:00: 01:3a:15:e2:26:34:d8:67:25:fe:ee:1d:c6:6d:70: 35:e0:9b:40:9f:73:a7:7a:ac:94:2e:24:77:30:a3: c7:18:dc:9c:0e:28:6b:dd:ab:1c:2f:5b:f3:2f:63: c3:63:20:bd:fa:f7:f2:55:d5:a2:e5:65:93:0d:bf: f5:34:b8:7b:67:64:58:61:a0:5a:7d:f3:94:6d:c7: 66:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:85:ED:D8:58:DB:68:62:87:79:A7:BD:AE:F5:32:60:0D:E1:12:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca7e3781-d6de-35f1-96da-ea67e7ac9080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.125.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2d:b3:2c:f5:67:8f:80:9c:83:1c:3f:f6:5e:24:0c:45:a6: 94:ab:99:93:2b:97:21:5b:95:79:d3:cf:4e:ef:11:9b:ef:be: 3b:e5:a8:5d:c9:e4:89:19:fb:0d:c6:51:c3:0f:0a:c2:80:f3: 75:b7:38:e4:9e:15:96:f7:05:16:21:b2:be:90:87:52:cc:f2: b3:b0:9b:2f:63:09:5b:19:87:ba:ab:ed:68:da:74:67:4d:70: 1f:b6:9c:ef:b5:b8:3a:ef:a7:87:34:2b:08:b3:59:58:05:b5: e8:06:b3:ec:57:85:1a:77:d2:e6:b7:cd:03:76:87:60:10:64: 60:b0:0a:52:20:fc:21:d0:36:10:29:bc:a2:57:fa:78:21:1c: fb:c3:7a:f3:c9:54:f7:7a:04:d5:d5:f1:9d:38:6f:96:f8:50: cd:76:54:c9:06:d6:8d:8b:67:40:31:3c:6c:26:a6:bd:47:ad: 5c:74:1b:d2:36:ce:8b:72:b5:bb:6a:7e:60:16:6e:79:f1:2d: 04:d7:30:15:4e:cf:5c:cd:ed:e8:cc:8d:dd:4b:31:07:a6:70: 4e:af:5e:15:96:b5:2d:4b:06:29:58:4e:ed:8f:f4:07:de:7b: c3:87:27:5f:e5:e1:ce:76:4c:14:93:2e:b2:f6:d1:a2:ed:c5: 34:62:e6:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG257oTT9S9awGnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NzYzNzhhMWEtZjMwZC00ODU5LWI4ZDktOTc5OGQ5NzFmMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+9fIpTcC0aMJMCx4AbM2ANs5aKgzNOUji/x N9riw6Xu+ZdkqdKrsZGkFBrPvk+vXfCpmCzaCmf8oDdR+BxJqHGvHVYt/T9hEujG cSJ1CEtEYyYhCMbRvryIUoIotDcp3MMEfET1R/bnlCvB2g0fJ8qYUur9CyZSUerK 10bP1lG232DV21m025kNjcYztLg9nWpXZafbuqLy2zZddA0lojQJklXYh0qH5WJq qpwk7McN3QABOhXiJjTYZyX+7h3GbXA14JtAn3OneqyULiR3MKPHGNycDihr3asc L1vzL2PDYyC9+vfyVdWi5WWTDb/1NLh7Z2RYYaBaffOUbcdmAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWF7dhY22hih3mnva71MmAN4RKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2E3ZTM3ODEtZDZkZS0z NWYxLTk2ZGEtZWE2N2U3YWM5MDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQtsyz1Z4+AnIMcP/ZeJAxFppSrmZMrlyFblXnTz07vEZvvvjvlqF3J 5IkZ+w3GUcMPCsKA83W3OOSeFZb3BRYhsr6Qh1LM8rOwmy9jCVsZh7qr7WjadGdN cB+2nO+1uDrvp4c0KwizWVgFtegGs+xXhRp30ua3zQN2h2AQZGCwClIg/CHQNhAp vKJX+nghHPvDevPJVPd6BNXV8Z04b5b4UM12VMkG1o2LZ0AxPGwmpr1HrVx0G9I2 zotytbtqfmAWbnnxLQTXMBVOz1zN7ejMjd1LMQemcE6vXhWWtS1LBilYTu2P9Afe e8OHJ1/l4c52TBSTLrL20aLtxTRi5hk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:54 2025 by rpki-client