$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d92e1755-baf5-3d16-a712-2fa67a4a6103.roa File: d92e1755-baf5-3d16-a712-2fa67a4a6103.roa (raw, json) Hash identifier: ScYZb+mETDXHSrxBb/hCJq1kgdAIiWG6ew2htH3QuHU= Subject key identifier: 0F:B1:BD:6B:24:F3:F5:36:FB:5E:40:49:9E:63:93:C0:31:44:CF:D8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8411759C8034E6463581A860 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d92e1755-baf5-3d16-a712-2fa67a4a6103.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.118.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:75:9c:80:34:e6:46:35:81:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=76ae38e1-7289-4e57-a9a8-502f323871e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:7e:d1:7a:41:14:48:89:a2:bc:17:66:ef: 82:66:34:5e:59:84:70:66:4f:4a:eb:72:38:9f:35: 4d:6d:e7:4e:26:9c:55:86:e0:54:63:a7:28:2f:64: 00:80:56:c2:bd:68:1b:68:a0:b8:0e:06:f9:d9:3d: 40:d7:39:d9:2b:23:9f:1c:cc:80:c9:90:9e:c9:31: 63:70:3b:02:bb:70:d7:81:2a:1d:40:1b:45:49:4c: f2:2d:58:93:11:1d:ec:23:a2:fb:d9:68:f3:23:a6: a9:b5:5e:ae:a8:ab:ed:4a:f8:0a:b9:6a:eb:c6:98: 32:63:05:d5:f1:cf:ba:b4:53:9e:19:fc:9f:54:89: 94:e2:8e:a9:54:0b:81:e9:50:17:94:07:b3:8a:29: c6:88:ca:ba:70:9a:50:7e:a0:95:ac:a8:d5:ff:30: 7e:1b:3d:6f:65:61:f5:7f:d0:8e:1a:cb:8f:49:b7: cc:3d:4a:af:ca:44:c1:9a:46:8c:52:82:87:f6:fd: 6d:87:46:cb:64:36:74:35:02:0f:33:95:1a:ff:a3: ad:11:7f:a6:9f:5c:08:44:c1:13:22:57:c9:a3:d1: 12:c0:7d:84:67:e9:b6:61:fd:a5:7f:1e:63:57:a7: bd:1a:69:44:60:da:f3:4b:02:71:48:0a:78:6c:87: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B1:BD:6B:24:F3:F5:36:FB:5E:40:49:9E:63:93:C0:31:44:CF:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d92e1755-baf5-3d16-a712-2fa67a4a6103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:12:da:d3:9f:66:b0:be:e8:bc:63:30:cf:f7:30:2b:cb:30: c9:0c:43:eb:d7:2d:f4:34:ca:3e:c2:6f:74:29:e2:2f:e7:f1: 49:f7:e8:b4:92:f9:97:0d:67:ac:9a:b1:05:e5:9e:7e:82:56: a2:04:9d:d7:4a:fc:c0:c0:8d:cd:fb:42:e3:6a:19:11:8a:42: cf:30:4c:79:70:e8:53:18:31:05:80:0c:8b:7e:7a:a1:3d:25: 50:25:d6:95:75:08:46:f2:4b:f0:c3:fb:c0:c4:2e:4b:62:25: d4:f1:04:d5:8d:fa:90:ee:b7:25:b8:1a:8e:39:d8:3c:cd:32: be:47:b0:20:ca:6d:4a:67:64:92:c9:7b:d3:7e:ef:87:81:f4: 11:c7:6a:ee:b4:9d:e8:81:d6:c1:2f:fd:28:13:62:14:77:f1: 53:c4:5c:c2:e0:59:86:51:65:b2:85:20:bf:c3:ec:22:1e:9b: 47:29:ed:27:01:51:f4:3c:65:68:18:07:80:d7:fa:3f:c8:48: 20:7f:80:f2:78:0a:c0:3c:30:cb:f8:da:02:26:b0:97:11:e5: 37:d7:bd:aa:e8:d5:1d:53:d7:f5:7c:a2:62:35:c3:1b:11:47: d4:07:e2:53:54:cc:aa:8f:53:e0:6f:61:3b:56:07:11:24:b5: 7e:28:ff:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXWcgDTmRjWBqGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzZhZTM4ZTEtNzI4OS00ZTU3LWE5YTgtNTAyZjMyMzg3MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Z+0XpBFEiJorwXZu+CZjReWYRwZk9K63I4 nzVNbedOJpxVhuBUY6coL2QAgFbCvWgbaKC4Dgb52T1A1znZKyOfHMyAyZCeyTFj cDsCu3DXgSodQBtFSUzyLViTER3sI6L72WjzI6aptV6uqKvtSvgKuWrrxpgyYwXV 8c+6tFOeGfyfVImU4o6pVAuB6VAXlAeziinGiMq6cJpQfqCVrKjV/zB+Gz1vZWH1 f9COGsuPSbfMPUqvykTBmkaMUoKH9v1th0bLZDZ0NQIPM5Ua/6OtEX+mn1wIRMET IlfJo9ESwH2EZ+m2Yf2lfx5jV6e9GmlEYNrzSwJxSAp4bIcX4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+xvWsk8/U2+15ASZ5jk8AxRM/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDkyZTE3NTUtYmFmNS0z ZDE2LWE3MTItMmZhNjdhNGE2MTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBInb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJES2tOfZrC+6LxjMM/3MCvLMMkMQ+vXLfQ0yj7Cb3Qp4i/n8Un36LSS +ZcNZ6yasQXlnn6CVqIEnddK/MDAjc37QuNqGRGKQs8wTHlw6FMYMQWADIt+eqE9 JVAl1pV1CEbyS/DD+8DELktiJdTxBNWN+pDutyW4Go452DzNMr5HsCDKbUpnZJLJ e9N+74eB9BHHau60neiB1sEv/SgTYhR38VPEXMLgWYZRZbKFIL/D7CIem0cp7ScB UfQ8ZWgYB4DX+j/ISCB/gPJ4CsA8MMv42gImsJcR5TfXvaro1R1T1/V8omI1wxsR R9QH4lNUzKqPU+BvYTtWBxEktX4o/yE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:23 2025 by rpki-client