$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6f26919-914a-3032-9b3f-a59e06ef4c8c.roa File: e6f26919-914a-3032-9b3f-a59e06ef4c8c.roa (raw, json) Hash identifier: 3tUhDl8IIyzIMobermq9Ny9ytxlU1cdNMyQn2ed8qm4= Subject key identifier: 75:0F:D5:B0:10:35:B2:FC:15:D2:0F:78:DB:A8:84:B4:20:E4:2B:09 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBCAAA42A8C08B4EEA7C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6f26919-914a-3032-9b3f-a59e06ef4c8c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.81.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ca:aa:42:a8:c0:8b:4e:ea:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0657ce94-0913-4016-8de9-5480c6da2c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:09:b7:94:3e:52:2e:d5:de:ae:b7:9a:fa:64: f0:5c:86:57:10:cf:a7:56:fb:88:86:2a:48:db:bd: fb:8b:7e:3a:14:d7:9c:d3:38:ca:38:58:ea:90:28: 61:a7:90:2e:5d:c4:ff:5a:c2:51:b7:37:c6:fa:2e: ad:a5:23:91:bd:6a:07:02:a5:89:7f:27:2b:ea:2a: 5c:65:fa:22:3f:ed:c0:ae:fa:8b:d2:91:62:9a:b9: 39:38:8e:ec:16:25:aa:be:13:09:3a:76:60:1a:d7: 42:67:e9:3f:f7:01:33:20:8d:16:2e:a9:80:03:b7: f8:8e:37:2d:1d:da:0b:0f:dc:23:05:a2:b9:69:8e: a0:d6:8f:05:cc:d9:0b:b0:51:89:b2:d9:67:49:ad: 57:18:dc:49:f1:c1:b5:64:43:e4:39:35:82:7e:44: 96:29:41:32:e8:4d:24:e4:3e:53:cb:fe:33:a9:b4: d2:61:f3:03:c5:8d:6e:79:fa:33:ef:83:44:f6:95: 00:5b:01:54:84:9b:0f:7e:38:5b:9f:b1:eb:4f:9f: 77:3c:cb:9e:74:66:42:bb:ce:1d:30:b6:20:e7:08: 0a:5f:0f:31:26:c5:a1:69:57:a9:3f:81:bd:3c:8f: d9:b5:2d:11:22:18:6e:93:8f:87:54:dc:d0:00:79: 5b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0F:D5:B0:10:35:B2:FC:15:D2:0F:78:DB:A8:84:B4:20:E4:2B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6f26919-914a-3032-9b3f-a59e06ef4c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.81.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:af:61:94:17:45:5f:67:cd:7a:b7:e3:68:c0:48:9f:97:d5: 28:48:b5:17:37:da:5d:b6:85:7c:05:f9:d6:84:c0:6f:97:ef: e9:7b:bb:f4:ef:12:0f:fd:a5:81:f6:21:20:1d:5f:49:12:66: 23:5e:fc:59:1c:85:48:3e:8d:40:26:83:57:05:a0:ec:a5:ed: 70:8a:0c:37:11:73:80:c0:db:70:2c:04:74:6f:04:c8:de:9d: e2:86:de:23:c5:27:50:15:de:68:6c:1b:ea:1e:f5:a7:cf:6d: b2:95:1d:61:d4:33:e4:90:ec:89:6b:ac:89:96:b8:a8:e0:85: ef:45:33:b9:28:73:95:00:83:e1:a8:c2:0c:7c:94:99:42:bf: b4:13:92:da:c0:53:22:d3:55:98:97:23:7e:71:7a:50:2b:a2: 4b:08:83:42:7f:1f:0a:1f:c6:71:4f:a1:eb:97:ab:1b:77:bf: 13:9d:27:67:c7:c1:82:71:fa:b4:9e:74:04:26:0d:3e:5a:16: 20:b6:0c:6d:ff:f7:37:1f:bc:99:95:69:a0:1b:c6:1a:93:ec: 99:70:2e:20:84:bb:64:79:f6:45:e8:83:8e:6b:67:94:6a:e1: 37:3a:94:af:e1:6d:aa:7e:d7:07:b6:42:ae:78:4a:06:86:ca: 07:19:7a:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28qqQqjAi07qfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MDY1N2NlOTQtMDkxMy00MDE2LThkZTktNTQ4MGM2ZGEyYzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwm3lD5SLtXerrea+mTwXIZXEM+nVvuIhipI 2737i346FNec0zjKOFjqkChhp5AuXcT/WsJRtzfG+i6tpSORvWoHAqWJfycr6ipc ZfoiP+3ArvqL0pFimrk5OI7sFiWqvhMJOnZgGtdCZ+k/9wEzII0WLqmAA7f4jjct HdoLD9wjBaK5aY6g1o8FzNkLsFGJstlnSa1XGNxJ8cG1ZEPkOTWCfkSWKUEy6E0k 5D5Ty/4zqbTSYfMDxY1uefoz74NE9pUAWwFUhJsPfjhbn7HrT593PMuedGZCu84d MLYg5wgKXw8xJsWhaVepP4G9PI/ZtS0RIhhuk4+HVNzQAHlbfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUP1bAQNbL8FdIPeNuohLQg5CsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTZmMjY5MTktOTE0YS0z MDMyLTliM2YtYTU5ZTA2ZWY0YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACivYZQXRV9nzXq342jASJ+X1ShItRc32l22hXwF+daEwG+X7+l7u/Tv Eg/9pYH2ISAdX0kSZiNe/FkchUg+jUAmg1cFoOyl7XCKDDcRc4DA23AsBHRvBMje neKG3iPFJ1AV3mhsG+oe9afPbbKVHWHUM+SQ7IlrrImWuKjghe9FM7koc5UAg+Go wgx8lJlCv7QTktrAUyLTVZiXI35xelAroksIg0J/HwofxnFPoeuXqxt3vxOdJ2fH wYJx+rSedAQmDT5aFiC2DG3/9zcfvJmVaaAbxhqT7JlwLiCEu2R59kXog45rZ5Rq 4Tc6lK/hbap+1we2Qq54SgaGygcZeuo= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:06 2025 by rpki-client