$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8a6f764-8d13-33ef-8862-36bada8b9865.roa File: e8a6f764-8d13-33ef-8862-36bada8b9865.roa (raw, json) Hash identifier: lFr544Sb5AafBtudFKfi8eQ/kK0+Crr6QdH8aRLwqMI= Subject key identifier: B3:02:8B:92:FC:21:3E:D6:22:61:18:B1:7A:DD:77:77:1E:83:85:94 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA1254BAC5ED05AF38CC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8a6f764-8d13-33ef-8862-36bada8b9865.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.125.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a1:25:4b:ac:5e:d0:5a:f3:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=6ce9a7d5-6e85-4046-b516-e08977c8f4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:84:e1:b7:02:50:8a:00:20:78:1a:7f:7e:73: c0:ac:ab:fd:06:96:ac:bf:7c:c7:f9:7f:5b:be:ff: 42:fe:64:c1:97:82:ef:34:6b:a4:88:5f:46:b4:6b: d2:81:6d:10:3b:8d:83:37:75:3f:36:c6:92:ef:7f: 15:6c:eb:b7:f4:66:f7:e1:d7:fd:cd:21:eb:01:a1: 02:e1:27:96:f2:a6:74:96:ee:c9:09:98:16:57:23: a5:03:65:75:6e:d7:f3:2b:79:7e:eb:29:cd:79:37: fb:e0:c6:ad:cf:26:bd:85:5f:44:25:28:5d:03:bd: 32:d9:de:ef:b3:0b:5c:b0:db:05:7a:13:a1:9d:44: 6c:a3:a6:e0:49:42:a0:4a:9f:03:5f:cf:05:dd:dc: 29:12:01:e6:94:45:7a:7f:37:ac:ce:6c:f5:f6:f9: 79:39:20:53:73:8f:e6:d9:a9:30:12:d4:77:85:0b: 67:54:57:18:ee:36:c7:25:38:38:18:7f:42:e1:81: e1:b7:40:52:3c:87:f1:c7:f7:1e:c1:bc:d8:95:55: a0:5c:d2:25:17:7d:1f:e8:3a:fb:8f:a0:0b:69:dd: 70:1c:0f:65:98:c5:ee:c3:72:4d:3e:b6:25:a8:87: ca:f9:cd:8a:ac:06:9d:17:01:2f:3f:59:fc:49:35: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:02:8B:92:FC:21:3E:D6:22:61:18:B1:7A:DD:77:77:1E:83:85:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8a6f764-8d13-33ef-8862-36bada8b9865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.125.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ba:7f:b1:45:7b:b1:67:9a:d3:39:73:3e:2e:9d:ec:b3:ec: c8:73:bd:6d:1d:34:2d:ff:e3:8c:c6:c7:18:66:eb:69:c5:6b: 57:d6:81:39:c3:a5:a4:82:22:a8:11:f1:e9:21:37:6d:09:9f: da:a0:63:fe:14:5d:6a:42:46:7a:a8:45:51:44:48:27:f0:9e: a1:8f:1d:d8:21:5d:d0:2e:bd:f4:00:a3:21:1d:6a:f7:7c:d2: 81:1e:c4:3b:90:c7:21:60:d5:75:87:1e:1f:84:fb:cd:89:82: bf:9e:49:cd:36:2f:72:6c:9a:b0:9f:b6:86:be:34:40:4c:35: 75:1b:8d:60:58:f9:cd:31:94:b1:54:64:da:2f:6e:a2:54:e0: 0a:60:b8:be:98:8d:0a:42:09:f1:6f:95:7e:de:77:78:4d:69: 6b:13:e8:37:e3:32:b0:e8:60:6b:69:25:41:65:70:10:58:9e: 36:e6:92:b9:33:3c:ae:e3:b0:24:84:5a:ba:bd:da:f5:cb:0e: e5:01:d0:d7:ca:f5:f6:7c:89:00:dd:17:35:7a:89:72:f2:e1: ad:f7:58:f5:68:d5:77:2f:bf:a1:02:81:94:82:64:d5:f5:86: c0:e3:14:c2:a9:97:59:30:fc:71:2d:3b:41:40:ec:9f:12:c8: 56:d7:8f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26ElS6xe0FrzjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NmNlOWE3ZDUtNmU4NS00MDQ2LWI1MTYtZTA4OTc3YzhmNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4ThtwJQigAgeBp/fnPArKv9Bpasv3zH+X9b vv9C/mTBl4LvNGukiF9GtGvSgW0QO42DN3U/NsaS738VbOu39Gb34df9zSHrAaEC 4SeW8qZ0lu7JCZgWVyOlA2V1btfzK3l+6ynNeTf74Matzya9hV9EJShdA70y2d7v swtcsNsFehOhnURso6bgSUKgSp8DX88F3dwpEgHmlEV6fzeszmz19vl5OSBTc4/m 2akwEtR3hQtnVFcY7jbHJTg4GH9C4YHht0BSPIfxx/cewbzYlVWgXNIlF30f6Dr7 j6ALad1wHA9lmMXuw3JNPrYlqIfK+c2KrAadFwEvP1n8STW45wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMCi5L8IT7WImEYsXrdd3ceg4WUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZThhNmY3NjQtOGQxMy0z M2VmLTg4NjItMzZiYWRhOGI5ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS6f7FFe7FnmtM5cz4uneyz7MhzvW0dNC3/44zGxxhm62nFa1fWgTnD paSCIqgR8ekhN20Jn9qgY/4UXWpCRnqoRVFESCfwnqGPHdghXdAuvfQAoyEdavd8 0oEexDuQxyFg1XWHHh+E+82Jgr+eSc02L3JsmrCftoa+NEBMNXUbjWBY+c0xlLFU ZNovbqJU4ApguL6YjQpCCfFvlX7ed3hNaWsT6DfjMrDoYGtpJUFlcBBYnjbmkrkz PK7jsCSEWrq92vXLDuUB0NfK9fZ8iQDdFzV6iXLy4a33WPVo1Xcvv6ECgZSCZNX1 hsDjFMKpl1kw/HEtO0FA7J8SyFbXj/A= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:32 2025 by rpki-client