$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8c95102-4168-3b2e-95e8-919f3c45fc44.roa File: f8c95102-4168-3b2e-95e8-919f3c45fc44.roa (raw, json) Hash identifier: DQr/TCSvwMbOi/w3ix1ckjjk59YoMt4eEc5Ii80mo1k= Subject key identifier: A6:22:1D:0C:4D:9C:8E:99:14:E7:E3:2E:A8:83:18:C0:D9:46:A7:9D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7780A6EFC7137EB4DAC1C300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8c95102-4168-3b2e-95e8-919f3c45fc44.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 19527 IP address blocks: 34.2.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:a6:ef:c7:13:7e:b4:da:c1:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=1673c556-9d6d-488f-9112-cb04b6056fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:b4:67:60:31:03:31:88:72:3b:34:fe:91: 9c:7a:66:3c:08:fc:7d:45:f4:bb:73:b6:12:07:26: 38:eb:90:36:5c:5a:39:54:22:c7:2a:ce:cc:a6:eb: 86:e2:fb:6c:61:10:4b:40:10:39:9f:60:18:6b:f1: 89:e4:d1:e6:c3:4d:ce:1e:25:2e:e5:3f:d0:f4:2a: 36:fe:bd:d2:82:81:9b:d8:eb:63:52:4a:6f:34:9e: ce:2e:1e:92:71:87:c8:9e:cb:a5:bf:a6:5c:48:80: 6d:ff:17:88:b5:55:55:db:af:30:76:ed:72:ef:c1: 75:80:79:a1:04:ea:c2:fb:ee:84:ab:c1:e5:d9:a5: b7:6a:d2:81:85:71:d5:47:84:9d:9e:28:b6:03:79: 0a:06:d9:76:5c:02:18:e8:4b:68:67:7b:ba:34:f0: 73:76:3a:40:fa:17:99:85:24:a6:5e:27:29:5d:8f: 3d:50:e3:f9:e9:cc:3c:61:a8:c8:4f:16:43:dd:1f: 02:6f:d0:5e:32:8b:37:34:0d:22:b0:30:31:b6:84: 06:a9:d1:eb:11:86:c5:51:64:63:cb:e1:fd:9d:c8: 3a:fc:38:83:66:74:18:7e:92:d2:1f:06:a8:be:96: 89:0f:cb:95:86:ad:f6:65:6a:f0:cf:07:50:09:ee: 9e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:22:1D:0C:4D:9C:8E:99:14:E7:E3:2E:A8:83:18:C0:D9:46:A7:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8c95102-4168-3b2e-95e8-919f3c45fc44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ff:a6:24:84:42:df:b8:c2:7e:69:d4:fc:1a:92:3b:93:27: 88:a2:37:54:9c:66:ae:97:d0:4c:ea:5d:9e:35:20:77:f9:3a: fc:f6:77:25:ea:94:79:c2:bf:25:f7:92:59:99:ff:45:5b:fa: 63:af:1a:77:94:88:ea:e4:d9:c0:e0:a7:88:ad:9c:b0:8c:4f: cd:4f:1a:e0:38:be:51:aa:6d:ac:32:dd:55:d2:d3:ec:c6:63: 9b:e5:dc:9a:35:2e:4b:f1:24:1f:5d:58:cb:08:fa:0e:98:38: a4:d3:48:f5:49:45:a8:d9:93:6e:23:91:43:63:f2:ca:e3:6f: c5:42:da:8c:4b:bf:02:2d:6d:15:9d:19:65:e7:b6:bb:23:fb: 35:17:e5:d2:ab:c6:65:51:75:b2:a9:d0:83:2f:8c:6b:0e:91: 59:33:fd:95:56:5e:ee:99:6c:5a:5c:c0:65:ea:f0:ea:45:ea: 64:f7:42:3a:55:e6:42:22:66:a8:41:ca:bd:f2:ae:14:8f:62: c6:65:dd:13:31:65:ef:07:4e:c1:07:c2:40:2f:fd:fc:11:8d: c3:3c:3e:83:34:37:2a:2e:0a:ab:68:cf:c7:b8:52:55:ba:4e: c4:e0:eb:e9:85:56:b6:91:e8:07:12:f9:d9:fd:96:a1:c1:97: ee:b5:d9:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gKbvxxN+tNrBwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MTY3M2M1NTYtOWQ2ZC00ODhmLTkxMTItY2IwNGI2MDU2ZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPa0Z2AxAzGIcjs0/pGcemY8CPx9RfS7c7YS ByY465A2XFo5VCLHKs7MpuuG4vtsYRBLQBA5n2AYa/GJ5NHmw03OHiUu5T/Q9Co2 /r3SgoGb2OtjUkpvNJ7OLh6ScYfInsulv6ZcSIBt/xeItVVV268wdu1y78F1gHmh BOrC++6Eq8Hl2aW3atKBhXHVR4Sdnii2A3kKBtl2XAIY6EtoZ3u6NPBzdjpA+heZ hSSmXicpXY89UOP56cw8YajITxZD3R8Cb9BeMos3NA0isDAxtoQGqdHrEYbFUWRj y+H9ncg6/DiDZnQYfpLSHwaovpaJD8uVhq32ZWrwzwdQCe6eVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYiHQxNnI6ZFOfjLqiDGMDZRqedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjhjOTUxMDItNDE2OC0z YjJlLTk1ZTgtOTE5ZjNjNDVmYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf/piSEQt+4wn5p1PwakjuTJ4iiN1ScZq6X0EzqXZ41IHf5Ovz2dyXq lHnCvyX3klmZ/0Vb+mOvGneUiOrk2cDgp4itnLCMT81PGuA4vlGqbawy3VXS0+zG Y5vl3Jo1LkvxJB9dWMsI+g6YOKTTSPVJRajZk24jkUNj8srjb8VC2oxLvwItbRWd GWXntrsj+zUX5dKrxmVRdbKp0IMvjGsOkVkz/ZVWXu6ZbFpcwGXq8OpF6mT3QjpV 5kIiZqhByr3yrhSPYsZl3RMxZe8HTsEHwkAv/fwRjcM8PoM0NyouCqtoz8e4UlW6 TsTg6+mFVraR6AcS+dn9lqHBl+612SE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:31 2025 by rpki-client