$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa File: f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa (raw, json) Hash identifier: 4kzyKSt52NFGdlLvXSp0BaQQD4ZmgnBrAMWFwvKfwZo= Subject key identifier: B6:08:88:A0:6F:45:CF:CF:C2:A2:C4:98:FE:BA:C1:58:6F:40:FB:89 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA091D41D020A5ECA3480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.145.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a0:91:d4:1d:02:0a:5e:ca:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=65cc4f07-d174-4dd8-afeb-e369cfc4f0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2f:bc:95:66:3e:39:f2:08:1e:11:60:45:b2: 01:a6:61:6e:86:4a:f4:1f:23:2e:16:04:3e:f3:2f: cb:d7:10:73:a6:ca:8d:04:db:83:b0:13:2c:76:51: 06:c1:31:88:d1:e9:be:9d:30:ca:e2:50:ef:4c:aa: 31:9c:5b:57:a3:54:77:65:78:75:37:9f:38:fd:6e: 3f:d6:98:f1:3b:91:68:86:2e:05:15:e0:57:29:65: 32:f0:dc:1f:93:fa:3e:2a:f7:8a:63:55:57:18:82: 63:e2:74:27:3f:6d:c4:7f:e8:62:35:9f:b8:3c:8d: e7:86:d7:76:9d:25:aa:7c:66:b4:d7:72:47:7c:07: d4:c9:ed:56:6b:86:8d:dd:ea:11:66:76:f9:3e:29: 56:4a:bc:a3:f5:cf:70:a4:5c:3f:44:94:92:ad:ef: 7b:fc:08:4d:16:7a:2d:74:41:27:1b:4b:30:7a:56: 77:0f:8b:f7:e7:e0:cd:85:75:70:b8:c7:01:8b:db: 5e:28:50:ab:c0:4b:72:fc:ba:aa:c6:b1:ba:e1:e3: 04:7d:b9:12:fc:47:f2:b3:95:a1:22:d9:08:0c:85: cd:a4:71:99:c0:02:08:3f:81:0d:f6:8a:0d:ef:6a: 08:dc:bc:ac:5a:7e:72:3e:bf:14:29:19:91:2a:1f: bf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:08:88:A0:6F:45:CF:CF:C2:A2:C4:98:FE:BA:C1:58:6F:40:FB:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:3e:79:5b:17:86:2e:37:19:35:fa:ff:36:f1:6a:8e:ba:3e: c9:c5:82:16:43:cc:e0:ed:42:5b:a5:4b:ab:23:67:09:96:1b: 66:77:fd:3f:68:98:84:0e:3c:6b:3e:fe:60:45:65:ba:e0:d8: ff:5d:a5:99:8c:bf:1b:53:ae:d6:2a:5b:71:87:e3:88:5b:7b: bc:2a:c0:5f:bb:6f:8b:22:1d:22:15:23:95:99:69:03:de:0d: bc:67:96:72:43:85:15:af:bd:5a:fc:2f:81:2e:50:f8:21:2b: 65:a4:bf:54:95:0d:d4:e7:1a:e5:d1:d4:b8:2c:e4:62:3b:62: b2:30:5f:d1:8d:bd:17:ef:b5:71:71:98:f6:89:d1:78:11:90: 48:48:d4:a0:19:2e:21:99:4b:9d:66:df:47:be:a8:50:9a:ac: 72:9a:d7:b9:7e:3f:37:4f:73:fc:23:fd:31:b2:f0:77:75:7f: 07:df:2e:82:e7:03:f9:eb:f6:06:c7:5d:2e:4e:87:61:7d:48: f5:16:75:d4:66:b9:5c:53:a4:7c:c4:57:8d:99:9d:6f:03:4d: 30:8d:a1:a1:12:e7:4d:98:37:78:e3:06:1a:0f:79:12:53:b2: ed:e6:68:35:8c:a6:65:64:11:92:73:b3:12:b8:8b:c4:9e:fa: dc:e9:73:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26CR1B0CCl7KNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjVjYzRmMDctZDE3NC00ZGQ4LWFmZWItZTM2OWNmYzRmMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y+8lWY+OfIIHhFgRbIBpmFuhkr0HyMuFgQ+ 8y/L1xBzpsqNBNuDsBMsdlEGwTGI0em+nTDK4lDvTKoxnFtXo1R3ZXh1N584/W4/ 1pjxO5Fohi4FFeBXKWUy8Nwfk/o+KveKY1VXGIJj4nQnP23Ef+hiNZ+4PI3nhtd2 nSWqfGa013JHfAfUye1Wa4aN3eoRZnb5PilWSryj9c9wpFw/RJSSre97/AhNFnot dEEnG0swelZ3D4v35+DNhXVwuMcBi9teKFCrwEty/LqqxrG64eMEfbkS/Efys5Wh ItkIDIXNpHGZwAIIP4EN9ooN72oI3LysWn5yPr8UKRmRKh+/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYIiKBvRc/PwqLEmP66wVhvQPuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjJjMWM1MTMtYzQ3YS0z N2JmLWFkZTAtZDU3Yjg3NWM3ZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0+eVsXhi43GTX6/zbxao66PsnFghZDzODtQlulS6sjZwmWG2Z3/T9o mIQOPGs+/mBFZbrg2P9dpZmMvxtTrtYqW3GH44hbe7wqwF+7b4siHSIVI5WZaQPe DbxnlnJDhRWvvVr8L4EuUPghK2Wkv1SVDdTnGuXR1Lgs5GI7YrIwX9GNvRfvtXFx mPaJ0XgRkEhI1KAZLiGZS51m30e+qFCarHKa17l+PzdPc/wj/TGy8Hd1fwffLoLn A/nr9gbHXS5Oh2F9SPUWddRmuVxTpHzEV42ZnW8DTTCNoaES502YN3jjBhoPeRJT su3maDWMpmVkEZJzsxK4i8Se+tzpc2I= -----END CERTIFICATE-----Generated at Tue Jul 22 04:30:41 2025 by rpki-client