$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e93e2-e568-3483-98ed-28d64c164239.roa File: cf6e93e2-e568-3483-98ed-28d64c164239.roa (raw, json) Hash identifier: vAKeicN3IfchIJ4ay3+q/TNPqXFlqj4+zS0IZmRn3fs= Subject key identifier: B8:87:89:17:32:74:FB:00:39:89:8F:BC:71:A0:C8:1B:38:5F:59:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB888531D696550D246180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e93e2-e568-3483-98ed-28d64c164239.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.143.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:88:85:31:d6:96:55:0d:24:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a146f7a3-a01d-4a7e-8d7a-7798eab71b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:57:91:6e:e2:ee:56:63:d4:20:85:11:35: 8d:9e:3d:8c:32:23:d1:43:3b:76:80:67:3f:14:06: 82:cc:9d:3d:f0:62:d8:90:c2:26:46:78:1f:11:d2: 96:89:2b:f3:11:3c:89:a1:dd:29:12:da:3f:fc:13: 24:77:82:ce:cd:80:73:22:16:16:f1:58:60:c8:bf: 7f:63:7f:2c:41:1b:78:1e:4f:15:10:38:cd:d0:90: 06:08:a3:a8:5b:3f:00:6c:ce:c0:e4:68:a2:90:4d: c4:4f:16:d4:8c:85:08:6f:f3:de:30:97:f3:4a:11: d4:f7:38:c6:c6:9e:95:5d:05:3f:b7:c8:60:7d:ff: c3:55:5a:f8:0c:0f:34:19:04:3b:45:6e:b8:33:29: b7:8d:90:a6:b8:f0:09:06:78:30:26:cb:b0:68:79: 30:8c:54:dc:39:d1:dd:9b:2e:10:ee:0b:ff:fb:b6: 52:8e:a8:ec:cf:61:a1:f0:ec:2f:61:7b:c0:bb:e4: da:8d:5f:c6:a4:0c:2a:69:ea:ed:d9:bd:67:73:81: 75:72:9f:41:37:ca:19:8e:5b:f6:2a:dc:be:48:a2: 5b:6c:92:c9:62:c4:71:92:f1:d5:52:89:f6:e8:e4: 99:4c:35:70:2b:95:fb:47:eb:8f:d8:96:65:2f:ae: c2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:87:89:17:32:74:FB:00:39:89:8F:BC:71:A0:C8:1B:38:5F:59:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e93e2-e568-3483-98ed-28d64c164239.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.143.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:37:89:fd:9a:35:93:85:7a:23:c2:ab:4a:28:20:b6:e5:95: 14:1d:2f:ea:fd:9e:9c:c6:de:16:48:27:cb:42:b3:a4:4a:fa: 8b:f3:64:29:aa:51:34:90:5f:bc:bb:d2:d2:01:3c:3a:07:8d: 7d:f5:67:01:15:7d:8e:00:b1:89:fc:19:01:8b:5c:e8:1d:ab: 97:d9:bb:75:b5:2a:fa:0c:2e:db:cc:ed:96:98:c8:c3:ec:97: 42:b6:6b:82:70:9c:a0:15:f5:ae:af:f6:c2:33:d5:e6:d9:14: d6:be:2a:9b:e0:7b:f6:a0:b2:11:af:e9:96:fd:ad:36:21:29: b5:ac:33:ca:31:26:82:f1:9f:bb:cf:ff:2b:4c:d9:31:7e:8b: 3f:34:00:35:ed:a7:e7:9e:bf:be:b3:a5:b4:c4:38:0a:53:bf: 17:8e:8f:21:a5:27:83:cf:4a:83:be:8c:69:4c:0e:e1:ba:64: 42:77:10:e9:0e:29:54:17:f7:95:37:2f:fb:87:d1:6a:96:b4: 96:39:70:9b:91:54:7c:61:13:bc:95:75:39:4f:09:54:a0:a8: 65:28:f7:5a:b4:6d:20:ee:90:5f:69:ff:c5:d5:11:45:b5:db: 4d:7f:16:b7:a2:da:fb:bc:98:5c:68:93:49:c9:76:fb:e5:f2: 0c:b3:c3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24iFMdaWVQ0kYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YTE0NmY3YTMtYTAxZC00YTdlLThkN2EtNzc5OGVhYjcxYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjghXkW7i7lZj1CCFETWNnj2MMiPRQzt2gGc/ FAaCzJ098GLYkMImRngfEdKWiSvzETyJod0pEto//BMkd4LOzYBzIhYW8VhgyL9/ Y38sQRt4Hk8VEDjN0JAGCKOoWz8AbM7A5GiikE3ETxbUjIUIb/PeMJfzShHU9zjG xp6VXQU/t8hgff/DVVr4DA80GQQ7RW64Mym3jZCmuPAJBngwJsuwaHkwjFTcOdHd my4Q7gv/+7ZSjqjsz2Gh8OwvYXvAu+TajV/GpAwqaert2b1nc4F1cp9BN8oZjlv2 Kty+SKJbbJLJYsRxkvHVUon26OSZTDVwK5X7R+uP2JZlL67CowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiHiRcydPsAOYmPvHGgyBs4X1nBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y2ZTkzZTItZTU2OC0z NDgzLTk4ZWQtMjhkNjRjMTY0MjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIo9MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw3if2aNZOFeiPCq0ooILbllRQdL+r9npzG3hZIJ8tCs6RK+ovzZCmq UTSQX7y70tIBPDoHjX31ZwEVfY4AsYn8GQGLXOgdq5fZu3W1KvoMLtvM7ZaYyMPs l0K2a4JwnKAV9a6v9sIz1ebZFNa+Kpvge/agshGv6Zb9rTYhKbWsM8oxJoLxn7vP /ytM2TF+iz80ADXtp+eev76zpbTEOApTvxeOjyGlJ4PPSoO+jGlMDuG6ZEJ3EOkO KVQX95U3L/uH0WqWtJY5cJuRVHxhE7yVdTlPCVSgqGUo91q0bSDukF9p/8XVEUW1 201/Frei2vu8mFxok0nJdvvl8gyzw/Q= -----END CERTIFICATE-----Generated at Tue Jul 22 04:35:40 2025 by rpki-client