$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c49511-4966-319b-aac9-f48e28f14587.roa File: 50c49511-4966-319b-aac9-f48e28f14587.roa (raw, json) Hash identifier: PnkUmJMawjGcMMY/nzLaF8TOWVKtdxRB9feOcxInJco= Subject key identifier: 76:AC:14:8C:D6:3A:6B:3B:E2:4A:FB:DF:02:A7:CE:0D:CF:65:8C:8F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AA590EF745310CC69FCA73080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c49511-4966-319b-aac9-f48e28f14587.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 34.191.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:ef:74:53:10:cc:69:fc:a7:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=0d8f9373-3b74-4a3a-8572-9a3c912e1e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:66:46:f0:db:59:1e:a1:e1:06:ab:4d:19: 06:c9:cd:e1:a7:97:77:ea:ca:b2:ba:50:c2:6a:f6: 2d:23:49:62:79:12:3d:0a:ba:58:72:f5:bc:2c:87: 59:cc:1a:b4:06:f2:ab:ca:8b:26:20:d7:b8:06:62: 17:e8:f9:0c:ae:93:a2:1e:9d:45:1a:d8:32:15:1c: fd:a4:94:ca:ed:73:83:15:8d:d0:fd:9f:0c:ac:ad: a2:43:ad:fb:97:07:ef:a6:48:87:63:b8:88:f9:40: ff:23:35:18:9f:1e:fa:4f:06:c1:68:1f:7f:58:ae: e5:65:5f:8f:d4:d6:6a:b6:6d:82:5d:95:13:32:0e: 82:8c:f7:59:8b:ea:39:0c:86:75:5e:5c:5e:74:bb: d4:d7:d2:44:0d:e4:9f:ce:58:e1:52:9a:02:b1:9a: ee:71:b4:02:59:f7:ab:8f:fd:56:2b:f3:f8:7a:e6: 0a:80:75:9d:8f:d7:eb:25:02:52:ac:1c:73:c7:21: 04:0c:fe:31:8d:0b:3c:62:b2:f0:2f:91:57:c6:53: c1:2b:c4:58:ce:8e:4e:ad:d9:f7:49:44:28:e0:66: b3:aa:e2:51:3a:8f:4f:8b:46:31:8f:49:38:c9:14: b9:ab:fa:9c:ba:f9:28:2c:77:ce:19:c1:00:93:6b: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AC:14:8C:D6:3A:6B:3B:E2:4A:FB:DF:02:A7:CE:0D:CF:65:8C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c49511-4966-319b-aac9-f48e28f14587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7b:01:2d:bf:f1:c0:50:d8:60:ba:c8:ee:3a:13:99:18:05: be:02:0f:3d:f9:f3:fb:7e:63:ab:f0:a2:f2:66:85:70:91:63: 99:89:84:64:01:ce:cb:61:d8:15:59:79:b0:0b:47:4c:d9:0a: 0b:12:09:47:cd:22:33:ef:53:d7:64:64:01:5a:18:de:af:21: f0:9c:3c:50:27:3f:6c:da:16:f4:52:07:63:ee:4b:5d:98:11: f0:93:4a:a6:68:e9:31:29:9b:82:7e:2b:9f:c5:2a:95:4e:9a: 05:cc:a6:4a:49:59:74:78:d2:12:98:56:de:4b:c5:9e:17:d9: bd:dc:eb:24:87:8a:b0:d5:82:6d:db:46:08:a7:a0:83:38:d4: cb:c2:55:1e:af:e3:a0:46:b6:04:ab:b4:5b:51:92:be:c0:6d: 3b:ab:be:e6:04:e3:d6:f1:cf:94:6d:71:73:82:83:53:e9:c2: 4b:4f:25:ac:ed:91:1d:a7:64:cf:ae:ba:d5:8a:64:6b:23:fc: ee:5d:8d:49:93:20:e9:91:e6:7d:6f:2f:39:ca:71:31:c7:3d: 41:22:d0:29:b5:0d:33:9a:60:b3:b3:53:b1:fc:2f:af:32:85: 14:c4:5d:8d:7d:84:85:31:a2:a1:45:ac:99:22:8e:93:3b:26: 71:6c:70:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkO90UxDMafynMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk MGQ4ZjkzNzMtM2I3NC00YTNhLTg1NzItOWEzYzkxMmUxZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop9mRvDbWR6h4QarTRkGyc3hp5d36sqyulDC avYtI0lieRI9CrpYcvW8LIdZzBq0BvKryosmINe4BmIX6PkMrpOiHp1FGtgyFRz9 pJTK7XODFY3Q/Z8MrK2iQ637lwfvpkiHY7iI+UD/IzUYnx76TwbBaB9/WK7lZV+P 1NZqtm2CXZUTMg6CjPdZi+o5DIZ1XlxedLvU19JEDeSfzljhUpoCsZrucbQCWfer j/1WK/P4euYKgHWdj9frJQJSrBxzxyEEDP4xjQs8YrLwL5FXxlPBK8RYzo5Ordn3 SUQo4GazquJROo9Pi0Yxj0k4yRS5q/qcuvkoLHfOGcEAk2vIhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHasFIzWOms74kr73wKnzg3PZYyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTBjNDk1MTEtNDk2Ni0z MTliLWFhYzktZjQ4ZTI4ZjE0NTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd7AS2/8cBQ2GC6yO46E5kYBb4CDz358/t+Y6vwovJmhXCRY5mJhGQB zsth2BVZebALR0zZCgsSCUfNIjPvU9dkZAFaGN6vIfCcPFAnP2zaFvRSB2PuS12Y EfCTSqZo6TEpm4J+K5/FKpVOmgXMpkpJWXR40hKYVt5LxZ4X2b3c6ySHirDVgm3b RginoIM41MvCVR6v46BGtgSrtFtRkr7AbTurvuYE49bxz5RtcXOCg1PpwktPJazt kR2nZM+uutWKZGsj/O5djUmTIOmR5n1vLznKcTHHPUEi0Cm1DTOaYLOzU7H8L68y hRTEXY19hIUxoqFFrJkijpM7JnFscCU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:25:29 2025 by rpki-client