$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa File: d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa (raw, json) Hash identifier: 2fib1CElFsmvlqj0LNBNdn8eR4zTXMTlMQtMFTWF5Yk= Subject key identifier: DE:ED:7C:42:32:EF:32:26:42:96:81:1C:2C:1C:6C:CA:55:87:C1:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBAC7398FE40C5F0EB5C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.128.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ac:73:98:fe:40:c5:f0:eb:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=d584b1af-73cb-4551-a558-f0a3923b82c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:a3:30:05:ca:02:91:fb:8f:7f:dc:1a:40: 64:d9:fd:12:6d:3c:ce:9e:84:bb:d3:91:69:d3:96: 6d:98:e3:2d:f8:5a:66:62:d3:a5:b5:98:ed:1b:14: 8a:21:fe:8d:10:6a:57:52:e2:fb:55:e5:43:40:c2: 65:21:8e:a8:f8:d0:1c:d4:0b:4f:9e:7d:50:74:a7: 7e:5d:0c:cf:76:9e:50:97:14:15:7b:2a:9f:85:75: da:6a:7b:fa:9f:56:3e:30:32:8f:b0:00:ec:38:9f: 99:3f:4b:96:31:92:8f:be:58:e0:4b:be:bd:83:73: 41:fb:c7:23:8b:ad:d5:bf:05:70:91:d9:7f:32:9e: c9:4d:dc:81:da:14:5d:56:9a:07:c2:82:c8:ff:78: 7b:ee:73:47:48:9c:31:2d:fc:4f:21:4e:ad:1b:bf: 06:e5:dc:e6:b6:7e:f9:ad:74:c9:d7:6e:2f:ea:a6: 1e:61:88:94:00:5a:55:e8:1f:1e:3a:77:fc:72:1c: 37:15:2e:01:f5:92:fe:6b:53:6e:49:85:98:6f:5f: 82:58:31:11:54:aa:c2:64:74:fa:23:8a:63:68:55: b0:68:db:fb:c4:6e:35:82:04:b2:d9:e7:92:b5:bb: a8:61:3b:34:89:c2:24:1c:60:38:5f:dc:51:3c:c7: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:ED:7C:42:32:EF:32:26:42:96:81:1C:2C:1C:6C:CA:55:87:C1:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:77:35:de:6d:29:fe:7f:52:c0:ba:1c:4d:93:62:74:d3:95: 53:7c:27:0b:82:8e:69:9d:1b:7b:00:93:8f:c8:9b:81:a8:6b: b4:e2:82:e5:c0:8a:48:1d:af:c4:01:f5:83:f1:14:cd:dd:40: 22:04:cf:f0:9a:02:e8:ec:40:c4:ed:7d:aa:13:d1:b9:a3:66: a8:ee:4a:7f:4f:16:45:73:b5:c1:a5:eb:3e:ac:36:4f:fb:e5: 5c:06:cf:59:b1:07:cd:50:32:05:3b:80:21:22:b7:90:df:aa: 7e:0d:ad:2b:57:7d:96:9e:b9:10:17:38:a1:51:e1:a2:7e:a6: c0:ac:71:6e:bb:c1:50:ff:73:18:52:17:d8:c6:2f:26:96:cd: 21:48:24:f3:10:46:a1:d3:b1:24:34:75:66:c5:fc:4f:01:9a: 89:04:e7:c0:5a:27:f7:0a:29:96:ce:3d:1c:18:0d:c4:ee:c6: 76:56:f0:5d:40:1d:aa:ec:b6:66:59:54:ba:5d:3f:e4:a5:20: 46:c0:2a:b2:90:08:87:63:00:65:a9:fe:07:56:7c:79:2b:da: f9:23:64:bc:95:d0:06:06:88:f2:8a:82:3c:51:27:14:49:50: 2d:ba:92:23:a2:62:78:25:20:2a:96:c6:13:de:cc:84:f5:c7: 08:01:68:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26xzmP5AxfDrXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZDU4NGIxYWYtNzNjYi00NTUxLWE1NTgtZjBhMzkyM2I4MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunKjMAXKApH7j3/cGkBk2f0SbTzOnoS705Fp 05ZtmOMt+FpmYtOltZjtGxSKIf6NEGpXUuL7VeVDQMJlIY6o+NAc1AtPnn1QdKd+ XQzPdp5QlxQVeyqfhXXaanv6n1Y+MDKPsADsOJ+ZP0uWMZKPvljgS769g3NB+8cj i63VvwVwkdl/Mp7JTdyB2hRdVpoHwoLI/3h77nNHSJwxLfxPIU6tG78G5dzmtn75 rXTJ124v6qYeYYiUAFpV6B8eOnf8chw3FS4B9ZL+a1NuSYWYb1+CWDERVKrCZHT6 I4pjaFWwaNv7xG41ggSy2eeStbuoYTs0icIkHGA4X9xRPMfZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7tfEIy7zImQpaBHCwcbMpVh8GQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDVkYWMxNzMtOTE1OS0z YTI1LTgxMzctMGZkOGNmMWY2YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR3Nd5tKf5/UsC6HE2TYnTTlVN8JwuCjmmdG3sAk4/Im4Goa7TiguXA ikgdr8QB9YPxFM3dQCIEz/CaAujsQMTtfaoT0bmjZqjuSn9PFkVztcGl6z6sNk/7 5VwGz1mxB81QMgU7gCEit5Dfqn4NrStXfZaeuRAXOKFR4aJ+psCscW67wVD/cxhS F9jGLyaWzSFIJPMQRqHTsSQ0dWbF/E8BmokE58BaJ/cKKZbOPRwYDcTuxnZW8F1A HarstmZZVLpdP+SlIEbAKrKQCIdjAGWp/gdWfHkr2vkjZLyV0AYGiPKKgjxRJxRJ UC26kiOiYnglICqWxhPezIT1xwgBaC8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:25 2025 by rpki-client