$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa File: cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa (raw, json) Hash identifier: JHS9M5PZJhEMwVeiWmkOUPjNC4G+36CG9xQrrbYxO6g= Subject key identifier: A1:7A:4D:22:CB:0E:FD:90:0C:96:33:5B:F4:15:12:37:94:91:68:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF8460C92FE4E141EE7C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.74.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f8:46:0c:92:fe:4e:14:1e:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=8d4e37d6-1789-4799-ae5d-69e23cd20cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:b8:8a:3f:82:c9:5d:c3:2a:c5:fe:45:a3: 66:b5:22:bb:a8:c7:4f:c2:b6:48:71:70:37:c8:6e: 84:26:f2:ca:90:f0:1d:14:0d:45:90:a9:39:38:a6: 03:4a:50:28:94:f1:9c:d5:c6:05:0b:bf:4d:b2:73: e8:e6:b2:73:d1:55:2f:14:6e:8e:81:35:4c:fa:cd: 55:ff:65:66:e9:c6:bf:7f:f4:05:af:c3:4d:df:15: e4:e0:ea:3d:0d:9d:88:e0:0c:00:94:dc:ff:9a:81: d6:c5:18:1c:00:5d:a4:07:ca:a2:8d:d5:e5:ad:a9: e4:66:0f:f3:fc:3a:35:36:20:b8:dd:60:47:29:2c: 3b:5d:0b:70:09:d4:5a:c7:e8:5d:9b:5c:1c:a0:61: ba:79:0c:6a:a1:6e:a2:2c:70:c5:7c:4f:26:53:7e: 28:00:0b:ce:b6:c0:fc:7d:a5:fe:0e:30:58:b8:60: f7:de:f3:30:e9:2c:14:12:87:47:6d:32:04:33:3e: ab:c9:fb:f2:0f:8f:d3:94:88:7a:f3:cc:39:b7:f2: 5f:fe:9a:84:68:35:1f:12:73:df:e4:00:5e:eb:99: 84:54:97:9b:22:26:94:27:71:85:b6:1a:8c:1d:10: 8e:81:d4:4b:4f:60:98:d2:6a:da:86:80:45:f6:5c: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7A:4D:22:CB:0E:FD:90:0C:96:33:5B:F4:15:12:37:94:91:68:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c4:72:9f:61:56:8d:26:59:60:c8:53:35:bb:ce:5c:89:a0: 7b:51:6e:98:ab:38:05:48:39:d5:a5:df:d1:05:d0:a8:69:fc: c3:c3:1a:0f:5f:68:99:e0:8c:18:fd:81:e7:01:d3:75:4d:9a: 60:f5:89:ea:0f:76:e0:d5:0f:0c:70:10:e4:ff:1b:1a:b1:7f: e0:ed:b7:67:77:34:4c:25:4f:0f:cf:25:5e:13:92:da:75:10: e5:af:81:76:1e:1a:20:41:dd:b5:85:72:6c:ec:8a:d1:1f:f6: 5c:a5:da:35:6b:37:8e:1f:cb:05:ea:3a:b4:4e:de:63:1d:07: 10:93:e3:71:b7:50:42:bd:a4:28:1c:c1:2b:90:ce:7e:3c:9a: 65:66:27:8c:86:79:c9:bf:7c:5b:f7:36:e9:0e:e3:d5:1d:7d: 7e:51:24:1c:7c:18:f1:24:26:d7:ae:59:cf:98:22:49:80:e4: 77:4a:2b:3c:5b:40:12:83:37:ba:ea:82:25:89:f1:ec:97:45: 39:aa:97:9c:cc:7f:05:75:99:2a:de:37:1f:7f:a0:02:e7:a4: 8c:b5:16:9c:37:56:bc:c7:be:0f:c5:87:d9:75:3d:ad:ce:35: 62:5f:a8:f9:39:a8:d2:d2:53:72:68:cc:11:56:88:f7:af:a9: 4c:52:52:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/hGDJL+ThQe58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OGQ0ZTM3ZDYtMTc4OS00Nzk5LWFlNWQtNjllMjNjZDIwY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE+4ij+CyV3DKsX+RaNmtSK7qMdPwrZIcXA3 yG6EJvLKkPAdFA1FkKk5OKYDSlAolPGc1cYFC79NsnPo5rJz0VUvFG6OgTVM+s1V /2Vm6ca/f/QFr8NN3xXk4Oo9DZ2I4AwAlNz/moHWxRgcAF2kB8qijdXlrankZg/z /Do1NiC43WBHKSw7XQtwCdRax+hdm1wcoGG6eQxqoW6iLHDFfE8mU34oAAvOtsD8 faX+DjBYuGD33vMw6SwUEodHbTIEMz6ryfvyD4/TlIh688w5t/Jf/pqEaDUfEnPf 5ABe65mEVJebIiaUJ3GFthqMHRCOgdRLT2CY0mrahoBF9lyRmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF6TSLLDv2QDJYzW/QVEjeUkWguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZlZmY3YzItMTU3MS0z ZGUxLTliYzgtNWIyNDNmYjIzYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITEcp9hVo0mWWDIUzW7zlyJoHtRbpirOAVIOdWl39EF0Khp/MPDGg9f aJngjBj9gecB03VNmmD1ieoPduDVDwxwEOT/Gxqxf+Dtt2d3NEwlTw/PJV4Tktp1 EOWvgXYeGiBB3bWFcmzsitEf9lyl2jVrN44fywXqOrRO3mMdBxCT43G3UEK9pCgc wSuQzn48mmVmJ4yGecm/fFv3NukO49UdfX5RJBx8GPEkJteuWc+YIkmA5HdKKzxb QBKDN7rqgiWJ8eyXRTmql5zMfwV1mSreNx9/oALnpIy1Fpw3VrzHvg/Fh9l1Pa3O NWJfqPk5qNLSU3JozBFWiPevqUxSUkE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:46 2025 by rpki-client