$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4bc718c-6c72-3f62-a50d-543f91caa1d6.roa File: d4bc718c-6c72-3f62-a50d-543f91caa1d6.roa (raw, json) Hash identifier: CPZ2B1d780b80haZaNldMx15yMflf7FPPOfAf26fHaA= Subject key identifier: 74:01:8B:C0:85:06:9B:01:22:D7:E7:92:9B:22:91:7A:2B:34:C0:02 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84123655B47AE75A59F16480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4bc718c-6c72-3f62-a50d-543f91caa1d6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.118.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:36:55:b4:7a:e7:5a:59:f1:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0adf6b1d-f53f-4e3a-ae69-f16474d970af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a9:39:a3:8b:9d:79:26:20:8f:d1:f7:c2:3b: ce:be:2a:dd:11:12:fa:7d:82:87:38:66:22:aa:7e: 74:09:85:c6:8a:6e:d3:6f:d7:a6:76:33:ee:b5:81: d1:63:d9:42:64:4a:85:fe:77:43:8c:d3:12:a2:85: b8:f6:13:82:7d:3d:fe:e6:44:94:77:e6:4a:40:e0: 1b:53:18:7a:5c:9e:2a:bc:ba:e6:8c:e1:fe:26:16: 23:54:b6:10:f6:e9:2a:1c:27:cc:13:9d:24:47:5d: 85:68:4d:c9:56:95:a5:72:44:69:0c:02:67:0f:70: d9:8f:6f:be:4e:8d:f8:4c:17:24:79:81:07:3c:6f: 03:7b:53:1f:be:ff:f2:3f:7d:47:a8:d1:5c:d2:8b: 7b:bf:20:74:0c:d0:35:68:30:79:51:1b:7f:ea:67: 70:34:e1:db:0c:3b:10:a5:47:65:9e:74:a1:80:e2: 00:55:98:56:82:cb:1a:4d:85:6f:0b:1b:b5:46:1a: b1:11:60:6a:65:c8:d4:a0:3c:e6:96:f5:81:02:96: 01:66:cb:5d:2e:5b:26:7d:a0:01:7a:66:43:f8:0c: e5:d2:d5:c4:04:a2:63:3a:50:50:01:89:a6:41:8d: 50:56:b2:57:05:a7:dd:12:d1:b0:da:f4:12:9d:ef: 44:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:01:8B:C0:85:06:9B:01:22:D7:E7:92:9B:22:91:7A:2B:34:C0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4bc718c-6c72-3f62-a50d-543f91caa1d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6a:54:dc:92:ed:3e:32:8e:90:ae:97:92:72:5b:76:8f:5a: 04:35:e3:e2:61:4a:f3:bb:30:20:66:cd:81:76:02:e7:72:38: 9f:d9:31:00:da:a2:b7:6d:40:a8:d8:3d:f2:29:54:e2:d4:62: c2:af:ec:44:37:c5:45:91:05:85:3b:ee:15:14:99:0d:a6:de: c9:20:e0:5b:37:13:f9:9e:a7:43:c1:6f:60:70:0d:e7:35:c3: 5e:47:47:f1:06:09:84:db:4e:0e:b9:3c:dd:30:12:ee:73:45: 49:7c:88:c1:31:14:28:70:96:7d:fc:ba:25:7c:22:22:da:4e: ac:11:e0:25:a6:07:4b:a5:f1:bd:ef:7d:14:50:4e:9e:ec:61: c6:4d:c6:b0:b2:8d:dd:d8:64:ea:2d:2f:e1:e2:3f:1f:3f:46: 2d:93:c8:54:ab:03:2a:71:16:a1:c0:85:c1:24:a1:34:03:fb: 14:e5:11:0a:fe:97:a7:8d:4e:e3:83:a1:dd:d8:54:63:e4:48: 60:27:28:83:76:fa:0f:8b:52:2e:be:c7:dc:4c:65:bb:f2:d8: 60:2b:9b:27:65:8e:bf:08:d6:7c:a4:fa:3e:70:59:16:44:3b: c7:5b:ef:d7:dd:69:56:9f:de:18:5e:2e:c4:a2:78:62:8e:2d: f9:f4:38:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjZVtHrnWlnxZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGFkZjZiMWQtZjUzZi00ZTNhLWFlNjktZjE2NDc0ZDk3MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96k5o4udeSYgj9H3wjvOvirdERL6fYKHOGYi qn50CYXGim7Tb9emdjPutYHRY9lCZEqF/ndDjNMSooW49hOCfT3+5kSUd+ZKQOAb Uxh6XJ4qvLrmjOH+JhYjVLYQ9ukqHCfME50kR12FaE3JVpWlckRpDAJnD3DZj2++ To34TBckeYEHPG8De1Mfvv/yP31HqNFc0ot7vyB0DNA1aDB5URt/6mdwNOHbDDsQ pUdlnnShgOIAVZhWgssaTYVvCxu1RhqxEWBqZcjUoDzmlvWBApYBZstdLlsmfaAB emZD+Azl0tXEBKJjOlBQAYmmQY1QVrJXBafdEtGw2vQSne9EkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQBi8CFBpsBItfnkpsikXorNMACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRiYzcxOGMtNmM3Mi0z ZjYyLWE1MGQtNTQzZjkxY2FhMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBInb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpqVNyS7T4yjpCul5JyW3aPWgQ14+JhSvO7MCBmzYF2AudyOJ/ZMQDa ordtQKjYPfIpVOLUYsKv7EQ3xUWRBYU77hUUmQ2m3skg4Fs3E/mep0PBb2BwDec1 w15HR/EGCYTbTg65PN0wEu5zRUl8iMExFChwln38uiV8IiLaTqwR4CWmB0ul8b3v fRRQTp7sYcZNxrCyjd3YZOotL+HiPx8/Ri2TyFSrAypxFqHAhcEkoTQD+xTlEQr+ l6eNTuODod3YVGPkSGAnKIN2+g+LUi6+x9xMZbvy2GArmydljr8I1nyk+j5wWRZE O8db79fdaVaf3hheLsSieGKOLfn0OFk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:35 2025 by rpki-client