$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddc18a10-0e24-3e32-ac37-c19944b8673e.roa File: ddc18a10-0e24-3e32-ac37-c19944b8673e.roa (raw, json) Hash identifier: NEt93XVlUJeTKWWqBLyNqSdfrG+lk2Hm312PpJarbS8= Subject key identifier: 4F:B6:CD:32:B3:DD:93:DD:60:7B:E9:74:30:1C:5B:8F:5F:CC:15:EE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84122793389355A11ED9A5C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddc18a10-0e24-3e32-ac37-c19944b8673e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.116.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:27:93:38:93:55:a1:1e:d9:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=296123f7-eeef-4fab-84f5-6a395aad5cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3f:22:10:26:63:3f:7b:b2:82:a2:2c:34:3b: 7d:84:38:37:4e:19:9d:1a:60:d8:04:8d:88:8f:a5: 03:9c:f0:55:ba:75:e4:38:87:60:af:f6:93:e3:76: 23:f0:5d:51:7f:85:5d:58:6f:ed:21:c0:7e:d5:ec: 64:e2:38:6c:8b:a0:36:e7:aa:4b:a4:76:22:65:8b: e1:63:b1:21:40:15:f4:ce:ff:11:95:9c:b3:9b:ad: e8:09:dc:4e:81:ee:75:d9:79:9c:6f:ca:52:c8:24: 71:d1:d5:67:5a:e3:b6:77:2e:f8:b1:4c:c4:02:bc: 45:d9:41:86:1e:a8:bb:54:a2:64:3b:bf:e5:da:51: 62:2e:3a:98:0d:68:1c:fb:89:d0:c1:4d:26:f1:af: 08:17:14:b8:89:12:f7:d5:1b:4b:94:bc:6e:eb:ac: 1c:30:47:67:a0:96:8f:9d:88:be:da:c8:2f:06:b9: 2d:88:9e:7c:1f:3a:f6:2a:fa:d3:1b:d2:63:48:da: 45:58:5f:57:86:19:82:59:1e:5b:30:58:df:d0:4e: 67:2d:5f:a1:b9:61:a4:c8:22:d9:8f:a0:95:3a:48: 3a:16:1d:c0:c7:43:0b:c8:15:b6:af:26:9f:31:04: 65:a4:39:79:65:f3:ca:46:24:8a:b4:67:b6:fa:ca: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B6:CD:32:B3:DD:93:DD:60:7B:E9:74:30:1C:5B:8F:5F:CC:15:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddc18a10-0e24-3e32-ac37-c19944b8673e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.116.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:80:81:c4:d5:22:56:35:68:08:a1:63:53:22:23:9e:3b:34: b5:ec:1e:33:48:55:1c:ab:6c:88:04:b2:c1:fc:63:80:bd:d9: dc:39:80:47:c0:6f:98:7c:c5:28:54:bc:a9:08:23:00:f3:40: ce:90:56:40:41:3b:c1:c0:86:ff:63:f5:8d:8a:0e:7c:52:6d: 79:4e:d4:52:98:ef:0b:1c:82:e4:40:f4:31:8b:42:e8:d3:75: b3:c7:dc:49:81:1e:35:1c:89:90:51:f2:0d:85:1f:9f:07:12: 3b:cb:89:06:b4:0e:b0:9c:79:e4:8b:87:a5:e4:ae:a4:9a:ca: 65:ee:7c:24:07:28:db:b7:37:50:e7:de:05:49:f4:fc:72:aa: 6c:11:11:a8:51:8c:05:5f:25:14:25:b5:e7:bb:4f:e1:25:b1: 27:1c:50:5d:5a:d3:90:98:4e:92:ef:4c:39:b1:c0:c7:aa:80: 62:de:4e:2f:1e:06:6a:a7:bf:1d:1c:ba:3a:b1:25:e9:4a:1d: 77:5a:1e:76:25:fd:f1:72:d8:72:a7:32:34:4b:60:79:3a:22: 0c:1f:a1:e2:42:a5:9f:f7:d3:d3:87:ed:50:2d:ba:2d:29:03: 40:bb:11:b7:96:04:b0:fe:0a:bd:e8:6e:ec:fa:5d:fe:b0:9c: 7a:15:04:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEieTOJNVoR7ZpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Mjk2MTIzZjctZWVlZi00ZmFiLTg0ZjUtNmEzOTVhYWQ1Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz8iECZjP3uygqIsNDt9hDg3ThmdGmDYBI2I j6UDnPBVunXkOIdgr/aT43Yj8F1Rf4VdWG/tIcB+1exk4jhsi6A256pLpHYiZYvh Y7EhQBX0zv8RlZyzm63oCdxOge512Xmcb8pSyCRx0dVnWuO2dy74sUzEArxF2UGG Hqi7VKJkO7/l2lFiLjqYDWgc+4nQwU0m8a8IFxS4iRL31RtLlLxu66wcMEdnoJaP nYi+2sgvBrktiJ58Hzr2KvrTG9JjSNpFWF9XhhmCWR5bMFjf0E5nLV+huWGkyCLZ j6CVOkg6Fh3Ax0MLyBW2ryafMQRlpDl5ZfPKRiSKtGe2+som0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+2zTKz3ZPdYHvpdDAcW49fzBXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGRjMThhMTAtMGUyNC0z ZTMyLWFjMzctYzE5OTQ0Yjg2NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiAgcTVIlY1aAihY1MiI547NLXsHjNIVRyrbIgEssH8Y4C92dw5gEfA b5h8xShUvKkIIwDzQM6QVkBBO8HAhv9j9Y2KDnxSbXlO1FKY7wscguRA9DGLQujT dbPH3EmBHjUciZBR8g2FH58HEjvLiQa0DrCceeSLh6XkrqSaymXufCQHKNu3N1Dn 3gVJ9PxyqmwREahRjAVfJRQltee7T+ElsSccUF1a05CYTpLvTDmxwMeqgGLeTi8e Bmqnvx0cujqxJelKHXdaHnYl/fFy2HKnMjRLYHk6IgwfoeJCpZ/309OH7VAtui0p A0C7EbeWBLD+Cr3obuz6Xf6wnHoVBK8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:38:07 2025 by rpki-client