$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0f307a2-c0e1-30f1-8ae8-2171dc620710.roa File: d0f307a2-c0e1-30f1-8ae8-2171dc620710.roa (raw, json) Hash identifier: G7oogWKsAkVpK5DV8NCqFEAnVtTPfDvB10ho6Y0SL8s= Subject key identifier: 9D:68:28:D8:62:AB:4E:B2:9E:AC:25:40:77:D3:F1:DC:3F:43:52:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC3CEF7B8B6AB95240400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0f307a2-c0e1-30f1-8ae8-2171dc620710.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.176.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c3:ce:f7:b8:b6:ab:95:24:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=aa10ecd7-a435-4f33-aa90-d9e26a9fb4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3f:68:4d:d0:71:37:42:88:3c:00:55:a1:30: 37:ef:9c:fb:55:ab:91:79:88:48:81:c2:d2:16:1c: e9:a4:84:0e:16:ee:a9:53:e1:45:dd:76:dc:6a:f5: af:7e:90:95:c5:9e:f7:47:2d:d7:dc:c6:a6:1d:03: 28:de:74:d1:a4:b5:9e:8a:4b:96:e5:19:a4:b0:d3: 7d:29:26:ea:2a:d8:99:b7:91:40:6e:22:56:93:60: 69:c3:58:03:2e:06:fc:ef:b4:75:a0:17:7d:10:66: 11:b6:4a:71:67:e0:22:67:a5:9e:6e:da:ac:94:9b: 05:40:fb:5d:c0:af:bd:e6:19:45:58:e8:de:ec:e7: 05:87:04:b9:70:61:0c:46:12:c4:63:12:da:ed:21: a6:d3:da:14:93:cb:65:cb:02:b1:a6:51:47:22:d4: 91:3c:fe:7b:07:3e:db:5e:16:71:9e:74:18:dc:c4: 38:a0:f9:0b:c1:c5:52:2f:ec:81:5c:3d:3f:76:6e: 2c:59:e1:23:2b:b2:0c:2c:3a:da:36:23:09:9c:74: 21:56:84:cc:42:25:e0:23:10:1b:ab:d7:c7:5b:22: 4a:63:3e:c8:6d:b9:59:c4:3c:0e:8b:31:63:c9:ba: ad:3e:85:86:fe:70:48:c7:f5:eb:9f:1d:17:7e:41: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:68:28:D8:62:AB:4E:B2:9E:AC:25:40:77:D3:F1:DC:3F:43:52:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0f307a2-c0e1-30f1-8ae8-2171dc620710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1f:29:32:50:bf:34:81:52:d0:c8:8b:e0:65:40:f8:1a:91: 93:c8:53:21:4b:22:07:cd:7e:9f:d8:ef:ff:cf:e0:e3:90:38: 13:b4:ef:78:cc:3c:6a:6c:82:91:3e:46:ad:7e:f3:b9:8e:58: 66:16:7d:84:0f:4f:cd:c2:0c:50:7c:ab:79:7c:1c:97:75:e4: 1a:86:95:73:bf:ce:ff:8a:2e:86:45:08:67:f7:37:9a:27:22: 4f:9a:8f:3a:2e:ee:b8:25:46:a1:eb:a9:a3:93:38:a8:c1:d2: 1a:a7:65:12:a3:86:48:16:44:a4:4b:e8:da:4a:76:4d:11:f3: 3b:37:ce:50:50:0d:6d:b7:26:30:61:d9:0a:d6:68:8c:18:10: 96:80:f6:20:79:28:72:c3:cf:92:1a:36:b0:78:d4:5a:43:3b: 75:b0:31:6f:d2:f5:09:fb:18:73:11:e6:1c:64:e0:32:c1:3a: ba:b5:21:f8:33:aa:aa:53:f1:04:a2:32:d0:b4:28:b3:2b:63: 94:e0:aa:49:8d:72:52:43:58:11:8e:01:45:54:02:47:c7:69: 4c:43:ac:4a:79:4c:29:f0:e8:44:72:aa:3a:e3:69:0c:9c:0f: 4d:94:f3:87:57:32:4c:81:5f:94:3c:63:e6:76:cd:0c:cf:8f: 0c:58:3c:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28PO97i2q5UkBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YWExMGVjZDctYTQzNS00ZjMzLWFhOTAtZDllMjZhOWZiNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj9oTdBxN0KIPABVoTA375z7VauReYhIgcLS FhzppIQOFu6pU+FF3XbcavWvfpCVxZ73Ry3X3MamHQMo3nTRpLWeikuW5RmksNN9 KSbqKtiZt5FAbiJWk2Bpw1gDLgb877R1oBd9EGYRtkpxZ+AiZ6WebtqslJsFQPtd wK+95hlFWOje7OcFhwS5cGEMRhLEYxLa7SGm09oUk8tlywKxplFHItSRPP57Bz7b XhZxnnQY3MQ4oPkLwcVSL+yBXD0/dm4sWeEjK7IMLDraNiMJnHQhVoTMQiXgIxAb q9fHWyJKYz7IbblZxDwOizFjybqtPoWG/nBIx/Xrnx0XfkHsBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1oKNhiq06ynqwlQHfT8dw/Q1L3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDBmMzA3YTItYzBlMS0z MGYxLThhZTgtMjE3MWRjNjIwNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIfKTJQvzSBUtDIi+BlQPgakZPIUyFLIgfNfp/Y7//P4OOQOBO073jM PGpsgpE+Rq1+87mOWGYWfYQPT83CDFB8q3l8HJd15BqGlXO/zv+KLoZFCGf3N5on Ik+ajzou7rglRqHrqaOTOKjB0hqnZRKjhkgWRKRL6NpKdk0R8zs3zlBQDW23JjBh 2QrWaIwYEJaA9iB5KHLDz5IaNrB41FpDO3WwMW/S9Qn7GHMR5hxk4DLBOrq1Ifgz qqpT8QSiMtC0KLMrY5TgqkmNclJDWBGOAUVUAkfHaUxDrEp5TCnw6ERyqjrjaQyc D02U84dXMkyBX5Q8Y+Z2zQzPjwxYPJA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:32 2025 by rpki-client