$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f92d401-135d-3fb7-ab4c-7332e762c911.roa File: 0f92d401-135d-3fb7-ab4c-7332e762c911.roa (raw, json) Hash identifier: ezFSLkwRyn86CP318GcqDnbShtAvDozC8YiVn24l2Gk= Subject key identifier: 04:8A:29:C8:AF:0C:CE:C8:27:6D:5C:A4:8B:4B:83:77:83:13:7D:BC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A5CFB352BEC18F0D884D0FE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f92d401-135d-3fb7-ab4c-7332e762c911.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 396982 IP address blocks: 34.144.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:35:2b:ec:18:f0:d8:84:d0:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=63cc7587-2a2f-4ce4-9a47-6e4041168ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:5e:32:c6:b2:0f:68:ff:d0:c2:1b:41:96: 99:e5:b5:4b:7d:b3:ed:70:f0:2f:7c:df:67:57:91: 18:40:09:17:89:4c:f3:2c:cb:0f:cb:77:f4:bc:8b: 02:50:1d:0d:83:6a:74:83:0b:8c:0e:49:be:c5:03: 97:14:74:dc:6a:3e:22:3f:dd:f0:7f:b6:9e:1d:ba: c4:a0:1d:22:7c:f6:23:8f:e9:07:da:94:41:b5:7b: 6d:32:87:db:d7:07:11:c3:38:d4:6b:2f:13:63:38: 37:4d:f6:cd:b6:cf:7f:44:21:02:2c:57:6b:e6:6f: b9:f9:6e:cc:bf:9f:0f:cf:99:03:9c:6c:84:6f:02: a0:f3:dc:b9:2e:38:3e:32:d6:7c:62:01:d2:79:8d: 4d:7c:ac:76:f1:85:5f:05:62:42:73:8e:87:1a:06: d5:f4:fe:07:59:70:ef:4e:6e:d1:5c:31:85:05:cc: f9:0d:6a:1e:23:2b:d3:5d:c6:59:36:96:0e:97:6e: 9a:63:98:44:16:48:95:13:9c:1e:9a:1a:42:11:ed: a6:40:74:b2:b5:6a:d8:f7:3d:f6:f1:91:0c:8d:5d: 2c:2d:b7:5a:36:0b:5f:37:11:59:de:ef:53:73:ce: 97:2d:53:e3:44:73:ba:d6:2f:e0:8e:0d:f3:8f:34: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:29:C8:AF:0C:CE:C8:27:6D:5C:A4:8B:4B:83:77:83:13:7D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f92d401-135d-3fb7-ab4c-7332e762c911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:fd:f4:7f:d8:94:a7:95:99:4e:12:f5:6d:32:88:30:c7:cc: f5:10:9b:4e:7f:fe:8c:7b:5b:db:c5:74:26:2e:c7:19:3b:cc: 09:7e:6f:82:2b:b2:5f:b5:50:b3:ed:28:c2:6f:4e:2e:89:3c: 33:fa:72:dd:fa:4a:fb:4c:9c:94:71:ad:67:ab:50:82:3c:72: 93:9a:e4:44:f1:b9:ec:2b:4a:a4:24:e4:25:30:eb:9b:7b:bd: 12:b7:6f:55:46:f3:1c:0c:78:4a:09:b7:61:00:ca:e0:63:7a: d3:96:1b:82:71:6b:1e:44:de:8b:4b:f7:b0:cc:fa:f3:f0:01: 98:69:99:0a:6f:9d:e8:eb:e3:34:fd:ed:0c:42:32:bd:49:71: 2b:df:39:dd:88:6e:2d:54:fc:4c:e0:0d:68:3b:f8:55:da:88: f4:d8:3c:77:a5:ed:59:a1:eb:0a:d9:ea:4e:91:d4:f2:5e:79: ff:62:f1:26:ef:33:26:87:c0:19:5b:c3:c5:ba:8b:55:61:9a: f5:11:2c:b6:c6:f8:d9:f6:73:9f:28:0b:a2:56:9d:87:37:fc: b5:25:81:bd:d5:77:7e:12:32:d6:b7:eb:aa:95:1c:c6:63:73: ac:da:49:5b:4a:5a:44:78:81:37:ca:fe:e2:04:84:5b:75:a2: c5:93:30:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zUr7Bjw2ITQ/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NjNjYzc1ODctMmEyZi00Y2U0LTlhNDctNmU0MDQxMTY4ZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqReMsayD2j/0MIbQZaZ5bVLfbPtcPAvfN9n V5EYQAkXiUzzLMsPy3f0vIsCUB0Ng2p0gwuMDkm+xQOXFHTcaj4iP93wf7aeHbrE oB0ifPYjj+kH2pRBtXttMofb1wcRwzjUay8TYzg3TfbNts9/RCECLFdr5m+5+W7M v58Pz5kDnGyEbwKg89y5Ljg+MtZ8YgHSeY1NfKx28YVfBWJCc46HGgbV9P4HWXDv Tm7RXDGFBcz5DWoeIyvTXcZZNpYOl26aY5hEFkiVE5wemhpCEe2mQHSytWrY9z32 8ZEMjV0sLbdaNgtfNxFZ3u9Tc86XLVPjRHO61i/gjg3zjzSz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASKKcivDM7IJ21cpItLg3eDE328MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY5MmQ0MDEtMTM1ZC0z ZmI3LWFiNGMtNzMzMmU3NjJjOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIpCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz99H/YlKeVmU4S9W0yiDDHzPUQm05//ox7W9vFdCYuxxk7zAl+b4Ir sl+1ULPtKMJvTi6JPDP6ct36SvtMnJRxrWerUII8cpOa5ETxuewrSqQk5CUw65t7 vRK3b1VG8xwMeEoJt2EAyuBjetOWG4Jxax5E3otL97DM+vPwAZhpmQpvnejr4zT9 7QxCMr1JcSvfOd2Ibi1U/EzgDWg7+FXaiPTYPHel7Vmh6wrZ6k6R1PJeef9i8Sbv MyaHwBlbw8W6i1VhmvURLLbG+Nn2c58oC6JWnYc3/LUlgb3Vd34SMta366qVHMZj c6zaSVtKWkR4gTfK/uIEhFt1osWTMIg= -----END CERTIFICATE-----Generated at Tue Jul 1 11:53:51 2025 by rpki-client