$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f068b724-074e-33c4-be1e-08d4b00df786.roa File: f068b724-074e-33c4-be1e-08d4b00df786.roa (raw, json) Hash identifier: 5/gNy5gu8RnPh5Ojrpqua/mNPzGPyoVWue1Nagzk2XE= Subject key identifier: 9C:29:DD:53:34:E8:56:18:7D:A2:5C:A9:27:B4:F8:4B:1D:8A:87:3A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7E09CD886C1F7AD46480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f068b724-074e-33c4-be1e-08d4b00df786.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.85.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7e:09:cd:88:6c:1f:7a:d4:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=5a783c28-e0b3-4544-9362-53969f894015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:9e:86:cc:5d:96:32:63:a1:55:1f:5f:19: e2:d4:33:9d:bb:3c:8f:c0:c2:48:21:d6:53:96:1f: 43:bb:59:da:f1:b0:14:49:eb:49:c3:66:14:ef:ad: 7d:e2:17:cb:05:d2:f8:26:2b:34:fa:4e:2d:29:8a: 8c:4a:65:bb:65:a7:af:3b:97:2b:ae:1d:f4:27:88: 2d:9a:0b:df:13:6d:f3:2e:c8:e1:ce:33:4a:47:0f: 02:27:16:93:97:4a:8b:1e:88:15:1a:d7:ab:50:a2: 6e:57:2f:6b:87:99:6f:d9:87:19:a6:15:d4:0d:e1: 69:65:5f:a2:87:5f:f8:7e:91:2c:0c:2c:3d:fb:48: 3a:67:e0:9c:ee:bd:e2:aa:a1:9c:79:3a:a5:d2:bf: 95:c7:ed:36:f7:01:5d:ea:f9:95:c5:15:9d:ef:35: 7f:f1:5a:54:32:d0:82:4a:6c:09:f8:0d:b2:0a:3a: b5:3c:b8:0e:fa:70:2c:f8:85:ba:b6:c1:1f:04:cd: ca:d4:87:2a:0c:b8:b4:be:30:3c:9f:6e:c3:13:93: e7:99:2a:4e:68:7d:e5:94:ec:53:9c:66:d5:86:2b: 4d:28:54:be:65:0c:a2:f1:a4:08:58:b6:87:47:e8: 6a:38:95:24:78:c0:cb:14:a7:7d:eb:22:71:ee:2e: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:29:DD:53:34:E8:56:18:7D:A2:5C:A9:27:B4:F8:4B:1D:8A:87:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f068b724-074e-33c4-be1e-08d4b00df786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6a:95:81:96:80:47:65:26:5c:32:a6:90:fb:54:74:09:27: 75:4c:c4:aa:0b:c6:b0:92:7f:1a:3f:9d:8c:d6:b6:6b:86:8b: 83:b9:8a:0a:4f:b2:5d:93:0d:99:80:8e:94:0a:06:02:73:90: c7:6e:f3:4d:b8:69:58:fa:cb:60:83:d9:11:c7:d7:e8:6e:e7: 60:95:d0:63:40:52:01:56:e7:ec:a4:e8:77:d3:fb:75:bb:f9: f5:57:e8:bd:17:d8:f7:5a:2c:45:de:43:11:cc:b4:f0:17:57: 32:06:60:7d:93:cd:27:1e:be:eb:dc:3e:6e:66:75:b4:1a:4e: 03:0d:ee:90:f2:68:bd:46:f4:07:af:ec:b2:08:2d:22:0b:b6: 42:42:f3:75:52:0d:9c:04:5e:f8:01:46:eb:46:41:94:42:5f: 7e:ab:4a:72:0e:4f:fb:f8:61:e1:34:9e:f1:bd:a4:99:62:31: 2f:c5:71:b5:d1:10:36:c4:08:7d:05:48:8b:d9:69:51:74:31: 35:e9:c4:41:92:9f:a2:b7:14:a7:a7:13:6b:e6:d6:40:b7:c9: 3f:9b:87:cb:10:87:03:53:d3:13:21:15:9b:7b:f3:bf:27:77: 11:ef:e8:ca:e0:77:92:f3:84:e8:86:67:b1:47:87:66:7e:3c: ed:34:86:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG234JzYhsH3rUZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NWE3ODNjMjgtZTBiMy00NTQ0LTkzNjItNTM5NjlmODk0MDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BuehsxdljJjoVUfXxni1DOduzyPwMJIIdZT lh9Du1na8bAUSetJw2YU76194hfLBdL4Jis0+k4tKYqMSmW7ZaevO5crrh30J4gt mgvfE23zLsjhzjNKRw8CJxaTl0qLHogVGterUKJuVy9rh5lv2YcZphXUDeFpZV+i h1/4fpEsDCw9+0g6Z+Cc7r3iqqGceTql0r+Vx+029wFd6vmVxRWd7zV/8VpUMtCC SmwJ+A2yCjq1PLgO+nAs+IW6tsEfBM3K1IcqDLi0vjA8n27DE5PnmSpOaH3llOxT nGbVhitNKFS+ZQyi8aQIWLaHR+hqOJUkeMDLFKd96yJx7i4dOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwp3VM06FYYfaJcqSe0+Esdioc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA2OGI3MjQtMDc0ZS0z M2M0LWJlMWUtMDhkNGIwMGRmNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdqlYGWgEdlJlwyppD7VHQJJ3VMxKoLxrCSfxo/nYzWtmuGi4O5igpP sl2TDZmAjpQKBgJzkMdu8024aVj6y2CD2RHH1+hu52CV0GNAUgFW5+yk6HfT+3W7 +fVX6L0X2PdaLEXeQxHMtPAXVzIGYH2TzScevuvcPm5mdbQaTgMN7pDyaL1G9Aev 7LIILSILtkJC83VSDZwEXvgBRutGQZRCX36rSnIOT/v4YeE0nvG9pJliMS/FcbXR EDbECH0FSIvZaVF0MTXpxEGSn6K3FKenE2vm1kC3yT+bh8sQhwNT0xMhFZt7878n dxHv6Mrgd5LzhOiGZ7FHh2Z+PO00hnU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:21 2025 by rpki-client