$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa File: cf6e7b37-0772-32d7-9247-62099beb3cd5.roa (raw, json) Hash identifier: qxlKZ7hyxKXbJqgv2sAQvUMDI0yt7yEPq0emWDU0wRY= Subject key identifier: DC:E7:90:1A:7A:55:1C:5A:99:52:E5:49:1E:92:7A:D1:D5:8B:E5:D5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7F713898BEB1CA9EB280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.88.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7f:71:38:98:be:b1:ca:9e:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=bd4f8881-80c4-4cf7-b065-1e9a7f5a1dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:78:35:0e:aa:9c:33:57:a2:c5:cd:fb:3c:e7: b9:82:3d:78:0c:85:a5:42:5e:e3:f9:75:a7:b4:75: ef:bd:5f:10:52:42:f3:1f:fa:de:3a:19:78:ec:89: aa:83:8f:3e:c2:11:05:63:c4:a7:28:ae:5d:1d:8e: 8c:15:be:59:85:68:fd:32:be:20:4a:d0:19:1b:da: 93:51:6c:54:44:66:2c:1f:00:c5:f5:78:0e:0f:08: 78:f9:cc:75:84:0f:39:67:dd:18:f5:8f:54:bd:d6: bb:04:17:a8:67:60:c3:24:fa:62:bb:96:4d:2f:1d: 25:ff:f3:6a:ae:ab:04:aa:a1:3c:a9:ef:57:07:0f: f3:f1:d2:f2:d7:d5:e6:a0:1c:80:17:49:b2:ab:e6: b5:cd:a2:4a:32:ca:82:5a:ad:3f:57:03:74:45:f4: e0:48:34:14:d2:f5:bd:32:d3:d5:a4:9a:a9:26:7c: d6:65:b0:fe:3c:68:a0:dd:12:3c:1b:b5:61:bb:a4: f8:6a:ba:d8:02:59:ea:49:eb:07:ce:1a:7c:23:59: d7:95:c5:a9:f2:c8:54:85:9a:49:34:12:db:bb:78: e1:5f:54:53:c8:85:c6:49:c3:67:90:b5:8d:5d:39: bc:bb:4c:7b:ae:80:8c:cb:86:2d:36:da:5e:98:b6: 10:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E7:90:1A:7A:55:1C:5A:99:52:E5:49:1E:92:7A:D1:D5:8B:E5:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:55:fc:84:d4:be:f4:f0:22:50:c8:43:d6:cd:0e:c5:6b:68: fa:c0:49:e2:df:c9:0e:a7:79:2c:26:0a:80:2c:3e:3e:ff:cc: 7c:c5:8f:15:ea:28:a9:ef:44:84:7f:5a:31:e1:d3:3c:39:3d: ac:b1:20:b5:f6:09:8d:6e:29:34:f0:12:91:10:7c:3f:3b:48: ea:c8:47:4b:c8:1c:36:7e:4d:af:e4:1b:53:1f:d5:b0:44:92: f1:91:32:a7:b7:cf:04:15:b8:04:f8:38:68:23:b0:b1:c9:c1: 75:06:ba:bb:a6:70:b6:a7:3e:49:c6:d9:9c:80:3c:20:a2:59: 89:48:35:5d:dd:7b:ac:6b:35:bb:f1:9b:fd:ff:ff:30:f9:c9: d2:06:49:7f:b1:cc:49:c3:b6:e6:a1:f8:ff:6d:5d:51:93:2c: 15:03:1a:5c:c5:45:15:e2:33:b6:14:ec:dc:79:1c:a6:6e:6d: 5e:10:73:cc:f1:ef:26:f8:8e:eb:ab:40:94:8a:45:06:95:1c: b7:c2:34:cd:fc:c3:83:3f:e6:28:1e:f9:45:44:de:c1:6d:f9: 1a:d6:c6:7b:5e:11:0f:3a:8d:28:98:aa:b6:31:1b:69:63:a7: aa:a4:2b:aa:07:8a:ea:fc:50:cb:01:fe:dc:a3:b6:cc:c4:8d: dd:7b:66:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG239xOJi+scqesoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YmQ0Zjg4ODEtODBjNC00Y2Y3LWIwNjUtMWU5YTdmNWExZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Xg1DqqcM1eixc37POe5gj14DIWlQl7j+XWn tHXvvV8QUkLzH/reOhl47Imqg48+whEFY8SnKK5dHY6MFb5ZhWj9Mr4gStAZG9qT UWxURGYsHwDF9XgODwh4+cx1hA85Z90Y9Y9Uvda7BBeoZ2DDJPpiu5ZNLx0l//Nq rqsEqqE8qe9XBw/z8dLy19XmoByAF0myq+a1zaJKMsqCWq0/VwN0RfTgSDQU0vW9 MtPVpJqpJnzWZbD+PGig3RI8G7Vhu6T4arrYAlnqSesHzhp8I1nXlcWp8shUhZpJ NBLbu3jhX1RTyIXGScNnkLWNXTm8u0x7roCMy4YtNtpemLYQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNznkBp6VRxamVLlSR6SetHVi+XVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y2ZTdiMzctMDc3Mi0z MmQ3LTkyNDctNjIwOTliZWIzY2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIliwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdV/ITUvvTwIlDIQ9bNDsVraPrASeLfyQ6neSwmCoAsPj7/zHzFjxXq KKnvRIR/WjHh0zw5PayxILX2CY1uKTTwEpEQfD87SOrIR0vIHDZ+Ta/kG1Mf1bBE kvGRMqe3zwQVuAT4OGgjsLHJwXUGurumcLanPknG2ZyAPCCiWYlINV3de6xrNbvx m/3//zD5ydIGSX+xzEnDtuah+P9tXVGTLBUDGlzFRRXiM7YU7Nx5HKZubV4Qc8zx 7yb4juurQJSKRQaVHLfCNM38w4M/5ige+UVE3sFt+RrWxnteEQ86jSiYqrYxG2lj p6qkK6oHiur8UMsB/tyjtszEjd17ZpQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:35 2025 by rpki-client