$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9cc1346e-2660-382e-bce7-6c45f247a038.roa File: 9cc1346e-2660-382e-bce7-6c45f247a038.roa (raw, json) Hash identifier: TJvvNlMj6Qc0/gWiuaM9+/kHSz2lgG6hopUYIAdPHv0= Subject key identifier: E8:18:BA:99:51:AE:BE:AD:82:B0:2F:B1:BF:6C:AA:9A:0B:53:C4:F4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AEE269BA6A2B6C7D7D2DD3900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9cc1346e-2660-382e-bce7-6c45f247a038.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 396982 IP address blocks: 34.13.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:9b:a6:a2:b6:c7:d7:d2:dd:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=4fd909c7-7bc7-470c-9b10-33ba07d8a738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:53:e6:4e:54:52:4e:2f:aa:f4:96:42:50: 64:2b:ca:d5:74:5a:a4:4d:17:dd:f8:38:0f:a7:c9: d4:b1:ee:3b:f6:0a:c3:56:3d:63:18:5a:b6:f1:81: c1:82:f3:80:fd:f4:55:16:4e:1a:f7:67:1e:bb:30: ef:74:51:0e:c6:83:09:b3:c8:3a:99:e1:3d:b2:00: 78:48:be:f4:84:63:ba:4d:a3:6f:ff:50:43:90:43: 12:a0:b6:3a:67:78:1c:89:88:49:10:3b:b6:6a:6e: 22:ef:f2:72:a5:6a:9d:a1:a2:d1:8c:4d:16:49:31: 58:7e:48:bd:9a:55:76:7b:60:ef:30:48:51:2e:bd: b8:9b:ad:c2:d9:28:7d:b2:f6:52:37:6f:44:a9:93: 17:48:46:8f:b2:92:12:3d:7f:c1:2a:4c:46:f5:7e: 72:5b:53:f6:db:7d:a1:f3:93:dd:c0:14:35:15:8f: a3:48:ee:f1:1f:3b:5a:1f:7d:8f:ee:dd:9e:9e:08: d4:5c:8b:db:0b:3d:fa:ef:8b:1c:ec:a3:67:85:c3: f8:c0:2a:cd:9b:18:c3:3c:78:1b:ad:3f:5e:47:b3: 16:35:61:23:99:54:cc:21:cb:56:46:bc:2a:65:f9: 66:8e:d5:f6:af:c4:d1:03:a5:a2:5e:08:4d:63:a5: a7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:18:BA:99:51:AE:BE:AD:82:B0:2F:B1:BF:6C:AA:9A:0B:53:C4:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9cc1346e-2660-382e-bce7-6c45f247a038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e5:69:a2:61:b3:37:e9:a2:5d:37:82:d6:d7:91:9a:1a:62: 8e:e2:b2:aa:32:e6:75:79:a0:af:e2:b8:c5:09:d7:cf:8a:82: f8:40:ce:2b:e6:f1:28:9e:31:c2:3f:7d:c7:d5:5d:f0:67:c0: 32:53:d9:94:08:78:e1:6a:74:4f:5a:b3:9a:7c:8a:64:21:d2: e1:97:66:bd:13:50:90:d5:aa:07:76:e9:9c:59:6b:eb:40:53: aa:3a:ac:12:e8:de:4a:8a:ff:ad:2a:2f:ab:78:08:d9:5d:be: 35:98:f3:bc:82:76:4e:f3:18:a4:df:1b:7f:98:8f:0e:be:aa: b2:5a:eb:36:01:f7:c4:a2:00:42:3d:f1:14:f7:63:89:9c:7c: 48:00:5a:a1:22:ec:12:4f:3f:bc:43:62:24:04:cd:6b:c4:55: 9e:4d:21:98:6d:13:23:20:fa:ce:00:e9:c4:cd:b3:98:81:97: 7a:da:60:08:f8:c1:f1:42:16:35:b0:b2:38:e1:3a:6a:db:6f: a2:cb:52:47:50:e5:28:c4:83:19:3a:9d:e0:8a:51:4b:71:07: d1:d6:f4:6c:32:a7:1e:92:7e:a9:55:a4:d7:fe:23:52:6a:3d: e3:d8:f5:ac:a3:d7:58:ba:3a:6b:47:de:57:28:af:39:0b:b3: 7b:0f:4f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpumorbH19LdOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NGZkOTA5YzctN2JjNy00NzBjLTliMTAtMzNiYTA3ZDhhNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOFT5k5UUk4vqvSWQlBkK8rVdFqkTRfd+DgP p8nUse479grDVj1jGFq28YHBgvOA/fRVFk4a92ceuzDvdFEOxoMJs8g6meE9sgB4 SL70hGO6TaNv/1BDkEMSoLY6Z3gciYhJEDu2am4i7/JypWqdoaLRjE0WSTFYfki9 mlV2e2DvMEhRLr24m63C2Sh9svZSN29EqZMXSEaPspISPX/BKkxG9X5yW1P2232h 85PdwBQ1FY+jSO7xHztaH32P7t2engjUXIvbCz3674sc7KNnhcP4wCrNmxjDPHgb rT9eR7MWNWEjmVTMIctWRrwqZflmjtX2r8TRA6WiXghNY6WnIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgYuplRrr6tgrAvsb9sqpoLU8T0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWNjMTM0NmUtMjY2MC0z ODJlLWJjZTctNmM0NWYyNDdhMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIg1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3laaJhszfpol03gtbXkZoaYo7isqoy5nV5oK/iuMUJ18+KgvhAzivm 8SieMcI/fcfVXfBnwDJT2ZQIeOFqdE9as5p8imQh0uGXZr0TUJDVqgd26ZxZa+tA U6o6rBLo3kqK/60qL6t4CNldvjWY87yCdk7zGKTfG3+Yjw6+qrJa6zYB98SiAEI9 8RT3Y4mcfEgAWqEi7BJPP7xDYiQEzWvEVZ5NIZhtEyMg+s4A6cTNs5iBl3raYAj4 wfFCFjWwsjjhOmrbb6LLUkdQ5SjEgxk6neCKUUtxB9HW9Gwypx6SfqlVpNf+I1Jq PePY9ayj11i6OmtH3lcorzkLs3sPT5s= -----END CERTIFICATE-----Generated at Sat Aug 23 22:10:26 2025 by rpki-client