$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d038271a-1968-3d89-abe9-43bee261ae4c.roa File: d038271a-1968-3d89-abe9-43bee261ae4c.roa (raw, json) Hash identifier: bea7SIqYOHHsnJXQaA2N1aHAeaaBBJ5of6GV68a5kfM= Subject key identifier: 5C:54:C3:E6:96:76:97:92:C9:5A:19:C9:B0:95:E6:8A:93:41:F0:E2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A87878E1E71EB595E7BFC9570 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d038271a-1968-3d89-abe9-43bee261ae4c.roa Signing time: Tue 15 Jul 2025 18:48:01 +0000 ROA not before: Tue 15 Jul 2025 18:48:01 +0000 ROA not after: Mon 13 Oct 2025 18:48:01 +0000 asID: 396982 IP address blocks: 34.13.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:87:8e:1e:71:eb:59:5e:7b:fc:95:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 18:48:01 2025 GMT Not After : Oct 13 18:48:01 2025 GMT Subject: CN=0f7ad109-a635-4951-8646-8f616bdd12eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fd:6c:af:5e:da:72:5e:b0:15:34:cc:36:5e: 7c:c1:20:b0:cc:f0:ba:44:aa:5f:f5:bf:12:e0:ff: 70:67:05:2a:f3:51:9c:f2:34:1e:c7:a8:a9:8c:b0: 4b:9f:b2:50:f4:66:c3:65:3f:f2:b9:39:d7:97:94: b2:aa:89:3b:2f:3e:c7:e9:a0:e5:97:e4:d7:b7:61: c2:72:2d:3b:da:11:4e:ea:55:38:72:40:ff:eb:ce: 57:db:ac:a5:af:eb:2f:1e:8c:99:1d:21:e6:bc:a5: f6:07:d6:1d:9b:3b:9d:0f:d2:e3:98:5d:84:54:8b: 16:62:b4:55:41:5a:e5:4c:90:b8:6e:8c:84:28:ed: e2:3f:32:e5:3b:de:7d:79:3b:0a:71:94:98:c6:25: 2b:dc:02:59:15:b8:6c:08:01:69:c2:22:2f:ab:08: 19:a4:3c:28:e3:50:e5:1d:c2:9b:47:55:75:a5:ae: dd:39:9f:fc:18:59:ef:95:fe:29:09:67:04:8d:03: ef:a4:9e:e8:e8:0e:b1:c0:7c:84:b0:43:10:18:b1: e0:2b:bf:dd:2d:95:d3:ce:9a:f7:7f:09:8f:26:0c: df:6b:62:7a:bc:4c:f3:9d:c3:be:fa:4d:5e:54:1e: 18:80:c7:26:83:33:c2:bc:91:0f:0a:b3:0a:3d:e3: d2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:54:C3:E6:96:76:97:92:C9:5A:19:C9:B0:95:E6:8A:93:41:F0:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d038271a-1968-3d89-abe9-43bee261ae4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:78:b4:2f:26:aa:70:6d:e2:06:5b:21:80:c0:70:7a:60:19: ad:9f:c6:2e:9c:e7:1e:dd:80:ee:1d:aa:ee:56:ac:b1:d6:44: 47:f8:b1:ec:3d:13:83:e4:49:2c:76:5f:f9:88:e8:59:df:42: 84:a1:cb:50:d1:4a:8d:59:8d:7f:83:8c:e1:c5:3a:ee:dc:74: ad:76:e4:1c:31:1d:72:28:6f:f2:9c:19:0b:f7:96:ff:fd:08: 74:f8:ce:bf:8f:09:55:41:79:72:1e:c9:85:90:d6:4a:06:db: ac:f8:ef:47:04:1c:5d:58:d0:5a:4f:a8:27:1d:01:63:7f:52: b2:85:3d:fd:82:b7:a5:7f:c5:dd:af:a3:60:f1:68:15:81:f6: 44:e2:cd:04:70:26:9c:ef:b0:42:d9:f0:d0:fc:03:cc:dd:54: 5c:72:5e:a0:9f:29:c0:b3:74:66:b5:18:c4:db:42:c8:aa:bb: 54:e5:b7:ca:90:16:cf:60:0c:41:31:f7:a0:3c:68:98:ef:df: a7:92:43:33:2b:a9:72:8c:47:b6:97:12:55:64:4d:5d:31:71: 8a:22:3f:ba:a6:00:6b:65:60:5c:a4:37:06:88:b9:ad:4c:5c: c2:2b:7e:65:49:e0:ca:d6:9d:36:9c:74:3c:39:6d:8d:3a:a0: 85:32:06:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHh44ecetZXnv8lXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTE4NDgwMVoXDTI1MTAxMzE4NDgwMVowLzEtMCsGA1UEAxMk MGY3YWQxMDktYTYzNS00OTUxLTg2NDYtOGY2MTZiZGQxMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P1sr17acl6wFTTMNl58wSCwzPC6RKpf9b8S 4P9wZwUq81Gc8jQex6ipjLBLn7JQ9GbDZT/yuTnXl5Syqok7Lz7H6aDll+TXt2HC ci072hFO6lU4ckD/685X26ylr+svHoyZHSHmvKX2B9YdmzudD9LjmF2EVIsWYrRV QVrlTJC4boyEKO3iPzLlO959eTsKcZSYxiUr3AJZFbhsCAFpwiIvqwgZpDwo41Dl HcKbR1V1pa7dOZ/8GFnvlf4pCWcEjQPvpJ7o6A6xwHyEsEMQGLHgK7/dLZXTzpr3 fwmPJgzfa2J6vEzzncO++k1eVB4YgMcmgzPCvJEPCrMKPePSxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxUw+aWdpeSyVoZybCV5oqTQfDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDAzODI3MWEtMTk2OC0z ZDg5LWFiZTktNDNiZWUyNjFhZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIg1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN4tC8mqnBt4gZbIYDAcHpgGa2fxi6c5x7dgO4dqu5WrLHWREf4sew9 E4PkSSx2X/mI6FnfQoShy1DRSo1ZjX+DjOHFOu7cdK125BwxHXIob/KcGQv3lv/9 CHT4zr+PCVVBeXIeyYWQ1koG26z470cEHF1Y0FpPqCcdAWN/UrKFPf2Ct6V/xd2v o2DxaBWB9kTizQRwJpzvsELZ8ND8A8zdVFxyXqCfKcCzdGa1GMTbQsiqu1Tlt8qQ Fs9gDEEx96A8aJjv36eSQzMrqXKMR7aXElVkTV0xcYoiP7qmAGtlYFykNwaIua1M XMIrfmVJ4MrWnTacdDw5bY06oIUyBvw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:44 2025 by rpki-client