$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8ced05a-a578-3242-a97d-386df51d9e7e.roa File: d8ced05a-a578-3242-a97d-386df51d9e7e.roa (raw, json) Hash identifier: OJ2FXZEX+0y3zG7hrZH2b/VoFFEbrRYyqLoU5RxacpE= Subject key identifier: 90:41:51:E0:58:44:32:B8:E3:6B:8A:17:5C:7E:32:E2:03:CC:05:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBAA3BF8B45BC1CC63BC10 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8ced05a-a578-3242-a97d-386df51d9e7e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.73.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:aa:3b:f8:b4:5b:c1:cc:63:bc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a7b26146-d3ac-4b0b-bfc7-0a43ebfe782f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:dc:6c:25:5f:b2:ee:f1:4b:68:09:77:8d: 2c:27:98:6e:0c:f9:61:0b:13:3f:46:4d:c9:10:01: 78:cb:b1:9b:bb:56:08:b9:b8:c5:88:95:90:8c:12: 3c:a0:2c:e7:a2:b5:65:1b:42:f1:f0:87:2c:6e:7c: ea:79:84:f2:e1:0d:3a:5b:97:06:8a:ae:b9:38:39: 66:73:40:ca:19:40:d9:9e:4e:78:49:6e:c7:f7:4a: 85:d9:4a:0a:32:6b:d2:db:6f:b9:b1:b3:c6:c1:6d: 6d:8e:ea:51:de:ba:4b:ce:46:b7:62:2b:84:ba:df: 5c:da:a1:67:d4:6f:93:32:91:62:02:3f:ab:e8:1c: 0c:3e:e7:05:f9:47:f8:cc:82:c6:cd:4e:69:be:b5: 64:b7:6c:42:5d:a7:53:13:47:09:0c:da:45:ff:eb: 02:42:88:d2:d9:bf:2e:5c:2e:07:11:06:8f:03:44: 0c:e6:74:a9:3c:57:6d:6a:df:94:80:7d:d5:3b:9d: bc:34:7d:26:02:e4:3d:41:67:04:4b:c0:74:31:a0: cf:31:b6:06:27:ab:23:26:89:97:67:6a:88:24:5b: 62:86:10:2d:69:47:39:06:2a:b1:a5:92:06:6c:ef: c1:8c:a7:83:b9:8b:31:33:af:75:57:12:6e:f0:2b: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:41:51:E0:58:44:32:B8:E3:6B:8A:17:5C:7E:32:E2:03:CC:05:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8ced05a-a578-3242-a97d-386df51d9e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.73.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ca:ec:ce:e6:b8:ab:95:47:b6:19:f1:4d:79:b2:b3:a9:c5: e4:2b:1c:ae:30:7e:e3:b3:62:a1:b6:a1:aa:59:c2:c3:1c:77: 68:dc:5d:e2:5e:4b:a2:22:f4:03:6f:0a:48:41:cb:bd:2e:b9: bc:38:dc:a2:a5:41:3c:28:e1:a2:f3:c4:8b:5d:fd:26:51:2f: a2:52:cb:4e:43:8e:a7:c7:ea:35:b8:3f:f1:2a:18:e9:58:87: c1:a2:15:26:54:c4:2d:98:a2:2a:71:37:30:79:7f:ce:69:48: ce:4d:e6:90:98:0e:20:3f:96:fe:53:8b:7b:d0:02:da:c3:76: 57:76:bf:24:62:43:d0:db:cf:b1:52:34:17:65:87:a1:53:4b: 06:82:62:ca:39:20:bc:4c:f9:2e:37:3d:ce:64:7b:26:58:e8: 07:c3:97:66:08:5d:58:79:94:32:09:f9:b4:cf:4e:a9:7c:50: ce:40:7a:dc:0f:80:fb:73:79:5b:bb:5b:d8:85:09:82:90:29: 32:1f:2c:38:82:da:bd:20:1c:e6:f4:d7:5c:00:a4:1f:a8:47: 03:25:f1:3d:24:da:f2:c9:cc:4e:03:43:79:2a:0a:52:7b:ac: 9e:9e:fc:35:f3:d5:69:96:26:91:26:08:44:12:e6:c8:97:c0: e6:4d:8f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26o7+LRbwcxjvBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YTdiMjYxNDYtZDNhYy00YjBiLWJmYzctMGE0M2ViZmU3ODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSzcbCVfsu7xS2gJd40sJ5huDPlhCxM/Rk3J EAF4y7Gbu1YIubjFiJWQjBI8oCznorVlG0Lx8IcsbnzqeYTy4Q06W5cGiq65ODlm c0DKGUDZnk54SW7H90qF2UoKMmvS22+5sbPGwW1tjupR3rpLzka3YiuEut9c2qFn 1G+TMpFiAj+r6BwMPucF+Uf4zILGzU5pvrVkt2xCXadTE0cJDNpF/+sCQojS2b8u XC4HEQaPA0QM5nSpPFdtat+UgH3VO528NH0mAuQ9QWcES8B0MaDPMbYGJ6sjJomX Z2qIJFtihhAtaUc5BiqxpZIGbO/BjKeDuYsxM691VxJu8CvIxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBBUeBYRDK442uKF1x+MuIDzAXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDhjZWQwNWEtYTU3OC0z MjQyLWE5N2QtMzg2ZGY1MWQ5ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3K7M7muKuVR7YZ8U15srOpxeQrHK4wfuOzYqG2oapZwsMcd2jcXeJe S6Ii9ANvCkhBy70uubw43KKlQTwo4aLzxItd/SZRL6JSy05DjqfH6jW4P/EqGOlY h8GiFSZUxC2YoipxNzB5f85pSM5N5pCYDiA/lv5Ti3vQAtrDdld2vyRiQ9Dbz7FS NBdlh6FTSwaCYso5ILxM+S43Pc5keyZY6AfDl2YIXVh5lDIJ+bTPTql8UM5AetwP gPtzeVu7W9iFCYKQKTIfLDiC2r0gHOb011wApB+oRwMl8T0k2vLJzE4DQ3kqClJ7 rJ6e/DXz1WmWJpEmCEQS5siXwOZNj2U= -----END CERTIFICATE-----Generated at Tue Jul 22 04:26:38 2025 by rpki-client