$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa File: d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa (raw, json) Hash identifier: 6+z+ScEUuVkbmuZM2pZZG3c1YQ4xXcStSSSf5x1XbZM= Subject key identifier: A6:1E:86:50:F3:86:67:E1:E6:C7:C2:3B:89:69:D9:44:70:96:D1:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBABC95D2ACD1182FFA600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.88.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ab:c9:5d:2a:cd:11:82:ff:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=4d13374a-9219-4165-a28e-4036b5098b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fb:77:c0:cb:6b:ac:08:39:5d:5f:22:71:4f: f2:da:1d:73:de:41:f2:a8:1e:c0:28:0e:16:bd:86: 42:bc:00:52:ae:fb:44:ef:4c:bf:a9:d4:b9:82:08: a1:79:c8:8c:a8:83:2d:06:a1:6a:b6:19:00:ef:d2: 5b:b8:45:ac:28:5d:7e:b1:96:d9:09:57:d1:1b:18: e3:a8:bd:37:e1:1d:4f:be:20:ed:9c:fc:95:d6:92: 33:67:65:0e:4f:21:7d:8e:9a:22:02:58:fa:06:de: 00:d1:bd:36:41:4e:a6:63:80:28:d8:02:39:67:5a: 8b:60:e2:c6:ba:68:60:79:95:1e:bd:08:42:56:f5: ad:18:ce:0a:fb:ba:2a:95:f2:cc:62:fa:11:4d:8a: 1c:55:5e:48:73:8f:d2:41:3c:3d:e3:a9:45:95:7d: 50:8d:d1:e2:7d:30:5c:8a:50:cf:9a:15:5f:bf:17: b7:f8:3b:72:b6:e3:08:31:82:a5:f9:d7:8e:4b:91: 9d:94:56:95:5a:30:a2:c7:84:68:8c:ec:ec:88:d4: 1b:1b:f2:7a:42:58:c3:6c:1f:79:84:6a:50:5f:0c: 35:69:74:47:b2:2f:a1:8d:48:4f:21:e2:bc:85:11: 1c:5c:18:9f:d8:94:9f:6d:c1:4c:51:71:61:0a:b0: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1E:86:50:F3:86:67:E1:E6:C7:C2:3B:89:69:D9:44:70:96:D1:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c9:ac:82:86:80:c5:4a:91:a3:8a:5b:e2:77:a4:c2:91:17: 55:ec:9a:63:7f:5c:ed:ba:c2:3f:10:63:85:40:c0:f3:9e:28: 9f:47:fe:1a:45:31:be:ab:7a:f3:91:76:18:cb:e3:53:c4:5c: 44:c4:1c:c0:71:a1:02:85:6d:b7:bc:7f:2a:89:80:fa:ae:7b: c0:97:d9:7f:64:c7:33:77:3a:93:31:56:4d:1e:4a:08:b0:21: 69:dd:dc:71:84:97:cb:fc:27:0c:b3:fc:bc:9f:99:91:ba:36: 6e:76:12:9c:71:52:68:f9:dc:16:24:97:3a:61:56:f3:86:24: 90:57:33:e2:42:01:c8:89:1f:0b:39:e3:14:64:6b:c3:96:9c: 50:4f:dc:fc:b3:71:d7:4b:49:45:81:eb:ea:41:b3:68:13:dc: f0:f7:2e:3e:f4:9d:cd:64:38:89:25:1a:62:ce:43:1a:e9:56: 8f:ac:f1:a5:20:88:31:15:c8:d3:1c:d9:ec:0f:0f:e6:75:0f: 03:55:2e:b1:5d:d9:5b:6b:61:90:9d:0c:66:f6:98:37:4a:1c: be:17:e2:96:cb:a1:8f:51:b6:4a:6d:95:1e:c0:55:00:14:9e: 1b:4f:eb:f9:9f:d7:a4:0d:94:10:99:e8:66:a6:d8:c7:28:9b: 86:46:77:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26vJXSrNEYL/pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NGQxMzM3NGEtOTIxOS00MTY1LWEyOGUtNDAzNmI1MDk4YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgft3wMtrrAg5XV8icU/y2h1z3kHyqB7AKA4W vYZCvABSrvtE70y/qdS5ggiheciMqIMtBqFqthkA79JbuEWsKF1+sZbZCVfRGxjj qL034R1PviDtnPyV1pIzZ2UOTyF9jpoiAlj6Bt4A0b02QU6mY4Ao2AI5Z1qLYOLG umhgeZUevQhCVvWtGM4K+7oqlfLMYvoRTYocVV5Ic4/SQTw946lFlX1QjdHifTBc ilDPmhVfvxe3+DtytuMIMYKl+deOS5GdlFaVWjCix4RojOzsiNQbG/J6QljDbB95 hGpQXww1aXRHsi+hjUhPIeK8hREcXBif2JSfbcFMUXFhCrBYQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYehlDzhmfh5sfCO4lp2URwltHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRjMWFiNGYtNmQwMi0z NDNmLTk2MmYtMzU4NDBiYWU2ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIljwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbJrIKGgMVKkaOKW+J3pMKRF1XsmmN/XO26wj8QY4VAwPOeKJ9H/hpF Mb6revORdhjL41PEXETEHMBxoQKFbbe8fyqJgPque8CX2X9kxzN3OpMxVk0eSgiw IWnd3HGEl8v8Jwyz/LyfmZG6Nm52EpxxUmj53BYklzphVvOGJJBXM+JCAciJHws5 4xRka8OWnFBP3PyzcddLSUWB6+pBs2gT3PD3Lj70nc1kOIklGmLOQxrpVo+s8aUg iDEVyNMc2ewPD+Z1DwNVLrFd2VtrYZCdDGb2mDdKHL4X4pbLoY9RtkptlR7AVQAU nhtP6/mf16QNlBCZ6Gam2Mcom4ZGdxk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:33 2025 by rpki-client