$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa File: efaf8585-044d-334f-ae1a-da5be895ed5c.roa (raw, json) Hash identifier: /25uYhMUWGUsF392vnQUWE/JoicatmO8/VKTdPNOlQ0= Subject key identifier: 9E:0A:2A:CB:07:6E:91:93:62:88:FD:05:57:B0:27:EF:0A:41:04:FB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9FDE672A48E1850F81C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.172.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9f:de:67:2a:48:e1:85:0f:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b22d9bd6-c459-4f94-84f7-4042af53ceeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e8:8f:a2:14:53:85:e5:7a:24:fa:21:9d:7a: d7:fe:8b:ef:fa:1e:23:d9:6c:b0:64:5e:5e:3f:51: b1:54:f2:88:2d:a9:fe:8e:5c:64:0d:55:9e:3e:7c: 7e:52:8a:10:ae:44:a8:bb:e9:29:06:ed:54:4b:0f: 27:d0:b5:0c:de:c1:90:f2:f6:1f:e1:54:1d:d4:3b: 8d:53:a7:c7:8a:1c:2e:d8:52:be:44:1e:7b:bf:cc: 8d:9b:69:76:92:28:bf:14:ec:a9:f2:1d:78:f6:0f: 7a:ae:f5:c9:8a:f6:7d:4e:60:70:b9:75:7c:ce:20: 35:9b:99:8e:8c:bc:f8:31:8e:39:07:de:50:65:4e: 1d:ab:0d:d8:13:b9:b1:32:f5:58:1e:11:34:e1:40: da:75:69:1b:8d:5d:6f:8a:85:91:f2:c3:97:eb:10: 4e:67:5f:b5:cd:96:cc:62:6c:df:15:ec:95:0b:e6: 2f:25:c6:9f:42:cd:1b:64:20:29:e8:89:53:86:5a: 8a:21:81:8c:8e:1c:d2:5b:f5:a1:49:32:46:97:61: 3c:f6:c7:1b:89:a9:29:00:ee:75:f7:cc:a0:dd:88: d4:05:ac:dd:2b:7c:dd:53:3c:50:df:8c:b4:00:ce: f8:2d:06:47:af:83:cd:a7:a2:95:ea:a5:c9:4f:4a: 20:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0A:2A:CB:07:6E:91:93:62:88:FD:05:57:B0:27:EF:0A:41:04:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.172.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4e:90:45:e2:d8:6c:bd:b8:41:78:a1:24:1f:30:0c:dc:cb: 4a:d2:ef:3b:41:29:25:6a:32:aa:cd:e7:48:ce:88:b3:1a:96: 5d:28:62:af:6c:f4:36:41:c3:f4:3f:a1:9e:b6:f7:7f:46:3e: fd:42:04:0d:7d:18:a1:e0:d8:2d:0f:3d:9c:be:60:ca:1b:0f: 7a:f3:84:33:86:ea:ae:d3:53:64:c2:e5:c8:f0:67:3c:c7:38: 99:26:64:a9:8b:55:6b:f1:28:18:20:3f:ff:13:49:41:84:83: 92:d0:8a:fe:27:6b:2d:f1:0e:a5:4f:da:68:f0:bf:5d:51:47: 99:d2:df:3b:f8:e3:9d:a3:9b:77:6d:6e:77:b7:ff:b6:c1:6a: d6:06:bf:51:20:88:8a:38:ee:29:5e:d5:3c:3c:f4:c6:df:da: 60:de:e7:4a:37:e5:48:19:44:05:a9:3e:a4:46:dc:ac:84:3e: 93:d3:d7:82:71:2f:c4:f0:49:a3:a3:72:97:20:bf:e8:72:e0: 03:84:43:45:6a:4b:64:fa:db:26:de:d1:4d:e9:0d:83:08:03: 62:0e:63:50:58:52:4b:bb:50:3c:cd:1a:44:7e:8d:b5:81:d7: 7a:55:ab:dc:8a:64:a4:f1:8b:f1:f0:a0:f3:8f:85:a6:b3:52: 49:0e:0f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25/eZypI4YUPgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjIyZDliZDYtYzQ1OS00Zjk0LTg0ZjctNDA0MmFmNTNjZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+iPohRTheV6JPohnXrX/ovv+h4j2WywZF5e P1GxVPKILan+jlxkDVWePnx+UooQrkSou+kpBu1USw8n0LUM3sGQ8vYf4VQd1DuN U6fHihwu2FK+RB57v8yNm2l2kii/FOyp8h149g96rvXJivZ9TmBwuXV8ziA1m5mO jLz4MY45B95QZU4dqw3YE7mxMvVYHhE04UDadWkbjV1vioWR8sOX6xBOZ1+1zZbM YmzfFeyVC+YvJcafQs0bZCAp6IlThlqKIYGMjhzSW/WhSTJGl2E89scbiakpAO51 98yg3YjUBazdK3zdUzxQ34y0AM74LQZHr4PNp6KV6qXJT0og6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4KKssHbpGTYoj9BVewJ+8KQQT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWZhZjg1ODUtMDQ0ZC0z MzRmLWFlMWEtZGE1YmU4OTVlZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFOkEXi2Gy9uEF4oSQfMAzcy0rS7ztBKSVqMqrN50jOiLMall0oYq9s 9DZBw/Q/oZ62939GPv1CBA19GKHg2C0PPZy+YMobD3rzhDOG6q7TU2TC5cjwZzzH OJkmZKmLVWvxKBggP/8TSUGEg5LQiv4nay3xDqVP2mjwv11RR5nS3zv4452jm3dt bne3/7bBatYGv1EgiIo47ile1Tw89Mbf2mDe50o35UgZRAWpPqRG3KyEPpPT14Jx L8TwSaOjcpcgv+hy4AOEQ0VqS2T62ybe0U3pDYMIA2IOY1BYUku7UDzNGkR+jbWB 13pVq9yKZKTxi/HwoPOPhaazUkkOD/E= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:16 2025 by rpki-client