$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa File: d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa (raw, json) Hash identifier: jGB7Bw7HzKEMyYmRD4eqF3mNiIdwcvYHCDQWeevRxvA= Subject key identifier: 98:5A:5B:8C:DA:C1:18:C4:8B:B1:E1:03:12:1D:07:43:78:25:9E:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA24DD4EC787D975C2100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.71.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a2:4d:d4:ec:78:7d:97:5c:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a1de6085-998d-48b7-acfd-f2f8536d4988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:85:1d:bc:5e:9b:ea:e4:77:f3:85:6b:87:b5: 14:e5:63:07:aa:53:1a:ff:ae:e3:77:76:82:0f:5c: 86:65:fd:ca:53:e3:5a:fb:7b:a2:8a:07:18:16:1e: c9:db:66:83:3e:ff:23:8f:4f:d7:c2:71:d3:42:23: b8:65:3e:6a:f7:38:f0:05:df:6e:36:59:1e:07:f5: 7b:c9:f0:23:bc:02:4c:f9:08:a6:61:4a:60:65:6d: 3c:8a:7d:26:80:cb:6a:91:10:ab:31:a9:9e:a8:94: 01:d6:5a:92:52:3d:1e:06:99:a3:0e:b6:b2:ed:f3: f7:fe:50:e0:97:28:25:d3:d7:03:ef:14:91:8a:34: 4b:da:95:8c:18:cc:b5:b1:e5:9e:6c:a1:ce:08:82: b5:ba:d8:e1:2b:ce:4a:05:73:05:33:40:06:22:e1: 23:cc:50:ec:4c:7b:e0:6b:60:ab:f0:9d:75:94:35: f5:ad:78:70:36:95:a7:9e:ea:61:74:26:15:97:b7: 41:95:01:aa:71:81:bd:a5:0b:44:71:e0:49:ed:ae: 38:e7:07:07:50:b7:93:62:1c:b2:36:f6:15:c4:27: b3:03:16:fd:77:92:2a:0c:45:0e:ca:12:69:7b:85: 2f:fd:3c:3e:56:63:a3:dc:74:4d:88:21:68:2f:f5: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5A:5B:8C:DA:C1:18:C4:8B:B1:E1:03:12:1D:07:43:78:25:9E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d9:21:98:a5:a3:cd:96:47:7e:00:a6:fd:43:f0:3d:80:3a: 32:ec:ae:c0:e2:5d:78:dd:44:1f:09:f6:d2:51:a0:18:de:b0: 11:86:61:84:44:85:59:a1:fa:ce:87:bb:54:4f:43:e8:f3:fe: bf:6d:50:10:34:0c:b2:6e:5b:bc:1b:ec:56:63:c5:44:3e:69: b0:8c:8f:38:db:bc:56:72:88:5a:f4:8b:ba:24:65:a0:63:9e: e9:98:9e:68:8c:7b:d4:21:70:2c:17:76:a5:2d:55:8c:19:04: ef:d9:b3:68:9d:44:02:74:d2:52:78:f9:9e:06:57:c7:86:29: 11:c5:47:a1:cb:75:b1:6b:d7:fb:12:b2:61:c8:ce:cc:d4:fd: d4:d3:87:d1:99:d0:5b:61:b3:e3:ec:08:fc:65:b2:cf:00:76: 22:e4:02:1d:cd:d9:c7:f4:0f:4f:8e:b1:89:cc:bc:86:cd:0a: a6:a7:ff:1a:de:e5:aa:67:a2:75:47:fc:29:44:8d:e3:ba:71: 22:80:20:24:61:0d:c4:41:e4:6c:82:36:10:8e:5a:a2:bc:72: e8:b6:ce:8d:df:6e:bd:2b:71:e6:cc:f1:da:63:1b:5e:5f:46: eb:a7:e7:b4:b2:e2:cc:61:29:98:dd:5d:88:de:77:14:a7:fe: d4:9a:5b:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26JN1Ox4fZdcIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YTFkZTYwODUtOTk4ZC00OGI3LWFjZmQtZjJmODUzNmQ0OTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYUdvF6b6uR384Vrh7UU5WMHqlMa/67jd3aC D1yGZf3KU+Na+3uiigcYFh7J22aDPv8jj0/XwnHTQiO4ZT5q9zjwBd9uNlkeB/V7 yfAjvAJM+QimYUpgZW08in0mgMtqkRCrMameqJQB1lqSUj0eBpmjDray7fP3/lDg lygl09cD7xSRijRL2pWMGMy1seWebKHOCIK1utjhK85KBXMFM0AGIuEjzFDsTHvg a2Cr8J11lDX1rXhwNpWnnuphdCYVl7dBlQGqcYG9pQtEceBJ7a445wcHULeTYhyy NvYVxCezAxb9d5IqDEUOyhJpe4Uv/Tw+VmOj3HRNiCFoL/XIFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhaW4zawRjEi7HhAxIdB0N4JZ4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDEzNDM1NmItZDNlYi0z ZTlmLWFjNWQtZTBkM2YzY2Q4MTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvZIZilo82WR34Apv1D8D2AOjLsrsDiXXjdRB8J9tJRoBjesBGGYYRE hVmh+s6Hu1RPQ+jz/r9tUBA0DLJuW7wb7FZjxUQ+abCMjzjbvFZyiFr0i7okZaBj numYnmiMe9QhcCwXdqUtVYwZBO/Zs2idRAJ00lJ4+Z4GV8eGKRHFR6HLdbFr1/sS smHIzszU/dTTh9GZ0Fths+PsCPxlss8AdiLkAh3N2cf0D0+OsYnMvIbNCqan/xre 5apnonVH/ClEjeO6cSKAICRhDcRB5GyCNhCOWqK8cui2zo3fbr0rcebM8dpjG15f Ruun57Sy4sxhKZjdXYjedxSn/tSaW6E= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:02 2025 by rpki-client