$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa File: f11069b8-0d35-380f-acb1-1cd190315ba7.roa (raw, json) Hash identifier: anKRRnv4dsJzmDCnI6j8N0WMW4oPEG00VifrOt1hodY= Subject key identifier: 0F:E4:90:E2:24:FD:99:56:19:2D:C8:E5:42:5B:A4:D3:CA:3B:75:9E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBD6091F9F4745ACDACE0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.20.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:bd:60:91:f9:f4:74:5a:cd:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=9b8c53a7-d352-4a7c-9708-ea6c76855090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:94:ae:36:12:57:79:99:9d:db:8a:d3:a5: 73:eb:17:2a:da:33:1f:22:ef:77:af:cf:13:10:82: 5b:ad:85:c4:ef:69:74:79:04:14:98:b3:b3:92:64: 37:af:da:d8:fd:4b:b1:a8:9e:2b:31:d3:1a:23:d8: 10:16:8b:ca:21:af:4a:ba:b2:57:22:72:0a:06:b8: de:2e:1a:51:82:3f:b8:1e:51:90:8b:f2:d6:9b:21: 6d:1b:5d:66:31:ae:3c:11:b6:24:39:a4:36:f2:0d: e1:02:87:77:63:34:e7:e8:cc:68:3d:23:eb:71:4f: 9a:99:4b:6e:26:58:c1:fa:92:fb:f6:bd:c5:79:2d: ac:4b:1c:17:06:e5:01:17:00:fd:fe:44:52:94:28: f0:e4:cb:79:83:f9:59:5d:7b:24:c9:44:e3:d5:7a: 0d:90:66:d5:db:39:4e:b6:fd:21:39:69:0c:63:e4: d4:86:43:02:0b:28:be:5c:f2:d0:fb:94:82:47:f4: c1:2e:0d:a7:9f:3f:ae:0a:37:57:4d:03:76:1b:4c: 2d:fc:e3:9e:75:ba:68:01:66:12:3d:37:56:51:ca: 95:78:5a:7e:1b:bf:44:a5:b3:a8:4d:9e:65:d6:ea: 61:a0:7a:a3:60:8f:dc:4d:1d:4c:78:df:2f:60:7c: 46:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E4:90:E2:24:FD:99:56:19:2D:C8:E5:42:5B:A4:D3:CA:3B:75:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.20.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:04:86:2b:59:94:4c:c5:1f:bf:e0:22:25:bf:78:10:50:b9: 97:4f:db:0e:e8:c9:23:46:bc:15:8f:86:d1:df:f8:8d:33:8e: 99:1b:e5:37:aa:76:ca:ca:e9:e2:7a:a8:ea:01:e4:8c:fa:ea: ca:bb:b7:68:2e:66:61:8e:bf:9e:0e:1f:3d:15:e6:1d:ed:47: 64:9d:9a:d4:7f:b4:d3:d3:2b:fd:3e:5b:d2:24:c4:28:9b:26: 0b:c0:e6:b0:1b:c8:47:83:a8:24:fc:bd:98:33:2f:60:ed:17: 98:0a:50:2c:ff:79:4a:d2:21:8e:4a:c8:ae:de:72:51:91:f5: 58:3f:fa:1c:ba:6a:e0:de:d5:97:5d:94:01:7b:10:10:0f:cd: 57:8d:25:a8:07:20:48:0d:f8:72:38:56:d9:b9:02:b3:33:98: 77:c1:2a:8a:a2:d5:93:fe:b4:57:0d:be:14:6d:dc:91:be:b0: 7d:ef:1c:34:20:d0:ec:55:72:81:30:36:7a:2e:b6:ca:43:4f: 1d:ce:83:cb:d4:3b:57:aa:81:76:41:c5:00:2c:da:52:81:fa: 71:a3:49:80:e1:72:f6:c9:36:85:63:91:d5:27:b0:1b:fc:20: 39:0b:4f:21:d3:03:a3:0e:18:74:4f:c6:ae:c2:c0:04:0a:8f: 0d:32:12:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG271gkfn0dFrNrOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OWI4YzUzYTctZDM1Mi00YTdjLTk3MDgtZWE2Yzc2ODU1MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVmUrjYSV3mZnduK06Vz6xcq2jMfIu93r88T EIJbrYXE72l0eQQUmLOzkmQ3r9rY/UuxqJ4rMdMaI9gQFovKIa9KurJXInIKBrje LhpRgj+4HlGQi/LWmyFtG11mMa48EbYkOaQ28g3hAod3YzTn6MxoPSPrcU+amUtu JljB+pL79r3FeS2sSxwXBuUBFwD9/kRSlCjw5Mt5g/lZXXskyUTj1XoNkGbV2zlO tv0hOWkMY+TUhkMCCyi+XPLQ+5SCR/TBLg2nnz+uCjdXTQN2G0wt/OOedbpoAWYS PTdWUcqVeFp+G79EpbOoTZ5l1uphoHqjYI/cTR1MeN8vYHxGSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/kkOIk/ZlWGS3I5UJbpNPKO3WeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjExMDY5YjgtMGQzNS0z ODBmLWFjYjEtMWNkMTkwMzE1YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYEhitZlEzFH7/gIiW/eBBQuZdP2w7oySNGvBWPhtHf+I0zjpkb5Teq dsrK6eJ6qOoB5Iz66sq7t2guZmGOv54OHz0V5h3tR2SdmtR/tNPTK/0+W9IkxCib JgvA5rAbyEeDqCT8vZgzL2DtF5gKUCz/eUrSIY5KyK7eclGR9Vg/+hy6auDe1Zdd lAF7EBAPzVeNJagHIEgN+HI4Vtm5ArMzmHfBKoqi1ZP+tFcNvhRt3JG+sH3vHDQg 0OxVcoEwNnoutspDTx3Og8vUO1eqgXZBxQAs2lKB+nGjSYDhcvbJNoVjkdUnsBv8 IDkLTyHTA6MOGHRPxq7CwAQKjw0yEjw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:30 2025 by rpki-client