$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f68008f5-79e4-315c-b981-b289b04be2ab.roa File: f68008f5-79e4-315c-b981-b289b04be2ab.roa (raw, json) Hash identifier: JHXk8+PAwgcNGkWc4d2/N+CRXowNtDnMXh0q/N/hUEc= Subject key identifier: 0A:06:E6:5D:65:25:BA:2B:D0:F4:68:5C:89:50:E4:D2:0D:37:13:8A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC522D318D4578F95A870 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f68008f5-79e4-315c-b981-b289b04be2ab.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.139.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c5:22:d3:18:d4:57:8f:95:a8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=cc1040f5-7a77-4d03-9212-45342df06c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:84:19:2a:e1:c4:19:53:11:c3:35:d6:fb: 8c:de:e6:08:70:d5:b4:06:73:de:9b:56:ea:41:8e: bd:79:57:e9:0c:ad:8d:ff:b1:d4:af:d6:fe:09:74: 21:a1:b7:c3:26:de:d1:ea:0d:f0:ca:2e:6e:ed:09: f6:02:9c:02:fc:5d:6b:f0:bd:88:a9:c7:b7:4a:59: f0:28:82:d8:bf:59:0d:30:fc:0d:19:b2:09:d9:a2: 55:78:af:97:4d:c5:43:80:64:5a:65:01:45:c4:03: 2f:d9:9d:54:29:e6:c3:e1:11:be:f5:8d:07:00:79: d0:59:b5:4b:5f:3d:b2:93:0b:5a:5a:a8:9c:95:75: 7c:7c:9f:ec:ae:37:82:33:9e:c5:d0:0b:80:be:3d: 02:3a:e2:9d:1f:04:d9:7d:b4:86:2b:35:de:d1:c3: d6:1f:49:7d:58:c1:fd:94:81:32:19:7a:c7:30:27: 23:15:48:01:d7:ac:48:49:39:1f:73:ac:94:2c:89: 23:15:68:b6:44:79:06:cb:fe:68:4d:03:98:bb:fa: 90:20:69:0b:10:5d:ec:d5:09:c8:0f:6b:2f:fd:8a: 89:59:71:18:dd:4d:61:0f:63:b4:ca:c8:04:19:b4: f3:ff:55:99:ec:f7:87:a3:3c:76:80:1d:ed:03:08: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:06:E6:5D:65:25:BA:2B:D0:F4:68:5C:89:50:E4:D2:0D:37:13:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f68008f5-79e4-315c-b981-b289b04be2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.139.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3d:94:ac:34:2a:4d:2f:70:14:82:e6:d2:b6:24:b1:c3:d9: b6:cb:95:6b:b4:ff:fd:90:00:d0:cf:f6:eb:0d:a2:9e:53:48: c0:dc:13:16:ab:7e:4a:ed:61:a7:b9:e6:31:06:2c:b7:b9:ef: e1:4b:48:2e:f3:7d:5a:1c:3d:35:c6:33:98:04:2f:f5:7a:4f: c0:a1:48:ec:ab:60:ae:4a:17:ac:1e:23:2c:fe:ee:31:60:b5: e2:2c:bc:78:9d:76:d3:96:f9:5f:1a:9c:6e:93:2f:c0:b1:59: 6c:f1:d6:2c:0b:0d:53:5f:6c:14:5e:39:30:32:3a:10:f1:44: 75:d9:34:d3:38:f7:78:18:75:96:0c:6c:3b:06:55:51:91:12: 72:cb:8f:4d:a3:ab:a0:fb:31:2b:43:a2:22:fd:5a:5a:d9:c3: c7:2f:70:d7:bc:0a:f2:49:6c:1c:7b:74:93:e0:57:75:13:d1: 8c:d3:77:81:95:f2:46:3a:30:c6:04:a0:a5:98:83:a5:0d:12: 10:cc:37:c2:d7:07:3d:0f:cd:2d:49:c8:64:a4:f2:33:2f:f6: 62:ec:57:ed:7c:ff:59:bd:04:40:a9:7c:fb:93:d2:f7:6b:60: fa:2b:17:bb:fa:7d:80:3f:53:95:d4:27:33:ac:00:e5:ec:3c: d5:81:95:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28Ui0xjUV4+VqHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2MxMDQwZjUtN2E3Ny00ZDAzLTkyMTItNDUzNDJkZjA2YzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl96EGSrhxBlTEcM11vuM3uYIcNW0BnPem1bq QY69eVfpDK2N/7HUr9b+CXQhobfDJt7R6g3wyi5u7Qn2ApwC/F1r8L2Iqce3Slnw KILYv1kNMPwNGbIJ2aJVeK+XTcVDgGRaZQFFxAMv2Z1UKebD4RG+9Y0HAHnQWbVL Xz2ykwtaWqiclXV8fJ/srjeCM57F0AuAvj0COuKdHwTZfbSGKzXe0cPWH0l9WMH9 lIEyGXrHMCcjFUgB16xISTkfc6yULIkjFWi2RHkGy/5oTQOYu/qQIGkLEF3s1QnI D2sv/YqJWXEY3U1hD2O0ysgEGbTz/1WZ7PeHozx2gB3tAwh6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoG5l1lJbor0PRoXIlQ5NINNxOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjY4MDA4ZjUtNzllNC0z MTVjLWI5ODEtYjI4OWIwNGJlMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIotAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM9lKw0Kk0vcBSC5tK2JLHD2bbLlWu0//2QANDP9usNop5TSMDcExar fkrtYae55jEGLLe57+FLSC7zfVocPTXGM5gEL/V6T8ChSOyrYK5KF6weIyz+7jFg teIsvHiddtOW+V8anG6TL8CxWWzx1iwLDVNfbBReOTAyOhDxRHXZNNM493gYdZYM bDsGVVGREnLLj02jq6D7MStDoiL9WlrZw8cvcNe8CvJJbBx7dJPgV3UT0YzTd4GV 8kY6MMYEoKWYg6UNEhDMN8LXBz0PzS1JyGSk8jMv9mLsV+18/1m9BECpfPuT0vdr YPorF7v6fYA/U5XUJzOsAOXsPNWBlWk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:14 2025 by rpki-client