$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef2704e7-f58f-324e-86e7-e88d952e6411.roa File: ef2704e7-f58f-324e-86e7-e88d952e6411.roa (raw, json) Hash identifier: Ofx8D0sL5d4/h5lynLVWHpW4ajt9OfsC9DykARo/VXc= Subject key identifier: 40:F7:AE:B4:35:B1:FD:34:51:7B:18:6D:2E:42:F0:72:B9:16:9C:E7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84122071FD939BB45F95D480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef2704e7-f58f-324e-86e7-e88d952e6411.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.119.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:20:71:fd:93:9b:b4:5f:95:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=403d5273-9f96-405a-9f85-8344e2632831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:98:20:34:7b:1f:35:4a:0a:50:c1:b4:a9:74: 02:57:f2:9e:ae:6e:10:06:05:f0:f5:2f:cf:3d:62: 87:13:0c:3f:d6:7e:b9:bb:64:8f:4c:7d:e2:a0:76: 13:29:36:51:db:1a:b5:10:f1:05:4e:1f:cf:42:ae: 53:12:f6:30:94:99:be:74:95:ad:82:36:78:25:d2: 99:fb:3a:36:bf:eb:44:91:30:a6:26:70:13:47:57: 88:29:c3:a6:70:e1:a0:47:6e:2e:f9:51:08:44:e1: f3:f2:cd:2e:46:25:0c:f5:7e:86:31:7e:87:64:72: 0b:01:7e:81:2f:80:31:8e:9c:4a:05:c1:98:9e:eb: ca:75:d5:a4:b4:ca:30:d5:ae:81:96:35:87:0e:6b: 08:32:52:f4:e3:61:4f:0f:7b:4f:6e:17:fb:92:b0: 3d:ce:b5:cb:ba:e2:76:a6:93:b1:d2:fa:55:ef:95: 79:70:f9:60:39:c0:10:aa:37:95:59:48:c1:9a:fd: a1:79:6a:64:b5:96:50:91:5b:26:23:16:70:8e:e5: 3e:11:fc:b9:6a:20:dc:75:e0:79:7e:7c:2b:76:f9: 8e:ae:27:3c:b2:5a:3e:1c:1b:1f:e8:5f:7d:02:66: ec:28:3f:c6:2c:4d:30:9a:2b:51:81:b8:35:f5:92: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F7:AE:B4:35:B1:FD:34:51:7B:18:6D:2E:42:F0:72:B9:16:9C:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef2704e7-f58f-324e-86e7-e88d952e6411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6c:24:6d:e8:a8:ee:40:69:ac:62:bc:8e:04:39:8c:68:a1: e2:f2:bb:84:73:12:16:c0:ac:ad:62:cc:37:a1:5f:8c:0b:b5: 62:2b:df:7a:df:e0:d4:34:ad:08:87:39:a3:3b:3c:e1:0c:ab: 6a:05:f3:bc:73:5a:23:6c:3c:a7:d0:7a:dc:b9:b8:8f:5b:3a: 0d:5a:ea:07:b1:62:c4:a9:c1:ca:c4:23:94:7f:16:bc:f1:df: ca:df:ed:96:2b:5d:64:8e:df:fe:95:1b:f0:80:26:dd:41:e8: 9d:60:cd:9b:0b:ad:fe:08:20:5c:0f:ee:e3:4f:3e:a6:dd:90: f3:15:71:79:51:b0:9f:5c:cd:0b:df:ce:35:fa:48:a3:48:ea: 5c:ec:80:6d:75:77:43:93:95:0d:a9:3d:a8:c8:93:50:15:eb: b5:84:70:9f:1e:1a:02:d2:e7:91:b3:80:5e:a0:e2:8f:70:90: 09:9b:84:31:ed:5d:64:19:59:dc:35:cb:7a:a4:c0:f7:b4:b7: 91:4a:35:d4:6e:94:50:fb:95:d5:93:ee:88:27:cd:af:a2:41: bd:a6:24:99:e0:f0:6a:10:52:8c:56:bc:24:73:e9:1f:1d:0c: 90:2e:69:93:c9:1d:66:fc:26:24:91:10:4d:7f:ac:37:27:62: 16:e6:2e:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiBx/ZObtF+V1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDAzZDUyNzMtOWY5Ni00MDVhLTlmODUtODM0NGUyNjMyODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZggNHsfNUoKUMG0qXQCV/Kerm4QBgXw9S/P PWKHEww/1n65u2SPTH3ioHYTKTZR2xq1EPEFTh/PQq5TEvYwlJm+dJWtgjZ4JdKZ +zo2v+tEkTCmJnATR1eIKcOmcOGgR24u+VEIROHz8s0uRiUM9X6GMX6HZHILAX6B L4AxjpxKBcGYnuvKddWktMow1a6BljWHDmsIMlL042FPD3tPbhf7krA9zrXLuuJ2 ppOx0vpV75V5cPlgOcAQqjeVWUjBmv2heWpktZZQkVsmIxZwjuU+Efy5aiDcdeB5 fnwrdvmOric8slo+HBsf6F99AmbsKD/GLE0wmitRgbg19ZIXgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFED3rrQ1sf00UXsYbS5C8HK5FpznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWYyNzA0ZTctZjU4Zi0z MjRlLTg2ZTctZTg4ZDk1MmU2NDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIndwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5sJG3oqO5AaaxivI4EOYxooeLyu4RzEhbArK1izDehX4wLtWIr33rf 4NQ0rQiHOaM7POEMq2oF87xzWiNsPKfQety5uI9bOg1a6gexYsSpwcrEI5R/Frzx 38rf7ZYrXWSO3/6VG/CAJt1B6J1gzZsLrf4IIFwP7uNPPqbdkPMVcXlRsJ9czQvf zjX6SKNI6lzsgG11d0OTlQ2pPajIk1AV67WEcJ8eGgLS55GzgF6g4o9wkAmbhDHt XWQZWdw1y3qkwPe0t5FKNdRulFD7ldWT7ognza+iQb2mJJng8GoQUoxWvCRz6R8d DJAuaZPJHWb8JiSREE1/rDcnYhbmLmg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:24 2025 by rpki-client