$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf1decfb-5a34-303e-a621-9ec61bb81d8d.roa File: cf1decfb-5a34-303e-a621-9ec61bb81d8d.roa (raw, json) Hash identifier: rYBFZbgKyxJ13XpZqk59kHFr21dXQ2zhuFPmcWkMweo= Subject key identifier: C0:6B:4B:AD:05:86:38:27:6B:17:A6:82:DE:39:71:54:93:0E:39:2F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB797D6380B8B5FD4B6380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf1decfb-5a34-303e-a621-9ec61bb81d8d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.87.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:79:7d:63:80:b8:b5:fd:4b:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=7eec46b9-9b60-410f-947d-0145a749fcad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:f5:5e:fa:cb:bb:03:b3:4d:13:03:51:96: 86:9e:16:66:b5:e2:f3:3e:84:dd:a1:c8:e8:1f:d8: 47:d0:dd:68:5d:e6:9b:91:b3:32:ed:ef:bd:72:b4: 69:cf:18:a0:d0:91:1d:44:3f:e6:80:b4:0a:52:25: ea:89:75:a0:15:a0:6c:12:ce:f8:8b:ed:bf:e5:7d: c9:e5:d9:55:c3:b7:57:ed:50:9d:f6:3b:7a:23:0d: e5:59:6e:20:49:6f:b0:d7:37:48:e1:1b:c3:1e:ab: a3:dd:45:e0:73:56:13:e1:5c:50:58:8e:25:4e:d1: 27:4b:89:68:6a:cc:ce:21:a2:52:e5:2f:f0:b5:d6: 4f:07:54:ec:f5:ce:65:e0:bb:a9:fc:c0:b1:85:0b: ee:5d:49:28:4f:f5:ed:ab:28:5c:95:ca:8a:5c:da: 39:4b:ee:85:3c:7d:48:28:14:31:cf:e4:dc:61:46: 44:74:c6:ff:2f:ab:3e:4c:1d:c1:b8:e4:a9:45:a7: 0e:1c:49:ee:88:3e:c1:ed:0f:e8:80:7d:39:75:eb: 92:1f:21:95:43:49:f2:7c:17:01:c7:38:08:57:00: 2b:25:f0:ca:98:75:32:62:fd:68:73:99:54:cf:c7: 18:b8:3f:e6:51:38:0a:1e:bc:de:23:99:0c:fa:9b: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6B:4B:AD:05:86:38:27:6B:17:A6:82:DE:39:71:54:93:0E:39:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf1decfb-5a34-303e-a621-9ec61bb81d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:21:8f:c4:77:c3:49:42:c1:3e:a4:a4:5e:9d:8f:84:d8:fb: 46:0e:b7:c2:40:02:cf:ff:7c:c9:17:66:e5:c3:f8:55:b9:8a: 86:a3:88:c4:d5:17:58:03:22:d5:96:b9:9d:fe:ba:3d:00:91: 60:a1:cb:57:be:a6:1f:e0:de:da:f9:f8:1c:25:92:86:56:bb: 6e:df:d2:3c:af:3c:b4:2e:42:9d:65:80:48:87:5c:4c:41:41: 8c:4c:9b:bb:64:c3:3b:97:8d:e0:59:4f:95:d8:61:f4:74:93: 33:33:84:4e:f3:19:56:a3:c6:49:59:38:87:84:61:1d:7f:bb: 67:10:d7:b2:e2:e8:0a:02:fd:16:eb:ff:ba:b8:09:a5:4d:e0: 0a:89:47:59:0c:73:04:80:55:eb:86:e4:d4:40:1f:2b:93:cb: 30:05:6c:80:d9:09:d0:9a:ff:6a:de:0a:69:4c:5a:d3:41:90: bb:a8:e9:ca:45:a3:d0:f4:48:5d:cd:a8:d4:da:c0:0d:df:f2: a6:52:51:a8:6c:1d:e1:7c:b3:84:73:c2:5c:9d:52:cf:37:82: 98:57:aa:18:9e:06:06:ba:63:88:3d:88:db:72:c9:2d:b2:d6: 48:e3:ef:5a:76:c3:dc:d4:9b:6d:72:81:1d:12:a1:c0:56:51: 51:f2:04:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23l9Y4C4tf1LY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk N2VlYzQ2YjktOWI2MC00MTBmLTk0N2QtMDE0NWE3NDlmY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4P1XvrLuwOzTRMDUZaGnhZmteLzPoTdocjo H9hH0N1oXeabkbMy7e+9crRpzxig0JEdRD/mgLQKUiXqiXWgFaBsEs74i+2/5X3J 5dlVw7dX7VCd9jt6Iw3lWW4gSW+w1zdI4RvDHquj3UXgc1YT4VxQWI4lTtEnS4lo aszOIaJS5S/wtdZPB1Ts9c5l4Lup/MCxhQvuXUkoT/XtqyhclcqKXNo5S+6FPH1I KBQxz+TcYUZEdMb/L6s+TB3BuOSpRacOHEnuiD7B7Q/ogH05deuSHyGVQ0nyfBcB xzgIVwArJfDKmHUyYv1oc5lUz8cYuD/mUTgKHrzeI5kM+ps+/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBrS60Fhjgnaxemgt45cVSTDjkvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2YxZGVjZmItNWEzNC0z MDNlLWE2MjEtOWVjNjFiYjgxZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIldAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4hj8R3w0lCwT6kpF6dj4TY+0YOt8JAAs//fMkXZuXD+FW5ioajiMTV F1gDItWWuZ3+uj0AkWChy1e+ph/g3tr5+BwlkoZWu27f0jyvPLQuQp1lgEiHXExB QYxMm7tkwzuXjeBZT5XYYfR0kzMzhE7zGVajxklZOIeEYR1/u2cQ17Li6AoC/Rbr /7q4CaVN4AqJR1kMcwSAVeuG5NRAHyuTyzAFbIDZCdCa/2reCmlMWtNBkLuo6cpF o9D0SF3NqNTawA3f8qZSUahsHeF8s4RzwlydUs83gphXqhieBga6Y4g9iNtyyS2y 1kjj71p2w9zUm21ygR0SocBWUVHyBF4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:26 2025 by rpki-client