$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa File: ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa (raw, json) Hash identifier: 3E9YwgDYLll+pbKW7QpfRc9dteC3Txw77xPNNN2W8rI= Subject key identifier: 18:D6:66:A1:91:B2:76:37:C0:40:EF:C7:D3:DF:92:21:FF:6F:6E:2A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD251FAD6E36DB306FD80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.88.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d2:51:fa:d6:e3:6d:b3:06:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=8c1e6509-6673-425c-bd17-aff3cf3e1989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9a:33:ab:78:6d:32:b6:74:f0:a6:66:5f:b6: ae:6a:d0:f6:2a:e1:9f:fa:c5:68:38:a4:5f:05:7c: 0e:c9:bb:a9:f9:f5:c2:fe:d7:28:cb:47:ea:37:92: 5c:94:9b:a2:8c:09:c3:d3:88:41:c9:4a:62:48:c6: 7a:d0:76:5c:e8:47:ac:0f:68:38:28:97:45:fe:3a: ca:cd:51:98:07:3f:7a:c8:1f:d2:2b:ad:54:11:dd: 62:f4:23:4b:fc:b1:5c:a5:80:d3:d5:0b:fd:19:be: 72:98:fd:17:98:aa:cf:bf:56:fc:9f:a0:76:db:e9: 38:0c:cf:92:47:9a:55:46:35:43:2e:1b:b4:69:56: b4:b4:4c:02:3e:52:83:e5:ff:26:26:20:e4:a5:8d: 8d:b7:8f:ad:51:dd:6d:f1:66:8a:1b:92:b7:f9:62: cb:25:38:59:fc:ac:08:11:4d:2c:ac:de:80:90:e8: 3e:66:35:55:d9:84:21:c9:21:e5:28:b2:45:54:7b: 1a:3c:04:89:f4:ca:27:db:06:e2:f9:fc:e0:62:3b: 82:c3:dd:a4:63:db:73:01:c9:23:2a:4e:d1:9c:f9: f6:34:50:7a:f7:e3:46:54:a8:24:33:92:67:b0:6a: 65:f9:aa:34:07:b1:8b:53:0e:51:41:41:e8:8f:d9: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D6:66:A1:91:B2:76:37:C0:40:EF:C7:D3:DF:92:21:FF:6F:6E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d1:8e:c0:db:90:13:42:92:26:1d:1b:df:87:b6:c5:dd:d6: 56:4b:b1:c2:bb:ec:f7:47:64:d1:15:8e:43:38:a4:62:9d:44: 63:86:50:d9:7d:17:ef:e8:5d:54:2d:d3:3a:b8:1e:90:f5:9a: 45:e0:87:0f:ae:b8:ae:f0:52:77:66:01:de:a5:18:c4:42:60: dc:e8:92:d7:60:4f:cf:11:16:ef:49:6f:01:f0:b0:5c:a7:10: 9e:70:3c:3e:b0:7a:f5:ea:20:90:12:ee:7c:d4:35:d9:96:07: 9e:17:21:86:73:bf:46:c4:61:58:bd:9e:88:83:a5:76:d1:b1: 06:5a:b7:1a:4c:50:5f:6f:99:36:3f:a7:b0:1b:9e:33:a2:3b: 9b:5e:52:99:32:e9:79:23:62:9c:71:fb:13:ab:46:e5:1b:31: b2:91:0a:a9:d9:1c:01:8a:09:a2:d4:cb:2d:b4:69:17:59:e9: 80:26:11:ce:07:ff:51:a8:33:19:10:e1:59:e4:1d:35:b0:bb: fe:d6:66:ad:7f:32:d8:c4:c6:89:03:0e:35:6d:84:27:05:80: 06:d4:58:92:0d:8f:ca:24:35:87:da:19:72:76:15:c8:9b:42: 73:1d:15:c7:97:82:48:6d:12:1e:ef:5d:ee:ea:77:4a:0c:fd: c8:7d:ca:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29JR+tbjbbMG/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OGMxZTY1MDktNjY3My00MjVjLWJkMTctYWZmM2NmM2UxOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pozq3htMrZ08KZmX7auatD2KuGf+sVoOKRf BXwOybup+fXC/tcoy0fqN5JclJuijAnD04hByUpiSMZ60HZc6EesD2g4KJdF/jrK zVGYBz96yB/SK61UEd1i9CNL/LFcpYDT1Qv9Gb5ymP0XmKrPv1b8n6B22+k4DM+S R5pVRjVDLhu0aVa0tEwCPlKD5f8mJiDkpY2Nt4+tUd1t8WaKG5K3+WLLJThZ/KwI EU0srN6AkOg+ZjVV2YQhySHlKLJFVHsaPASJ9Mon2wbi+fzgYjuCw92kY9tzAckj Kk7RnPn2NFB69+NGVKgkM5JnsGpl+ao0B7GLUw5RQUHoj9m7wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjWZqGRsnY3wEDvx9PfkiH/b24qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmYzYWVlNzktODA3MC0z MDhiLWI1ZmUtNWZhNDZiZmE2NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnRjsDbkBNCkiYdG9+HtsXd1lZLscK77PdHZNEVjkM4pGKdRGOGUNl9 F+/oXVQt0zq4HpD1mkXghw+uuK7wUndmAd6lGMRCYNzoktdgT88RFu9JbwHwsFyn EJ5wPD6wevXqIJAS7nzUNdmWB54XIYZzv0bEYVi9noiDpXbRsQZatxpMUF9vmTY/ p7AbnjOiO5teUpky6XkjYpxx+xOrRuUbMbKRCqnZHAGKCaLUyy20aRdZ6YAmEc4H /1GoMxkQ4VnkHTWwu/7WZq1/MtjExokDDjVthCcFgAbUWJINj8okNYfaGXJ2Fcib QnMdFceXgkhtEh7vXe7qd0oM/ch9yrM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:24 2025 by rpki-client