$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf872cc9-a86b-3ecb-b84f-06e73dff6867.roa File: cf872cc9-a86b-3ecb-b84f-06e73dff6867.roa (raw, json) Hash identifier: 9I6fzVj4GNtYFYVs1Q45d8dT1te+Aoq1xLTDE4kHY00= Subject key identifier: B1:50:42:DA:3C:1F:F4:31:7A:D9:83:85:4A:ED:97:0C:4E:F4:B6:16 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AC0472A127D6DE724C2007880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf872cc9-a86b-3ecb-b84f-06e73dff6867.roa Signing time: Tue 05 Aug 2025 02:39:21 +0000 ROA not before: Tue 05 Aug 2025 02:39:21 +0000 ROA not after: Mon 03 Nov 2025 03:39:21 +0000 asID: 396982 IP address blocks: 34.158.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:47:2a:12:7d:6d:e7:24:c2:00:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 5 02:39:21 2025 GMT Not After : Nov 3 03:39:21 2025 GMT Subject: CN=ca9a0b9a-6c0a-4625-95c8-4feb4bfc670d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:35:46:e7:05:35:90:94:60:c3:41:8d:f7: 84:47:cc:af:4c:41:52:ba:18:97:2b:c2:05:dc:d5: 82:06:29:12:2a:69:fc:fb:af:19:fa:aa:24:e8:58: a9:91:cd:2d:2f:9a:71:be:61:55:2e:f6:c0:b0:7a: 02:1c:13:fe:fb:b1:dc:b1:ed:0c:c3:38:df:8c:35: 2a:dd:00:82:42:c0:d7:d3:d6:e1:12:90:32:cd:3c: 92:51:fb:f5:b8:fa:2d:3a:9d:e3:99:15:90:66:93: 94:b0:2b:10:51:af:d9:d2:e5:e0:6f:f7:98:62:34: 89:16:46:5c:af:7c:f3:70:c7:e8:ba:1c:8d:f8:fc: af:f9:e2:d8:b9:fb:d5:1d:5e:76:27:10:1d:b6:ee: 9a:10:75:83:ca:fb:7a:15:55:40:72:2f:e7:e4:a9: 11:1c:a8:aa:cc:fd:43:f1:7a:2b:60:ca:3f:a7:69: f3:66:a5:a5:5d:0d:da:70:d4:49:8b:e1:4e:5d:c8: e2:32:7c:ba:9c:3e:b9:a6:fc:9a:99:f9:be:95:bb: 52:af:a7:d3:fb:a5:f9:3b:38:d5:cb:30:de:a9:13: 66:a3:9e:bc:76:5d:f4:a7:45:3c:7e:83:9d:79:f8: 68:b6:d9:c6:62:f4:b3:db:fb:c9:99:68:64:15:bf: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:50:42:DA:3C:1F:F4:31:7A:D9:83:85:4A:ED:97:0C:4E:F4:B6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf872cc9-a86b-3ecb-b84f-06e73dff6867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.158.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:da:9e:c5:c6:0c:88:fe:21:0a:86:c3:74:ed:db:10:69:ee: 28:32:70:c9:c7:11:66:6f:0f:7d:2c:04:69:bc:2e:4f:73:21: c2:31:8c:b3:28:f4:e8:32:b0:f8:42:a7:18:4f:86:d9:29:7a: 8c:20:e0:27:33:9f:48:18:2e:dc:dd:a7:9e:d2:f8:2f:02:ef: f6:8a:ff:ac:e1:47:d8:1f:c2:b8:54:8a:07:b5:e2:e3:94:ee: 4a:37:8a:ef:66:75:9e:08:7c:e9:f6:2f:36:0a:77:88:9d:2f: ab:f8:5e:bf:62:ca:d5:27:f0:af:28:db:aa:b6:87:bc:25:5c: 10:1d:20:09:d7:ad:16:71:e9:35:dd:84:47:4f:d8:3f:9c:83: 40:1e:be:ea:32:d9:a3:54:59:bc:af:50:33:0d:ca:6b:e7:99: a9:ab:1a:96:23:6f:69:fb:7b:08:f7:d5:7b:fd:3a:59:5e:97: a9:40:c2:3f:00:24:1c:fe:56:cc:ad:ae:43:93:32:a4:dd:23: 1c:46:af:66:cb:3b:e8:52:67:d0:2a:7c:4c:59:1e:2d:a2:2e: 34:c0:00:ae:fb:66:03:6a:50:0f:96:ec:c5:aa:ed:52:76:a6: 88:f1:76:27:d1:ea:f5:e0:ff:d7:57:44:66:17:f3:88:d5:7b: d2:de:98:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErARyoSfW3nJMIAeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgwNTAyMzkyMVoXDTI1MTEwMzAzMzkyMVowLzEtMCsGA1UEAxMk Y2E5YTBiOWEtNmMwYS00NjI1LTk1YzgtNGZlYjRiZmM2NzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+M1RucFNZCUYMNBjfeER8yvTEFSuhiXK8IF 3NWCBikSKmn8+68Z+qok6Fipkc0tL5pxvmFVLvbAsHoCHBP++7Hcse0MwzjfjDUq 3QCCQsDX09bhEpAyzTySUfv1uPotOp3jmRWQZpOUsCsQUa/Z0uXgb/eYYjSJFkZc r3zzcMfouhyN+Pyv+eLYufvVHV52JxAdtu6aEHWDyvt6FVVAci/n5KkRHKiqzP1D 8XorYMo/p2nzZqWlXQ3acNRJi+FOXcjiMny6nD65pvyamfm+lbtSr6fT+6X5OzjV yzDeqRNmo568dl30p0U8foOdefhottnGYvSz2/vJmWhkFb9phwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFQQto8H/QxetmDhUrtlwxO9LYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y4NzJjYzktYTg2Yi0z ZWNiLWI4NGYtMDZlNzNkZmY2ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIp7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7ansXGDIj+IQqGw3Tt2xBp7igycMnHEWZvD30sBGm8Lk9zIcIxjLMo 9OgysPhCpxhPhtkpeowg4Cczn0gYLtzdp57S+C8C7/aK/6zhR9gfwrhUige14uOU 7ko3iu9mdZ4IfOn2LzYKd4idL6v4Xr9iytUn8K8o26q2h7wlXBAdIAnXrRZx6TXd hEdP2D+cg0Aevuoy2aNUWbyvUDMNymvnmamrGpYjb2n7ewj31Xv9Ollel6lAwj8A JBz+VsytrkOTMqTdIxxGr2bLO+hSZ9AqfExZHi2iLjTAAK77ZgNqUA+W7MWq7VJ2 pojxdifR6vXg/9dXRGYX84jVe9LemGk= -----END CERTIFICATE-----Generated at Wed Aug 6 09:41:43 2025 by rpki-client