$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4d1a1b4-7c0f-3bfa-bb3c-3481394fdcf6.roa File: f4d1a1b4-7c0f-3bfa-bb3c-3481394fdcf6.roa (raw, json) Hash identifier: cWXuKS+X0KwxTb+4G5PfiRDYPnEIFve9ne8ep7TDmU0= Subject key identifier: F5:D4:24:C4:D3:8D:1A:72:47:DE:8E:CD:E2:21:4C:76:C5:7D:22:94 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9CD7394F906C446AF800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4d1a1b4-7c0f-3bfa-bb3c-3481394fdcf6.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.123.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9c:d7:39:4f:90:6c:44:6a:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0cf79f34-e0dd-45d7-819a-675288a7842c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:95:8d:91:0f:2e:59:a0:b7:97:6f:f7:c9:16: b4:5f:5b:3d:d5:bd:05:9c:75:b7:e3:d7:1d:35:9c: aa:c1:8f:3a:9a:f0:de:ba:14:e8:fd:e2:84:64:34: ac:a8:bb:66:88:af:04:4e:b1:58:3e:b1:1a:f7:95: df:94:58:c4:52:35:78:ac:1b:4c:e9:27:bc:1f:fb: 57:36:6f:13:32:ae:a3:fc:2a:db:9b:49:fa:97:9a: 17:9f:88:62:2c:b2:5e:ad:1f:7a:9f:50:93:d2:11: 6e:f9:7a:9f:36:a9:ec:fa:7b:2a:dc:24:c6:79:8b: 6e:eb:03:41:85:87:52:56:af:51:c8:6e:d5:63:8f: 11:bf:76:96:a6:53:ad:e5:88:dc:e2:6d:2e:0c:04: 0f:9a:8c:fc:af:5b:f6:55:cb:9d:6c:3c:e3:6c:e2: 15:79:16:ff:e3:12:54:c4:bc:2a:40:78:68:06:f0: f3:b3:78:46:2a:54:1a:2b:0d:a1:76:18:42:77:98: b0:96:fb:71:5c:11:d1:b5:60:53:d7:bd:23:70:d4: 5a:51:16:14:ae:1f:9d:1a:ab:a2:31:7d:e7:12:fd: d3:16:32:ec:b7:3b:7c:a9:19:22:d2:94:59:82:13: a4:b7:12:e8:df:b8:55:b7:3a:8c:d3:20:8b:34:b6: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D4:24:C4:D3:8D:1A:72:47:DE:8E:CD:E2:21:4C:76:C5:7D:22:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4d1a1b4-7c0f-3bfa-bb3c-3481394fdcf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0b:7f:70:54:17:c9:26:41:5b:08:84:4e:a2:56:df:07:f1: 4c:67:61:25:93:c1:ec:0d:03:f6:78:c4:01:3f:70:40:fb:40: f7:8d:5e:2a:00:59:75:12:db:a2:1a:7e:0c:32:88:3c:20:b4: a7:b7:8f:91:c0:49:57:59:84:9b:e3:8b:38:eb:1f:75:b9:90: 74:20:53:97:ca:fa:7d:bd:48:76:39:b9:ab:83:96:95:28:63: 0f:21:67:78:5d:41:2e:5f:80:c5:a6:5c:52:52:9b:5f:f8:7d: 12:5f:35:ec:a5:23:6d:60:c3:b9:03:f1:9a:75:60:3a:d3:f6: 77:40:78:d4:85:31:13:ad:20:ae:ad:4d:c0:fd:2c:9d:e8:54: 45:a9:1c:b1:4a:08:f7:50:3f:d1:c8:97:4e:1c:cb:8a:c7:3c: 41:4f:1f:63:5e:c8:3c:99:35:8f:57:56:b0:7e:80:a3:0c:89: a6:c4:37:83:3c:49:15:f8:70:79:13:85:15:6f:3e:b7:4a:fa: 7c:aa:3f:e7:26:4b:56:ef:55:e0:65:02:c0:9c:dc:2b:b7:1b: b0:93:b7:65:03:63:5d:39:6a:7d:6b:55:a2:f5:08:b8:9d:3e: 8b:0e:4a:94:2c:f2:cd:bf:d9:a0:dd:d6:ac:4f:d3:5b:f8:ea: 73:a3:8e:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25zXOU+QbERq+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGNmNzlmMzQtZTBkZC00NWQ3LTgxOWEtNjc1Mjg4YTc4NDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJWNkQ8uWaC3l2/3yRa0X1s91b0FnHW349cd NZyqwY86mvDeuhTo/eKEZDSsqLtmiK8ETrFYPrEa95XflFjEUjV4rBtM6Se8H/tX Nm8TMq6j/Crbm0n6l5oXn4hiLLJerR96n1CT0hFu+XqfNqns+nsq3CTGeYtu6wNB hYdSVq9RyG7VY48Rv3aWplOt5Yjc4m0uDAQPmoz8r1v2VcudbDzjbOIVeRb/4xJU xLwqQHhoBvDzs3hGKlQaKw2hdhhCd5iwlvtxXBHRtWBT170jcNRaURYUrh+dGqui MX3nEv3TFjLstzt8qRki0pRZghOktxLo37hVtzqM0yCLNLYlmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXUJMTTjRpyR96OzeIhTHbFfSKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjRkMWExYjQtN2MwZi0z YmZhLWJiM2MtMzQ4MTM5NGZkY2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgLf3BUF8kmQVsIhE6iVt8H8UxnYSWTwewNA/Z4xAE/cED7QPeNXioA WXUS26IafgwyiDwgtKe3j5HASVdZhJvjizjrH3W5kHQgU5fK+n29SHY5uauDlpUo Yw8hZ3hdQS5fgMWmXFJSm1/4fRJfNeylI21gw7kD8Zp1YDrT9ndAeNSFMROtIK6t TcD9LJ3oVEWpHLFKCPdQP9HIl04cy4rHPEFPH2NeyDyZNY9XVrB+gKMMiabEN4M8 SRX4cHkThRVvPrdK+nyqP+cmS1bvVeBlAsCc3Cu3G7CTt2UDY105an1rVaL1CLid PosOSpQs8s2/2aDd1qxP01v46nOjjvg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:01 2025 by rpki-client