$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd865953-ecca-346e-bd8e-2ad11918a410.roa File: dd865953-ecca-346e-bd8e-2ad11918a410.roa (raw, json) Hash identifier: AyrZ5e3b9sKXByUTFdIHktwDAx8KJVgCIt4uJvpvv4o= Subject key identifier: 4D:75:F5:42:C6:E8:91:3A:4D:2B:D9:EF:C6:F5:CA:CF:11:20:5C:C8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AD93671E63BF64F450F195680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd865953-ecca-346e-bd8e-2ad11918a410.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396982 IP address blocks: 34.13.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:71:e6:3b:f6:4f:45:0f:19:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=8b92b3db-c837-4589-8f54-2e259f392f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:8b:3b:0f:b9:4f:b4:8c:ce:77:48:c7:0f: 2c:7c:a8:aa:db:1c:e7:19:83:cd:92:c2:02:a9:39: 8c:a0:fe:ad:b7:35:69:b8:5d:c4:37:29:10:fd:ce: 60:e2:76:b5:07:b7:b8:3e:3c:a3:ce:24:25:47:5e: 7c:bd:7d:da:5e:9e:46:bf:44:64:83:a5:75:ee:4d: 3a:6e:8d:de:04:56:7e:76:dd:49:7f:11:79:f6:57: 2f:9f:a4:37:fc:4e:c7:3e:41:d8:10:41:f1:02:8b: 5f:84:81:44:05:b9:07:1b:38:e1:3e:81:b1:d2:f2: 2d:6b:91:48:ca:b8:65:b1:35:f3:f7:a2:84:e0:9c: 59:60:f6:04:46:a2:ad:a7:3a:3c:85:b0:90:4b:95: 30:6a:ba:34:ae:09:38:8f:dd:da:22:05:6e:db:8d: 38:89:db:41:18:d2:1a:5f:dd:be:55:10:cb:83:9d: 2b:cc:c2:80:d0:1b:66:65:90:34:37:37:36:4d:1a: 02:b6:6a:fb:76:25:f2:23:c5:2f:23:a7:36:7c:ac: b6:f7:1e:0e:63:7e:da:35:19:81:54:6b:01:f4:f0: 52:6e:db:74:e9:77:30:49:71:17:42:81:fa:6f:b0: c4:41:a9:3a:d7:29:70:61:ab:64:5f:26:2b:5e:da: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:75:F5:42:C6:E8:91:3A:4D:2B:D9:EF:C6:F5:CA:CF:11:20:5C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd865953-ecca-346e-bd8e-2ad11918a410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:06:25:a3:8d:0f:ce:3f:dc:2d:12:fa:56:95:f4:9b:3b:8a: b8:af:c0:bf:09:9d:dc:0a:11:fa:d5:15:3e:4e:53:ce:b0:29: 7c:b9:c7:59:79:3d:5e:2b:19:46:8f:e5:ba:de:2d:c7:ce:c6: 04:46:06:12:1c:e9:90:a5:0c:74:74:9c:23:11:99:c1:cf:7e: cf:a9:4e:c7:e7:7d:b2:72:f0:2f:ff:0a:73:18:92:3d:83:32: 54:fa:1c:7c:fe:e7:39:49:72:d8:8c:aa:e1:b5:59:e6:61:5c: 66:ec:fe:43:05:4d:ea:4a:e8:ca:33:68:63:28:98:ad:cb:03: cf:e7:cf:da:16:e2:a8:a1:1e:03:f0:21:ea:6c:02:8b:b3:20: 06:16:db:bd:5a:8f:1d:32:04:fb:b2:ae:9a:0d:e5:8c:f5:21: 0b:6c:d9:65:3c:c3:9d:b3:0b:cf:f8:5a:65:61:c4:85:2b:4c: a0:ad:fb:10:1d:fc:1a:cf:ee:24:5b:52:c2:54:89:25:be:76: 4f:3f:b1:9d:c4:13:dd:be:d5:22:8d:8b:88:d8:04:54:75:15: 87:4f:77:68:bd:e4:0a:e8:44:00:61:be:e3:94:b1:22:79:ce: 77:aa:46:ca:1c:59:3d:3a:f2:91:25:18:2e:44:ba:f4:a9:8f: 6c:87:2a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNnHmO/ZPRQ8ZVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk OGI5MmIzZGItYzgzNy00NTg5LThmNTQtMmUyNTlmMzkyZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbmLOw+5T7SMzndIxw8sfKiq2xznGYPNksIC qTmMoP6ttzVpuF3ENykQ/c5g4na1B7e4PjyjziQlR158vX3aXp5Gv0Rkg6V17k06 bo3eBFZ+dt1JfxF59lcvn6Q3/E7HPkHYEEHxAotfhIFEBbkHGzjhPoGx0vIta5FI yrhlsTXz96KE4JxZYPYERqKtpzo8hbCQS5Uwaro0rgk4j93aIgVu2404idtBGNIa X92+VRDLg50rzMKA0BtmZZA0Nzc2TRoCtmr7diXyI8UvI6c2fKy29x4OY37aNRmB VGsB9PBSbtt06XcwSXEXQoH6b7DEQak61ylwYatkXyYrXtoaZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE119ULG6JE6TSvZ78b1ys8RIFzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ4NjU5NTMtZWNjYS0z NDZlLWJkOGUtMmFkMTE5MThhNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIg2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMGJaOND84/3C0S+laV9Js7irivwL8JndwKEfrVFT5OU86wKXy5x1l5 PV4rGUaP5breLcfOxgRGBhIc6ZClDHR0nCMRmcHPfs+pTsfnfbJy8C//CnMYkj2D MlT6HHz+5zlJctiMquG1WeZhXGbs/kMFTepK6MozaGMomK3LA8/nz9oW4qihHgPw IepsAouzIAYW271ajx0yBPuyrpoN5Yz1IQts2WU8w52zC8/4WmVhxIUrTKCt+xAd /BrP7iRbUsJUiSW+dk8/sZ3EE92+1SKNi4jYBFR1FYdPd2i95AroRABhvuOUsSJ5 zneqRsocWT068pElGC5EuvSpj2yHKqE= -----END CERTIFICATE-----Generated at Sat Aug 23 22:04:57 2025 by rpki-client