$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd9149ee-46bc-3b26-9f3f-6893f40ab509.roa File: dd9149ee-46bc-3b26-9f3f-6893f40ab509.roa (raw, json) Hash identifier: N0kSGkuXRv4tx4hhPfTvqawe3nzeMRqZEmkX4vvx5v8= Subject key identifier: FA:B5:35:52:09:E2:42:FA:CF:C2:45:41:0E:58:27:DD:44:4C:DA:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84117AD075818F15D323F140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd9149ee-46bc-3b26-9f3f-6893f40ab509.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.121.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7a:d0:75:81:8f:15:d3:23:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8ed3f43d-3beb-423f-a696-0b7b5a83ca18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d1:c8:4a:df:98:9d:ad:29:7d:20:ef:4c:ab: 1d:c4:36:30:7b:84:cd:dc:0c:98:48:ff:ef:16:27: bb:d6:92:b1:59:f0:27:b4:8d:68:39:db:ab:b5:6c: ae:6e:86:e5:35:db:9d:5e:ed:81:e6:1b:50:2f:ca: 68:51:ce:ff:28:69:49:2d:99:af:0b:c0:0e:88:67: 0c:28:62:57:36:a0:60:a0:c8:1a:b6:9e:f5:0d:b3: 2a:7a:c9:92:f4:12:df:49:d2:47:df:21:2f:88:14: 55:05:75:06:65:75:fa:07:73:fe:f6:d1:8c:ed:67: b0:79:d6:a0:77:0d:0b:66:4c:14:07:4f:0a:28:ff: 98:37:91:ae:42:67:d8:fb:ea:cf:f9:5d:fe:a0:82: 78:fb:2b:5d:cc:2f:f9:43:b8:c2:bc:29:d1:de:cf: 7a:6e:6d:57:65:2b:04:eb:35:d1:2d:36:88:39:d4: cf:9d:40:a9:d7:d0:36:3d:37:d0:e5:29:2c:f8:e3: d0:b5:14:27:af:2e:b8:c3:c9:f6:80:61:64:a5:74: 83:c1:c4:3e:62:f3:51:fd:58:61:d9:9c:12:20:5c: fc:c0:7f:67:f6:fd:4a:b6:2c:a3:44:7e:7e:18:59: 7b:c1:cb:04:19:e2:59:1f:a2:e0:fd:e6:4b:f8:02: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B5:35:52:09:E2:42:FA:CF:C2:45:41:0E:58:27:DD:44:4C:DA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd9149ee-46bc-3b26-9f3f-6893f40ab509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:99:73:2e:19:92:46:75:5d:36:36:75:a2:8e:8b:48:a4:80: 14:91:52:ce:fc:5f:3d:08:fe:2f:a4:06:f3:f0:a5:57:f9:41: 00:a9:cf:78:46:df:a7:bf:06:a8:4d:e1:b5:04:ae:a6:a6:4f: 87:b6:19:df:b2:dd:6f:a0:9a:1e:6d:96:05:82:2a:9e:b5:0a: 34:97:10:e8:fd:c9:19:9a:b4:5c:15:2d:31:4d:5f:c5:b4:d0: 0d:c1:d6:16:da:a0:17:c1:fb:2a:a8:5d:63:82:58:c0:9f:35: f1:9f:6b:a3:17:68:98:7a:a2:9e:30:ff:1e:7f:3d:b4:62:85: ca:55:be:1f:05:0e:38:dd:17:11:6a:a1:a8:9c:19:9c:ba:6f: 57:3a:13:f5:2c:e0:aa:74:b7:ad:ff:9d:63:05:ca:f6:1c:c2: d4:a2:74:3b:1d:32:ab:95:35:d9:a9:2b:00:34:84:e6:60:59: 4d:c1:b1:95:fb:8b:5c:c4:88:6c:5a:f6:24:33:5a:c3:9a:be: de:f1:02:9f:1d:56:3b:1d:1d:53:9d:a3:40:a8:9b:63:e0:f9: dd:0f:27:54:71:a3:bb:fd:42:bc:d2:08:5c:c8:5d:75:95:4f: b9:04:d1:47:0c:a4:fa:f0:3e:46:6f:88:be:42:eb:18:66:3f: c9:69:d2:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXrQdYGPFdMj8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGVkM2Y0M2QtM2JlYi00MjNmLWE2OTYtMGI3YjVhODNjYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNHISt+Yna0pfSDvTKsdxDYwe4TN3AyYSP/v Fie71pKxWfAntI1oOdurtWyuboblNdudXu2B5htQL8poUc7/KGlJLZmvC8AOiGcM KGJXNqBgoMgatp71DbMqesmS9BLfSdJH3yEviBRVBXUGZXX6B3P+9tGM7Wewedag dw0LZkwUB08KKP+YN5GuQmfY++rP+V3+oIJ4+ytdzC/5Q7jCvCnR3s96bm1XZSsE 6zXRLTaIOdTPnUCp19A2PTfQ5Sks+OPQtRQnry64w8n2gGFkpXSDwcQ+YvNR/Vhh 2ZwSIFz8wH9n9v1KtiyjRH5+GFl7wcsEGeJZH6Lg/eZL+ALOTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq1NVIJ4kL6z8JFQQ5YJ91ETNqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ5MTQ5ZWUtNDZiYy0z YjI2LTlmM2YtNjg5M2Y0MGFiNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+Zcy4ZkkZ1XTY2daKOi0ikgBSRUs78Xz0I/i+kBvPwpVf5QQCpz3hG 36e/BqhN4bUErqamT4e2Gd+y3W+gmh5tlgWCKp61CjSXEOj9yRmatFwVLTFNX8W0 0A3B1hbaoBfB+yqoXWOCWMCfNfGfa6MXaJh6op4w/x5/PbRihcpVvh8FDjjdFxFq oaicGZy6b1c6E/Us4Kp0t63/nWMFyvYcwtSidDsdMquVNdmpKwA0hOZgWU3BsZX7 i1zEiGxa9iQzWsOavt7xAp8dVjsdHVOdo0Com2Pg+d0PJ1Rxo7v9QrzSCFzIXXWV T7kE0UcMpPrwPkZviL5C6xhmP8lp0t0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:18 2025 by rpki-client