$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db1ff775-9fb5-3d63-ac92-f6b5171133ed.roa File: db1ff775-9fb5-3d63-ac92-f6b5171133ed.roa (raw, json) Hash identifier: 5YFPR5baoDJCJ5Iu8wVbKXqVxGFYUrGk7PdRfGA710o= Subject key identifier: 8C:29:68:6F:FC:C1:32:82:67:94:C4:9E:BF:19:A4:67:34:7A:81:93 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE818612554EA2636AD20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db1ff775-9fb5-3d63-ac92-f6b5171133ed.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.72.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e8:18:61:25:54:ea:26:36:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=f063d526-0bc1-4bce-b410-946bff90eca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:16:7e:7c:2d:40:8c:c7:c2:1c:19:d7:ce: 0e:8a:64:72:63:81:b7:c6:68:b9:af:e8:2e:17:6f: 94:9c:d9:03:84:34:eb:11:39:6b:a6:bf:c3:73:aa: 19:9f:41:06:e7:8d:37:30:d5:8c:f2:8c:b3:c7:67: 80:ae:dc:05:b0:c0:50:50:43:ae:9a:74:6b:2b:1e: f2:e6:2e:2b:ef:e2:15:c6:5d:c6:83:97:04:e0:5b: d0:12:38:1d:70:c1:35:7f:fd:c0:0f:91:5e:4f:57: bb:15:aa:49:1f:ab:05:ab:ba:df:fa:3c:a9:b6:c8: a4:0f:c8:93:02:f8:e8:b8:91:92:99:e5:f2:91:ea: f8:29:08:1f:37:90:31:36:45:87:1e:ab:5e:44:e3: 7d:20:2c:b5:94:96:e1:23:b6:99:66:de:8a:d2:4f: b9:b1:8b:13:59:df:3d:f7:fd:34:06:14:90:12:e8: e3:c3:74:0c:58:f1:57:cb:1d:c3:c8:64:6a:30:d4: 32:5c:81:d2:b4:d0:07:59:a5:1d:e2:ea:9d:08:2d: c9:c9:5b:47:5c:70:09:95:3d:6b:4e:91:0a:0b:dc: 61:13:ef:0c:e3:30:8d:aa:48:39:e2:1f:11:71:46: 42:9f:d3:4d:32:16:11:79:de:e5:c0:19:20:0d:e2: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:29:68:6F:FC:C1:32:82:67:94:C4:9E:BF:19:A4:67:34:7A:81:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db1ff775-9fb5-3d63-ac92-f6b5171133ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:de:c3:e0:d1:d9:f5:03:ff:40:76:aa:97:a6:89:1e:d4:ba: 2f:6a:bc:f8:ff:07:b6:cd:d7:2f:24:29:ce:3a:4b:c9:2b:cb: 24:8f:51:b6:76:cb:a4:2d:d0:54:ee:85:01:35:aa:fc:4e:fd: 30:23:14:fd:1a:e1:f6:65:44:22:a7:7a:71:c7:e2:67:9c:3e: 91:b9:ef:10:4a:c9:c8:46:ab:06:76:ee:59:ff:7e:6b:6d:5e: 19:62:72:13:ab:7f:02:81:4d:a7:bf:3c:85:0d:1e:84:f0:ee: 9f:0f:a9:d0:32:dc:97:ae:b0:f7:4b:1b:a2:67:7f:51:18:03: b4:7b:18:ce:b3:4a:0e:4a:d4:35:e8:70:26:de:70:c2:26:7a: 1e:e4:55:88:7d:fe:bc:6a:25:f2:38:63:f0:e2:5c:d5:c1:7b: 41:05:66:4d:01:78:6c:88:3b:a0:7e:04:ca:44:1f:d3:35:61: 1a:2a:e9:b1:ce:da:02:b3:18:37:ca:20:bb:ae:c4:6a:a5:12: 43:ad:ab:78:5c:75:1e:d8:7a:17:3b:7d:2b:6c:a4:79:ae:21: 69:d9:f3:41:1b:5e:ab:ff:5e:78:e4:45:d4:11:e8:fa:e6:51: 36:60:e9:00:a1:3b:b5:fa:17:4e:4b:5b:51:6c:f4:d6:c3:b0: 51:7a:ed:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+gYYSVU6iY2rSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjA2M2Q1MjYtMGJjMS00YmNlLWI0MTAtOTQ2YmZmOTBlY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovoWfnwtQIzHwhwZ184OimRyY4G3xmi5r+gu F2+UnNkDhDTrETlrpr/Dc6oZn0EG5403MNWM8oyzx2eArtwFsMBQUEOumnRrKx7y 5i4r7+IVxl3Gg5cE4FvQEjgdcME1f/3AD5FeT1e7FapJH6sFq7rf+jyptsikD8iT AvjouJGSmeXyker4KQgfN5AxNkWHHqteRON9ICy1lJbhI7aZZt6K0k+5sYsTWd89 9/00BhSQEujjw3QMWPFXyx3DyGRqMNQyXIHStNAHWaUd4uqdCC3JyVtHXHAJlT1r TpEKC9xhE+8M4zCNqkg54h8RcUZCn9NNMhYRed7lwBkgDeKJQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwpaG/8wTKCZ5TEnr8ZpGc0eoGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIxZmY3NzUtOWZiNS0z ZDYzLWFjOTItZjZiNTE3MTEzM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHew+DR2fUD/0B2qpemiR7Uui9qvPj/B7bN1y8kKc46S8kryySPUbZ2 y6Qt0FTuhQE1qvxO/TAjFP0a4fZlRCKnenHH4mecPpG57xBKychGqwZ27ln/fmtt XhlichOrfwKBTae/PIUNHoTw7p8PqdAy3JeusPdLG6Jnf1EYA7R7GM6zSg5K1DXo cCbecMImeh7kVYh9/rxqJfI4Y/DiXNXBe0EFZk0BeGyIO6B+BMpEH9M1YRoq6bHO 2gKzGDfKILuuxGqlEkOtq3hcdR7Yehc7fStspHmuIWnZ80EbXqv/XnjkRdQR6Prm UTZg6QChO7X6F05LW1Fs9NbDsFF67eE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:28 2025 by rpki-client