$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d98c9a81-525e-3ef7-95d5-cddf1384fa70.roa File: d98c9a81-525e-3ef7-95d5-cddf1384fa70.roa (raw, json) Hash identifier: 6XhYz/m8VUblPcwBJqnrOOdCgxiNnD4E0fCs94YsKxI= Subject key identifier: EB:34:3C:22:FF:8D:C2:27:DE:38:9C:4C:58:24:E5:EF:05:E2:10:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A87879F0AF4E7DEF82B8C9180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d98c9a81-525e-3ef7-95d5-cddf1384fa70.roa Signing time: Tue 15 Jul 2025 18:48:09 +0000 ROA not before: Tue 15 Jul 2025 18:48:09 +0000 ROA not after: Mon 13 Oct 2025 18:48:09 +0000 asID: 396982 IP address blocks: 34.13.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:87:9f:0a:f4:e7:de:f8:2b:8c:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 18:48:09 2025 GMT Not After : Oct 13 18:48:09 2025 GMT Subject: CN=bda488db-c505-48ac-89b4-96ae5ebcf536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:c3:ac:41:a3:09:5d:2f:a5:3b:3c:f6:90: b9:04:ce:48:04:3f:66:af:0d:e1:89:ff:98:e9:9b: a6:f2:8a:b0:e0:bc:3b:d9:72:85:a3:c2:ca:75:d2: 76:2b:36:78:2a:db:ed:03:3e:1a:14:90:5e:ee:45: e9:00:47:2e:91:a1:4a:f4:f7:c0:58:23:1e:23:89: ce:33:67:b9:30:4b:94:45:cf:fd:56:3f:46:cb:2c: 34:8f:8b:7f:7f:35:70:2b:ee:e6:f9:37:03:98:0f: e9:cf:a2:4f:ce:bc:63:eb:46:0e:fb:cd:7c:9a:31: 47:d0:5b:19:c0:ee:c2:90:89:01:b9:d1:d7:3f:d3: f3:7a:08:87:4d:e4:9c:55:81:42:9c:b9:d8:6f:1a: 7e:2d:57:3d:ad:8e:84:a3:9c:81:7b:7e:49:00:bf: 0b:04:ac:f1:d7:53:55:13:fd:73:93:06:4f:9c:c4: 5a:02:3d:b6:73:7b:77:fd:4d:cc:8a:e7:b4:57:e8: 55:2c:36:c9:7e:5e:3b:d7:8c:a7:03:ed:88:9c:39: 7c:88:fc:1e:4d:a1:27:6a:b7:68:e7:fb:26:c7:99: 9c:b0:51:0d:ce:51:9b:ed:5a:41:67:a0:35:10:a5: e9:54:83:56:09:85:be:8c:ce:31:b2:6d:f1:77:97: f1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:34:3C:22:FF:8D:C2:27:DE:38:9C:4C:58:24:E5:EF:05:E2:10:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d98c9a81-525e-3ef7-95d5-cddf1384fa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e5:3c:18:2e:a2:8d:83:09:dc:b9:58:32:53:78:f8:e7:6a: 67:72:23:1b:6c:32:dd:57:7e:44:80:24:b2:71:e2:80:99:d8: 6d:22:27:bc:e9:fd:e2:e6:34:7d:a6:ff:29:da:75:e2:3a:5b: 9c:7c:7d:8d:16:2a:63:00:9b:3f:cc:97:3b:32:f2:f6:68:57: 4a:99:32:5f:43:79:1f:7c:e1:39:78:20:64:35:70:e4:85:86: bb:8d:c7:8a:04:a7:06:0e:bf:32:d2:1c:53:be:33:81:47:9e: 6e:80:e0:ed:47:24:b4:19:e3:5f:b2:15:0d:47:cb:56:b5:5b: 58:34:22:d4:0b:fb:62:bb:f3:f8:4e:a1:ad:3f:99:a3:f6:f6: 68:7b:91:97:b9:0a:8f:ed:56:f5:d6:80:3e:38:84:ab:ce:02: d8:d0:bc:ea:23:68:8a:7b:d3:ba:97:1c:f0:24:a1:c8:db:f8: 1b:84:c9:e0:2f:0b:d5:ab:21:b1:f9:5a:eb:24:08:37:16:13: c2:4c:94:0c:10:ca:a2:8f:9f:ce:9d:55:96:cb:31:d0:82:c1: 9b:ed:69:6a:9f:7b:fd:d4:87:a3:eb:57:da:05:00:b6:b7:2a: a1:e7:e1:05:75:1c:93:20:ba:1e:0f:cf:64:fe:f9:fc:8d:23: 58:af:b7:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHh58K9Ofe+CuMkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTE4NDgwOVoXDTI1MTAxMzE4NDgwOVowLzEtMCsGA1UEAxMk YmRhNDg4ZGItYzUwNS00OGFjLTg5YjQtOTZhZTVlYmNmNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+LDrEGjCV0vpTs89pC5BM5IBD9mrw3hif+Y 6Zum8oqw4Lw72XKFo8LKddJ2KzZ4KtvtAz4aFJBe7kXpAEcukaFK9PfAWCMeI4nO M2e5MEuURc/9Vj9Gyyw0j4t/fzVwK+7m+TcDmA/pz6JPzrxj60YO+818mjFH0FsZ wO7CkIkBudHXP9PzegiHTeScVYFCnLnYbxp+LVc9rY6Eo5yBe35JAL8LBKzx11NV E/1zkwZPnMRaAj22c3t3/U3Miue0V+hVLDbJfl4714ynA+2InDl8iPweTaEnardo 5/smx5mcsFENzlGb7VpBZ6A1EKXpVINWCYW+jM4xsm3xd5fxpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs0PCL/jcIn3jicTFgk5e8F4hCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDk4YzlhODEtNTI1ZS0z ZWY3LTk1ZDUtY2RkZjEzODRmYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIg1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDlPBguoo2DCdy5WDJTePjnamdyIxtsMt1XfkSAJLJx4oCZ2G0iJ7zp /eLmNH2m/ynadeI6W5x8fY0WKmMAmz/Mlzsy8vZoV0qZMl9DeR984Tl4IGQ1cOSF hruNx4oEpwYOvzLSHFO+M4FHnm6A4O1HJLQZ41+yFQ1Hy1a1W1g0ItQL+2K78/hO oa0/maP29mh7kZe5Co/tVvXWgD44hKvOAtjQvOojaIp707qXHPAkocjb+BuEyeAv C9WrIbH5WuskCDcWE8JMlAwQyqKPn86dVZbLMdCCwZvtaWqfe/3Uh6PrV9oFALa3 KqHn4QV1HJMguh4Pz2T++fyNI1ivt2Q= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:50 2025 by rpki-client