$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9b72023-681d-3e7e-bd4e-e675a1f89ed4.roa File: e9b72023-681d-3e7e-bd4e-e675a1f89ed4.roa (raw, json) Hash identifier: c9PrdKa5T7sm9lGCUuB4ENZz1gdMuUvc2rFyaD27b0s= Subject key identifier: FC:78:8C:33:67:2F:19:0A:00:6C:D6:07:55:A9:09:5F:E6:D3:EB:5E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBCE060A7958796CA7D880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9b72023-681d-3e7e-bd4e-e675a1f89ed4.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.68.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ce:06:0a:79:58:79:6c:a7:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0c5af2a8-93ab-4353-91b3-8ef439015197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e2:0c:6a:3a:09:37:0a:dc:d8:dc:4a:c0:84: 5c:11:4d:9d:f4:96:80:9f:a8:3f:a4:60:af:c5:d9: 9c:9c:d5:72:d7:16:75:fb:28:85:3c:e6:d5:31:5e: b4:6a:64:93:c0:3e:7d:5e:46:85:49:63:bb:ba:d1: 9a:67:98:ee:9b:22:37:54:fa:ad:82:98:80:09:e5: b4:13:16:3d:66:1b:79:27:c9:27:aa:e4:71:7a:0a: 90:6b:13:96:52:b5:da:31:d4:76:f5:2b:3f:e5:66: a2:2e:1f:b0:c8:00:62:a9:6f:4e:80:00:24:c7:d1: c5:26:c2:e6:87:e6:e2:72:8a:6d:be:a6:f1:f5:9e: f0:a3:97:b1:b9:7e:90:cc:b6:2d:cb:f6:3d:39:77: 08:f3:e6:24:b8:99:7d:1c:99:f7:a7:60:29:24:f4: 2d:b1:ac:b1:a1:10:2f:5f:49:41:84:a8:91:23:07: 86:5a:d9:2a:52:cf:5f:dc:b2:d9:c7:03:38:8f:0c: c3:6a:56:e7:6b:0f:94:e2:7f:ca:9d:0b:37:03:dd: f6:2b:8f:48:00:91:c5:bd:04:ec:6f:30:6c:e4:63: d4:4d:4e:eb:29:a2:e9:10:fc:7e:93:c8:bd:8f:42: 7c:a1:74:71:c8:9c:99:75:bf:e4:b5:8d:ae:10:26: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:78:8C:33:67:2F:19:0A:00:6C:D6:07:55:A9:09:5F:E6:D3:EB:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9b72023-681d-3e7e-bd4e-e675a1f89ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:78:c5:b9:68:18:b4:f6:e5:d5:33:f7:9d:be:d0:0a:f8:3b: 13:0c:c7:d2:1d:fd:36:4d:66:ce:79:cd:89:ae:49:b2:ad:44: 7a:c3:ec:d9:c5:65:60:06:0e:ed:e3:5a:75:bf:fa:9d:6f:04: 7a:28:30:9b:5b:46:c3:34:e9:ad:b1:0c:b1:8f:86:a4:36:88: d6:33:d5:b7:b7:78:ce:d8:f1:ef:f2:e9:51:80:63:e9:b3:23: 5a:53:27:7d:14:b9:6f:a9:10:b7:a8:5f:9b:91:51:e4:7c:af: 47:33:70:22:9c:f9:c5:67:2c:6e:a7:35:00:16:1a:94:f3:6a: 22:db:8e:8d:a9:7b:94:ca:d7:69:6c:57:34:b5:45:00:6d:8d: 34:fd:a7:57:82:86:1e:b1:f9:30:d3:d7:b7:7e:16:86:12:f7: 4f:3a:ab:2b:92:95:1a:46:7f:ef:6f:25:96:db:b6:25:ed:e9: e3:ef:71:8e:e2:f7:9d:ac:e2:34:7b:91:ca:62:69:95:64:74: d6:ba:9a:d1:d4:0e:bc:02:5a:2e:43:f1:5f:cc:1a:a7:56:d1: 7d:64:91:ac:1d:c0:7b:20:1c:4e:85:0b:93:33:08:5b:e8:94: 65:76:9d:17:6f:d7:cc:c2:2c:3f:db:e4:3a:67:c5:14:22:cc: ba:2d:01:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG284GCnlYeWyn2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGM1YWYyYTgtOTNhYi00MzUzLTkxYjMtOGVmNDM5MDE1MTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eIMajoJNwrc2NxKwIRcEU2d9JaAn6g/pGCv xdmcnNVy1xZ1+yiFPObVMV60amSTwD59XkaFSWO7utGaZ5jumyI3VPqtgpiACeW0 ExY9Zht5J8knquRxegqQaxOWUrXaMdR29Ss/5WaiLh+wyABiqW9OgAAkx9HFJsLm h+bicoptvqbx9Z7wo5exuX6QzLYty/Y9OXcI8+YkuJl9HJn3p2ApJPQtsayxoRAv X0lBhKiRIweGWtkqUs9f3LLZxwM4jwzDalbnaw+U4n/KnQs3A932K49IAJHFvQTs bzBs5GPUTU7rKaLpEPx+k8i9j0J8oXRxyJyZdb/ktY2uECY9iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPx4jDNnLxkKAGzWB1WpCV/m0+teMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTliNzIwMjMtNjgxZC0z ZTdlLWJkNGUtZTY3NWExZjg5ZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp4xbloGLT25dUz952+0Ar4OxMMx9Id/TZNZs55zYmuSbKtRHrD7NnF ZWAGDu3jWnW/+p1vBHooMJtbRsM06a2xDLGPhqQ2iNYz1be3eM7Y8e/y6VGAY+mz I1pTJ30UuW+pELeoX5uRUeR8r0czcCKc+cVnLG6nNQAWGpTzaiLbjo2pe5TK12ls VzS1RQBtjTT9p1eChh6x+TDT17d+FoYS9086qyuSlRpGf+9vJZbbtiXt6ePvcY7i 952s4jR7kcpiaZVkdNa6mtHUDrwCWi5D8V/MGqdW0X1kkawdwHsgHE6FC5MzCFvo lGV2nRdv18zCLD/b5DpnxRQizLotAdI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:38 2025 by rpki-client