$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5d6ca54-2922-35e6-ab0e-1970ddde96cd.roa File: a5d6ca54-2922-35e6-ab0e-1970ddde96cd.roa (raw, json) Hash identifier: KIpNtSrhtKiqnBlgQrj38t1CHBd2Vg6tzLpRSqIx5/M= Subject key identifier: C5:7A:0C:52:51:B7:7D:09:34:55:D6:FB:DB:66:40:71:88:A2:D0:DE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AA590F0F64B3195ED2C6E7400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5d6ca54-2922-35e6-ab0e-1970ddde96cd.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 19527 IP address blocks: 34.191.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:f0:f6:4b:31:95:ed:2c:6e:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=0c1281a7-771a-4feb-b17c-1514811d8de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:16:fe:dd:53:88:d7:23:7e:c9:50:5f:5c: e7:fd:a5:2e:55:94:cd:f7:63:08:59:80:b3:95:1d: 90:39:0e:c3:ea:b3:d6:56:2a:c4:7b:91:df:79:9f: e6:70:bb:6a:3a:a0:48:a3:b3:dc:1b:00:b6:b2:01: 9d:3e:ea:3a:20:e2:d2:2f:9e:45:61:55:64:b8:ad: 43:3e:76:45:bc:a2:72:b1:e6:97:6e:dc:f7:fa:eb: d5:a9:09:51:79:d0:4a:fa:5e:a9:0c:d7:1d:f1:b1: c4:4d:49:fc:5c:3f:2f:4f:31:a0:17:eb:0f:43:43: a0:80:0e:a1:0f:9b:3b:27:75:c2:e3:50:4f:51:58: 6f:b3:8c:37:64:d9:e8:19:96:70:1e:e0:b6:0e:c5: ff:c1:5b:87:b2:58:36:06:9a:4f:ca:f3:bf:45:25: 8f:44:6e:93:d8:40:7d:0c:32:10:cd:55:ef:52:2d: 42:b8:f4:44:9d:f4:9e:ea:b4:80:5e:95:3f:5c:7c: 55:de:62:c5:b0:7d:d7:2a:29:9d:94:03:1f:01:f6: e8:48:4d:83:23:a8:f2:fb:b8:89:91:bf:be:5c:28: 5d:29:dc:ef:a6:35:84:d4:0d:90:5e:81:b6:ed:e4: 05:dd:10:ea:0f:22:69:ad:0e:ad:1a:c9:ff:87:47: ca:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7A:0C:52:51:B7:7D:09:34:55:D6:FB:DB:66:40:71:88:A2:D0:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5d6ca54-2922-35e6-ab0e-1970ddde96cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:23:de:7a:07:2b:63:8a:5a:4a:11:a6:5e:5f:05:e8:27:02: 47:27:e5:0f:a5:2a:c2:bf:21:ce:e9:25:5e:68:fc:19:b8:4c: 04:6c:d6:61:85:07:b9:3d:20:8b:14:18:c1:9f:a0:a2:0c:f4: 83:7b:44:15:f1:2e:6d:c9:91:d1:3d:b3:11:1b:3f:80:03:32: a2:87:8d:73:06:11:15:92:dc:84:fd:78:30:38:55:15:d6:47: f1:18:14:23:6d:d1:a6:e9:aa:de:57:79:7f:d2:50:33:ea:b3: d5:b6:c1:b1:1e:d7:5c:9d:0f:fd:b9:0f:a8:b8:a8:a5:6a:9a: c0:bf:aa:5a:ba:4c:16:07:a8:b3:77:be:91:a2:e8:fd:f4:59: e9:94:ea:22:64:98:c6:62:83:dc:48:c0:e9:8c:63:bc:0c:df: ff:5b:31:0e:0b:56:33:2f:7f:26:60:d7:2e:1b:be:9d:24:fb: 92:72:5a:29:44:fe:c4:73:00:d2:8f:8f:b6:f2:d9:39:dc:0b: 8c:b9:eb:af:8d:96:98:97:d3:47:c0:26:27:70:22:0e:a9:37: ca:0e:1e:7a:a9:5f:64:1f:2a:2f:f7:3f:4b:29:f3:59:a7:63: fa:c4:8b:8d:26:ba:6b:36:d5:ea:5a:08:0c:34:37:d2:43:ab: 13:9b:8c:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkPD2SzGV7SxudAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk MGMxMjgxYTctNzcxYS00ZmViLWIxN2MtMTUxNDgxMWQ4ZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHoW/t1TiNcjfslQX1zn/aUuVZTN92MIWYCz lR2QOQ7D6rPWVirEe5HfeZ/mcLtqOqBIo7PcGwC2sgGdPuo6IOLSL55FYVVkuK1D PnZFvKJyseaXbtz3+uvVqQlRedBK+l6pDNcd8bHETUn8XD8vTzGgF+sPQ0OggA6h D5s7J3XC41BPUVhvs4w3ZNnoGZZwHuC2DsX/wVuHslg2BppPyvO/RSWPRG6T2EB9 DDIQzVXvUi1CuPREnfSe6rSAXpU/XHxV3mLFsH3XKimdlAMfAfboSE2DI6jy+7iJ kb++XChdKdzvpjWE1A2QXoG27eQF3RDqDyJprQ6tGsn/h0fK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV6DFJRt30JNFXW+9tmQHGIotDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVkNmNhNTQtMjkyMi0z NWU2LWFiMGUtMTk3MGRkZGU5NmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4j3noHK2OKWkoRpl5fBegnAkcn5Q+lKsK/Ic7pJV5o/Bm4TARs1mGF B7k9IIsUGMGfoKIM9IN7RBXxLm3JkdE9sxEbP4ADMqKHjXMGERWS3IT9eDA4VRXW R/EYFCNt0abpqt5XeX/SUDPqs9W2wbEe11ydD/25D6i4qKVqmsC/qlq6TBYHqLN3 vpGi6P30WemU6iJkmMZig9xIwOmMY7wM3/9bMQ4LVjMvfyZg1y4bvp0k+5JyWilE /sRzANKPj7by2TncC4y566+NlpiX00fAJidwIg6pN8oOHnqpX2QfKi/3P0sp81mn Y/rEi40mums21epaCAw0N9JDqxObjIs= -----END CERTIFICATE-----Generated at Sat Aug 23 23:35:40 2025 by rpki-client