$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e327d900-2e67-3075-a7fa-9efc72e2b331.roa File: e327d900-2e67-3075-a7fa-9efc72e2b331.roa (raw, json) Hash identifier: ld4n3I6HetjQk7RWiRthZB8KADTtiECQ3aWGcRojpFs= Subject key identifier: D9:E7:59:1C:DE:84:44:7E:DC:46:35:2E:D6:F5:62:1A:17:1F:28:20 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEF55D67B8A5C9FB0EB40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e327d900-2e67-3075-a7fa-9efc72e2b331.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.88.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ef:55:d6:7b:8a:5c:9f:b0:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=39e0ba60-1aed-433f-b63e-6153ec376e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:c8:32:be:b0:ef:94:4c:cc:fd:0b:ac:07: ef:8a:6e:fe:c0:35:ad:bb:fa:5e:fa:42:79:d3:4e: 52:ef:b5:7a:b6:00:93:7b:a9:38:8d:c0:ee:2f:58: 29:7a:b6:96:f4:3d:0b:c2:b2:22:e3:21:02:18:28: a6:9a:9d:68:35:5d:17:14:72:51:9a:d7:2e:7d:a7: df:24:54:53:bb:a1:56:dd:1b:f0:3b:3e:a1:5e:02: 99:d4:9d:fe:44:d5:68:94:a8:16:b8:a8:d3:e3:9f: 46:5e:71:79:8b:62:94:a7:2e:2b:10:74:0f:95:e1: 3d:a2:c2:9f:f4:7a:d9:74:89:06:54:47:ed:bd:99: cb:20:a1:92:3e:b9:49:a9:e1:54:c3:62:fb:f3:87: 79:88:f9:66:7e:0e:99:78:44:8e:71:57:91:0e:44: 06:c1:76:f3:f4:16:95:e0:b2:e3:f2:12:6c:a1:92: 98:29:6e:e3:9b:db:a6:35:68:1b:49:a4:bb:de:5d: 98:57:ce:ae:0b:08:6b:ec:4a:4f:5e:d6:f4:fe:1e: 46:8a:94:8f:e5:a7:b0:57:0c:36:71:8c:e1:df:b9: 7d:e4:22:03:e8:1b:7a:a0:19:ea:70:7a:3b:fd:df: a1:5e:82:cd:b5:6a:aa:b4:0a:0d:bf:48:6c:cf:db: 75:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E7:59:1C:DE:84:44:7E:DC:46:35:2E:D6:F5:62:1A:17:1F:28:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e327d900-2e67-3075-a7fa-9efc72e2b331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:88:c4:cd:e0:ee:c1:81:84:02:b1:e7:f8:e2:80:9c:c4:a5: 99:23:85:7f:d5:fd:4d:f4:86:36:6d:06:e9:e6:94:01:b9:61: ec:a0:ee:0b:5f:8f:f2:2b:c8:fa:4b:59:a7:4f:67:69:71:c3: fb:8e:25:d4:df:bf:bf:5a:34:57:25:0e:c7:df:45:d5:27:f1: f7:58:ae:28:90:b0:b8:89:d6:cd:d9:66:48:0b:e1:07:60:de: 70:62:6d:b9:8b:16:14:63:2d:bf:cf:53:af:56:12:67:b1:97: 21:67:2e:91:81:42:ff:a3:c2:fc:c9:bb:a5:6a:c0:b8:3e:f3: 44:b9:10:8c:db:c2:cc:c5:c6:bd:12:c4:f6:83:a6:f1:d9:90: 23:33:6a:cc:2a:0e:90:21:1e:1b:86:b9:f8:7b:2d:c3:8c:60: 77:66:22:b9:df:43:4f:56:35:a0:30:b3:d8:51:f8:52:ff:cb: b0:41:78:95:b2:ec:16:13:4a:e6:48:1e:16:95:ea:95:85:70: 10:4b:41:43:04:24:70:a4:32:03:26:75:07:74:36:e8:29:4d: b9:65:bc:b9:19:50:0f:c9:a9:94:fd:9f:85:a7:f9:ac:cd:7d: 1c:9c:05:0e:20:1e:e0:de:25:2a:67:0a:26:98:22:a0:ed:2c: c2:93:ff:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+9V1nuKXJ+w60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MzllMGJhNjAtMWFlZC00MzNmLWI2M2UtNjE1M2VjMzc2ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70zIMr6w75RMzP0LrAfvim7+wDWtu/pe+kJ5 005S77V6tgCTe6k4jcDuL1gperaW9D0LwrIi4yECGCimmp1oNV0XFHJRmtcufaff JFRTu6FW3RvwOz6hXgKZ1J3+RNVolKgWuKjT459GXnF5i2KUpy4rEHQPleE9osKf 9HrZdIkGVEftvZnLIKGSPrlJqeFUw2L784d5iPlmfg6ZeESOcVeRDkQGwXbz9BaV 4LLj8hJsoZKYKW7jm9umNWgbSaS73l2YV86uCwhr7EpPXtb0/h5GipSP5aewVww2 cYzh37l95CID6Bt6oBnqcHo7/d+hXoLNtWqqtAoNv0hsz9t1MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnnWRzehER+3EY1Ltb1YhoXHyggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTMyN2Q5MDAtMmU2Ny0z MDc1LWE3ZmEtOWVmYzcyZTJiMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIliQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqIxM3g7sGBhAKx5/jigJzEpZkjhX/V/U30hjZtBunmlAG5Yeyg7gtf j/IryPpLWadPZ2lxw/uOJdTfv79aNFclDsffRdUn8fdYriiQsLiJ1s3ZZkgL4Qdg 3nBibbmLFhRjLb/PU69WEmexlyFnLpGBQv+jwvzJu6VqwLg+80S5EIzbwszFxr0S xPaDpvHZkCMzaswqDpAhHhuGufh7LcOMYHdmIrnfQ09WNaAws9hR+FL/y7BBeJWy 7BYTSuZIHhaV6pWFcBBLQUMEJHCkMgMmdQd0NugpTbllvLkZUA/JqZT9n4Wn+azN fRycBQ4gHuDeJSpnCiaYIqDtLMKT/1s= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:05 2025 by rpki-client