$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa File: e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa (raw, json) Hash identifier: 8TIbAI630m4nusVi6fREI7FbXl6w1dp5fXhgTRUalTM= Subject key identifier: B8:89:36:A4:2C:29:47:BC:A0:90:23:0A:C6:BD:7E:76:7E:E9:32:22 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC29E49CE102160E4D780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.66.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c2:9e:49:ce:10:21:60:e4:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=cb9a60a1-b1d9-410a-8e6d-23ecf7f3e962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:40:b8:cb:7b:8d:e3:4e:ea:d9:4f:59:d7:73: bb:5b:7b:f7:4e:1e:63:b2:f2:1e:9a:76:b1:51:6d: 25:62:4c:c0:e5:b9:a3:2f:34:5c:8a:12:cc:26:8d: 7a:1e:5c:7c:25:e8:0b:7d:ba:29:c3:a0:45:08:2c: c5:45:42:87:c8:66:55:99:7d:78:b0:c1:15:b6:8f: 0b:3d:5b:f6:b7:d9:c4:ae:be:32:28:a0:a3:93:60: 08:41:ec:9b:06:e2:a2:70:e7:a2:25:21:d8:fb:74: 09:af:bd:40:69:3f:f1:e4:07:89:e5:6d:bb:c3:88: b5:17:6c:56:70:3f:c7:05:6b:62:8e:58:69:da:92: 35:f0:63:c7:ae:40:71:2a:7d:49:ec:c0:43:cb:99: 0d:d7:2c:1b:fa:39:28:ac:62:61:14:62:ac:8c:c2: b2:7a:e2:4e:e4:50:34:7b:b2:c8:b7:36:d5:28:08: d1:79:c3:69:fc:b7:68:ef:65:46:15:ef:63:b2:b3: 78:42:23:01:f5:72:bb:5b:06:9b:8f:8f:37:83:3c: 6b:70:13:9a:3e:2c:8a:36:03:32:91:2d:66:fd:02: 77:27:75:b2:3f:a9:18:0f:7d:36:ca:1d:ca:48:dc: eb:7f:0c:39:e8:da:77:74:d4:36:50:a0:9a:58:c5: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:89:36:A4:2C:29:47:BC:A0:90:23:0A:C6:BD:7E:76:7E:E9:32:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:50:ca:29:0b:3e:ac:c1:cb:d5:fe:45:ae:92:1a:42:8d:db: d9:95:ba:af:95:85:75:82:b2:41:ae:7c:3a:70:ac:be:ca:b1: 3c:ba:96:fa:94:2f:f8:b1:6c:4c:fd:c7:af:2d:50:cb:0e:b5: e6:71:86:b3:61:ed:ad:48:3f:f0:4c:86:e9:34:9f:4c:b7:f1: 73:c2:0c:c5:ac:cd:8e:eb:b9:b7:ba:ae:85:d8:7d:eb:b9:c5: a1:0a:c8:52:4b:30:03:fd:32:09:51:06:94:96:ff:4a:35:da: e0:18:d2:92:70:34:30:18:36:66:26:94:fa:60:ba:b6:c9:8d: 9d:e7:01:6d:4b:b2:24:dc:e0:dd:4a:bc:33:3b:58:3c:fc:39: d8:09:70:6f:19:56:65:2c:9d:11:8c:bd:21:47:57:6a:9b:a9: 7f:02:fa:81:c3:99:b4:a7:fa:a2:67:6d:d3:1e:ae:d3:84:db: 6b:45:43:c7:f4:c8:f9:5b:99:b1:af:fb:52:fa:80:ad:9f:82: 90:0f:c7:7d:3e:d5:2a:96:7e:80:c1:6b:26:3f:b2:08:88:d2: e8:b2:7d:68:97:18:a3:5d:52:cf:fc:86:c2:7d:da:21:eb:bd: 31:6e:e1:14:bd:06:43:b4:50:94:a6:b3:89:f3:92:32:f6:6d: fd:0b:ae:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28KeSc4QIWDk14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2I5YTYwYTEtYjFkOS00MTBhLThlNmQtMjNlY2Y3ZjNlOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEC4y3uN407q2U9Z13O7W3v3Th5jsvIemnax UW0lYkzA5bmjLzRcihLMJo16Hlx8JegLfbopw6BFCCzFRUKHyGZVmX14sMEVto8L PVv2t9nErr4yKKCjk2AIQeybBuKicOeiJSHY+3QJr71AaT/x5AeJ5W27w4i1F2xW cD/HBWtijlhp2pI18GPHrkBxKn1J7MBDy5kN1ywb+jkorGJhFGKsjMKyeuJO5FA0 e7LItzbVKAjRecNp/Ldo72VGFe9jsrN4QiMB9XK7Wwabj483gzxrcBOaPiyKNgMy kS1m/QJ3J3WyP6kYD302yh3KSNzrfww56Np3dNQ2UKCaWMUE9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiJNqQsKUe8oJAjCsa9fnZ+6TIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTFiYWY4MTAtYzFlMC0z YzMzLWE4YzgtNDExYjM4MjFlMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlQyikLPqzBy9X+Ra6SGkKN29mVuq+VhXWCskGufDpwrL7KsTy6lvqU L/ixbEz9x68tUMsOteZxhrNh7a1IP/BMhuk0n0y38XPCDMWszY7rube6roXYfeu5 xaEKyFJLMAP9MglRBpSW/0o12uAY0pJwNDAYNmYmlPpgurbJjZ3nAW1LsiTc4N1K vDM7WDz8OdgJcG8ZVmUsnRGMvSFHV2qbqX8C+oHDmbSn+qJnbdMertOE22tFQ8f0 yPlbmbGv+1L6gK2fgpAPx30+1SqWfoDBayY/sgiI0uiyfWiXGKNdUs/8hsJ92iHr vTFu4RS9BkO0UJSms4nzkjL2bf0LrkQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:59 2025 by rpki-client