$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/721b62e8-1688-3dd4-a5b6-ef0af4471d79.roa File: 721b62e8-1688-3dd4-a5b6-ef0af4471d79.roa (raw, json) Hash identifier: GCJSV79dhx0xo7rfL4DogJrsPTC20OqJgztTPPrqcCc= Subject key identifier: 25:92:4A:8E:16:54:D2:C5:77:E4:63:BB:E8:23:CB:C0:2F:FE:B5:F5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AC710FDAA647FD88D3EDD6B40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/721b62e8-1688-3dd4-a5b6-ef0af4471d79.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 396982 IP address blocks: 34.62.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:fd:aa:64:7f:d8:8d:3e:dd:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=5c2151d1-c68a-42d1-b549-32538ed9a03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2e:48:ac:7e:1c:6a:c5:7c:c8:d1:c9:8b:9d: cb:0a:10:ef:06:80:a4:d9:35:e1:6f:b4:2b:a7:69: 3e:40:9d:5e:66:be:40:39:de:b6:d5:1a:17:ba:29: c5:ee:f2:c0:43:cd:19:b1:d3:a7:24:83:32:e7:ec: e9:f8:32:f9:a8:32:df:d6:a2:26:64:88:12:5d:fc: 70:b7:ee:99:f0:dc:44:b5:8c:0e:e3:3f:92:0a:67: eb:d1:68:50:b2:fc:2e:30:e2:e4:9d:fc:7f:fd:6e: e3:60:f0:42:37:02:71:99:e9:ba:d5:44:d3:b9:6d: 2a:8d:31:1b:23:2f:7c:56:7c:e1:42:f3:20:6c:ef: 60:14:64:9b:a5:6c:4d:4f:44:8a:ff:c1:7a:83:fa: 69:c7:de:1b:01:75:06:84:5b:1a:68:f7:86:d1:ad: 56:3b:5e:5f:56:51:74:d9:85:63:16:cb:41:02:e8: 5c:47:43:46:6d:7e:7b:87:79:8d:dd:c0:b3:0d:4f: 11:21:bb:2d:f6:f7:96:8a:72:c8:cc:a7:18:1c:25: be:b3:48:10:09:15:9c:e3:f0:11:63:a1:90:2b:44: 8c:9b:25:57:53:08:56:1a:2e:c8:49:f3:ca:27:2c: ce:97:5d:0d:05:ce:2f:98:45:95:22:d0:8b:e3:91: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:92:4A:8E:16:54:D2:C5:77:E4:63:BB:E8:23:CB:C0:2F:FE:B5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/721b62e8-1688-3dd4-a5b6-ef0af4471d79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.62.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:94:f6:5d:95:60:b0:e2:b2:d7:2b:97:46:ec:3d:8d:62:52: 31:e9:9d:ec:f9:6c:98:87:8a:58:1b:40:01:23:cc:d3:b3:7d: ef:ae:1f:06:02:04:02:45:13:1e:ed:d5:4a:d3:c8:01:98:73: c7:08:63:40:04:06:5d:cb:7f:9f:cf:86:79:3f:5b:76:44:00: 0b:dd:79:c5:01:69:da:a2:40:1b:68:d8:b5:65:2b:fb:d4:f2: fa:99:30:ee:07:94:4a:46:c8:9c:0a:6c:91:94:45:d4:fc:30: a7:de:e8:a7:85:d9:f6:02:1c:45:e9:5b:fa:72:9d:f3:51:65: 3a:a6:fb:5f:cc:18:00:80:6a:bc:0d:78:0b:c9:bf:a8:1a:74: fa:66:f2:1d:d2:1e:a6:50:d6:c9:b4:29:aa:bc:46:36:4c:02: 42:90:a4:77:bb:8e:d3:02:d5:d7:3b:1f:8c:16:40:59:f3:f8: 52:98:6f:f0:98:3c:86:d8:58:0f:73:4c:45:be:96:8a:40:46: 7a:2d:bf:6f:db:2d:0a:ea:ba:87:3d:7f:a5:f0:bb:bf:7c:70: 8b:b5:53:d3:22:bf:c0:2f:1c:1d:99:74:0b:c2:35:6e:c9:1b: 1d:72:d8:56:ea:92:06:1e:60:93:55:d6:90:77:f4:04:d2:1c: 7b:3b:48:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEP2qZH/YjT7da0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NWMyMTUxZDEtYzY4YS00MmQxLWI1NDktMzI1MzhlZDlhMDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC5IrH4casV8yNHJi53LChDvBoCk2TXhb7Qr p2k+QJ1eZr5AOd621RoXuinF7vLAQ80ZsdOnJIMy5+zp+DL5qDLf1qImZIgSXfxw t+6Z8NxEtYwO4z+SCmfr0WhQsvwuMOLknfx//W7jYPBCNwJxmem61UTTuW0qjTEb Iy98VnzhQvMgbO9gFGSbpWxNT0SK/8F6g/ppx94bAXUGhFsaaPeG0a1WO15fVlF0 2YVjFstBAuhcR0NGbX57h3mN3cCzDU8RIbst9veWinLIzKcYHCW+s0gQCRWc4/AR Y6GQK0SMmyVXUwhWGi7ISfPKJyzOl10NBc4vmEWVItCL45FMIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWSSo4WVNLFd+Rju+gjy8Av/rX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzIxYjYyZTgtMTY4OC0z ZGQ0LWE1YjYtZWYwYWY0NDcxZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIj6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeU9l2VYLDistcrl0bsPY1iUjHpnez5bJiHilgbQAEjzNOzfe+uHwYC BAJFEx7t1UrTyAGYc8cIY0AEBl3Lf5/Phnk/W3ZEAAvdecUBadqiQBto2LVlK/vU 8vqZMO4HlEpGyJwKbJGURdT8MKfe6KeF2fYCHEXpW/pynfNRZTqm+1/MGACAarwN eAvJv6gadPpm8h3SHqZQ1sm0Kaq8RjZMAkKQpHe7jtMC1dc7H4wWQFnz+FKYb/CY PIbYWA9zTEW+lopARnotv2/bLQrquoc9f6Xwu798cIu1U9Miv8AvHB2ZdAvCNW7J Gx1y2FbqkgYeYJNV1pB39ATSHHs7SBQ= -----END CERTIFICATE-----Generated at Sun Aug 24 06:19:34 2025 by rpki-client