$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa File: f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa (raw, json) Hash identifier: 24I7ebYcHHRpzJFETciTA1WAtJydpF6cqxi7xQohJTc= Subject key identifier: 45:D1:14:CC:48:5E:2F:4F:4E:9D:5E:D7:E7:B9:27:45:00:32:6D:F1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC0274E04E796C5FD7200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.66.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c0:27:4e:04:e7:96:c5:fd:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ecaf0b89-25ef-446f-ae3f-d90b92bee24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:02:de:a1:2a:01:24:d9:fe:dd:98:0a:19:c3: 32:18:61:46:85:f6:3e:18:c7:6d:0c:78:47:d8:cc: 68:af:89:49:01:ba:40:2e:d8:a9:72:10:ff:2a:5d: 03:af:53:12:c6:6e:7a:7a:eb:6c:21:24:b7:16:38: d0:ec:03:ce:02:07:4c:8b:73:5b:9b:6d:dc:d5:14: 5d:36:8b:0e:88:be:55:fc:07:1d:27:e2:f1:db:9e: 23:a7:31:82:d7:cc:2f:00:93:b5:96:22:e4:47:b1: 25:6f:37:d6:2a:d9:0b:f5:d9:d8:96:7e:74:cc:72: b6:95:95:f0:69:93:2a:ae:4b:fd:a1:1e:20:d5:62: cc:e9:26:b5:0f:67:b6:b0:76:79:f2:49:51:29:99: bc:ac:e1:32:da:13:39:f1:46:a8:0d:d3:c9:1c:29: c4:c0:1e:32:50:38:dd:34:33:ef:6c:8c:bb:7b:6f: d2:b6:b0:e9:91:32:5a:ed:2e:30:9d:eb:c1:ff:9e: 68:b8:c2:1b:85:e4:93:12:7a:12:77:cc:7e:54:fd: 78:26:a4:b1:a0:d8:77:84:51:93:3b:cb:5a:10:a8: 6a:7d:b2:31:0f:cc:fe:38:8d:b2:b1:43:c0:f6:f5: 64:2f:31:c1:2c:f9:65:19:55:13:56:c0:8b:dc:f4: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D1:14:CC:48:5E:2F:4F:4E:9D:5E:D7:E7:B9:27:45:00:32:6D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f2:62:ac:2c:dc:5b:d5:38:1b:8d:94:51:5b:0e:77:3d:30: 96:a6:1f:8e:30:5d:1a:2c:9c:5e:09:99:d2:04:e6:e1:1c:f9: 5c:66:a4:17:72:17:05:5d:7c:96:ae:29:a8:ee:74:ee:af:31: f6:01:b0:d2:f1:99:9f:9c:61:0b:98:1d:ae:2b:d0:8d:15:f2: e7:68:75:9e:a5:e3:14:1a:dd:94:fc:97:02:9c:43:af:62:e3: 34:83:84:07:19:c9:a8:2a:51:d4:16:10:a7:91:56:a2:fb:85: b8:f0:5f:e2:dd:b8:99:4d:07:d1:47:f1:20:3e:2d:c4:98:6f: ff:40:28:d4:56:60:a6:44:da:13:50:49:00:2f:f6:0d:34:f5: ec:d2:53:0e:e5:d9:a6:05:c1:13:e7:fa:5c:ff:ab:27:db:fd: 0a:1a:cf:a2:1c:12:ef:47:3d:6e:f4:0c:ab:24:7e:69:f1:fd: 8a:47:63:c7:08:56:63:ee:3f:de:46:e8:38:87:7d:6f:08:5d: 0a:26:b2:1b:aa:ce:ab:d5:80:53:4d:01:24:a8:21:04:ab:b1: f1:d1:55:0a:3f:bc:98:a4:2b:55:3c:62:5e:84:84:d0:0c:19: fb:a5:c7:da:46:5c:65:0a:3a:7a:3a:80:74:33:1b:83:fc:96: 10:1d:b4:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28AnTgTnlsX9cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZWNhZjBiODktMjVlZi00NDZmLWFlM2YtZDkwYjkyYmVlMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gLeoSoBJNn+3ZgKGcMyGGFGhfY+GMdtDHhH 2Mxor4lJAbpALtipchD/Kl0Dr1MSxm56eutsISS3FjjQ7APOAgdMi3Nbm23c1RRd NosOiL5V/AcdJ+Lx254jpzGC18wvAJO1liLkR7ElbzfWKtkL9dnYln50zHK2lZXw aZMqrkv9oR4g1WLM6Sa1D2e2sHZ58klRKZm8rOEy2hM58UaoDdPJHCnEwB4yUDjd NDPvbIy7e2/StrDpkTJa7S4wnevB/55ouMIbheSTEnoSd8x+VP14JqSxoNh3hFGT O8taEKhqfbIxD8z+OI2ysUPA9vVkLzHBLPllGVUTVsCL3PRi8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXRFMxIXi9PTp1e1+e5J0UAMm3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA4NWZiN2MtMWY1ZC0z ZTI2LTk2ZTAtYWIyMTdiYmYxMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTyYqws3FvVOBuNlFFbDnc9MJamH44wXRosnF4JmdIE5uEc+VxmpBdy FwVdfJauKajudO6vMfYBsNLxmZ+cYQuYHa4r0I0V8udodZ6l4xQa3ZT8lwKcQ69i 4zSDhAcZyagqUdQWEKeRVqL7hbjwX+LduJlNB9FH8SA+LcSYb/9AKNRWYKZE2hNQ SQAv9g009ezSUw7l2aYFwRPn+lz/qyfb/Qoaz6IcEu9HPW70DKskfmnx/YpHY8cI VmPuP95G6DiHfW8IXQomshuqzqvVgFNNASSoIQSrsfHRVQo/vJikK1U8Yl6EhNAM Gfulx9pGXGUKOno6gHQzG4P8lhAdtEE= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:17 2025 by rpki-client