$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa File: cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa (raw, json) Hash identifier: NcKy9PawXb/Vz7YSS1HMJcdu2tr3LwcBAxJqFZ+qIOc= Subject key identifier: E8:D6:77:C5:65:E3:69:E7:4A:EF:83:4E:02:DB:8C:F1:F6:E5:EA:B6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AA590EE43A5D2B8E02379F280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 19527 IP address blocks: 34.190.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:ee:43:a5:d2:b8:e0:23:79:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=53fe2441-8ed0-4b81-98d6-570a721b0812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:c6:0b:4d:23:16:02:0a:ab:db:9a:60:39: 01:84:67:11:dd:76:63:9e:b1:8a:47:90:c6:63:7a: 73:7a:d1:b4:62:ee:ed:e1:1b:73:31:5c:c3:c3:a2: 6d:48:c9:cf:1d:56:4a:cd:c9:2a:ee:de:70:65:ee: bd:4c:12:97:c3:0f:c3:b1:6b:ed:0d:5d:1b:ab:b4: f4:46:3c:ab:54:b0:7a:ce:cc:b9:68:44:4b:3f:37: 6b:97:48:fb:8c:db:01:db:d7:fc:80:c7:2d:c9:9e: 75:c3:c0:7e:98:47:9e:ea:67:2a:b5:90:ce:5c:65: 52:bc:b3:04:b5:b5:14:14:e1:8e:4e:08:ae:42:1f: 2b:eb:c9:70:78:52:20:ef:a5:7f:6d:ab:57:2d:ac: 70:7b:51:47:cf:e2:4c:d4:55:35:9c:a9:8a:1a:81: 86:46:25:a6:84:ba:de:d2:04:6d:b5:8b:73:82:b9: eb:47:22:48:ae:87:90:8e:58:64:fa:c6:5f:46:ce: b1:31:85:d7:9a:3c:a2:b8:fc:19:74:40:00:4f:f1: e9:a5:ea:e7:0a:cf:dd:32:cb:fa:72:ce:13:ac:25: 15:30:ac:aa:d2:22:25:e1:1a:72:b9:19:78:58:35: a5:6d:20:1d:41:57:3d:16:09:0d:d5:4a:22:72:fe: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D6:77:C5:65:E3:69:E7:4A:EF:83:4E:02:DB:8C:F1:F6:E5:EA:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:37:01:6f:26:24:9a:7d:24:48:39:ea:0e:05:5b:6c:4b:ab: 10:d6:a5:95:ea:d5:0b:20:af:4d:79:6c:28:38:4e:38:90:92: ca:77:9a:3f:fd:19:4c:47:58:fc:cd:b2:9f:05:59:63:b0:1c: 0f:36:0d:60:74:32:a5:2b:61:fb:3c:6f:5d:35:e2:4c:9c:1c: 79:52:db:7e:4e:74:73:bf:a1:5c:35:32:c0:2b:d4:48:0f:af: 59:31:95:cb:4a:23:80:0f:71:be:75:41:09:aa:54:9e:1c:9d: d5:8e:4a:6f:72:e3:3d:79:ae:16:96:be:78:87:9a:8c:f8:5b: be:ec:14:de:cd:44:c0:0a:b5:07:35:70:36:93:ec:22:a5:c9: 42:5f:5d:e2:92:1e:e3:bd:d7:d3:fa:24:73:31:f8:04:73:dc: f2:c9:4a:8d:92:c5:25:1b:20:09:57:01:23:cb:5d:3e:3c:3f: 40:28:7b:5d:8d:c0:9e:5a:05:50:28:be:84:0b:a9:3d:4b:84: 56:1f:7e:a4:79:2b:e9:75:fd:fc:43:4d:e5:61:e6:9a:95:ff: 7f:e2:d7:bd:de:b9:57:e8:8f:48:1e:ea:14:73:af:43:4b:0d: e9:75:6e:c8:21:06:8d:41:83:d9:72:7a:7d:88:c6:a3:52:ba: 9e:bb:96:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkO5DpdK44CN58oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk NTNmZTI0NDEtOGVkMC00YjgxLTk4ZDYtNTcwYTcyMWIwODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySHGC00jFgIKq9uaYDkBhGcR3XZjnrGKR5DG Y3pzetG0Yu7t4RtzMVzDw6JtSMnPHVZKzckq7t5wZe69TBKXww/DsWvtDV0bq7T0 RjyrVLB6zsy5aERLPzdrl0j7jNsB29f8gMctyZ51w8B+mEee6mcqtZDOXGVSvLME tbUUFOGOTgiuQh8r68lweFIg76V/batXLaxwe1FHz+JM1FU1nKmKGoGGRiWmhLre 0gRttYtzgrnrRyJIroeQjlhk+sZfRs6xMYXXmjyiuPwZdEAAT/HppernCs/dMsv6 cs4TrCUVMKyq0iIl4RpyuRl4WDWlbSAdQVc9FgkN1Uoicv7QbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjWd8Vl42nnSu+DTgLbjPH25eq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZjZjI5MWMtOGRhYS0z YTk1LWI5NDItZjRkMjI0ZmRiZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE3AW8mJJp9JEg56g4FW2xLqxDWpZXq1Qsgr015bCg4TjiQksp3mj/9 GUxHWPzNsp8FWWOwHA82DWB0MqUrYfs8b1014kycHHlS235OdHO/oVw1MsAr1EgP r1kxlctKI4APcb51QQmqVJ4cndWOSm9y4z15rhaWvniHmoz4W77sFN7NRMAKtQc1 cDaT7CKlyUJfXeKSHuO919P6JHMx+ARz3PLJSo2SxSUbIAlXASPLXT48P0Aoe12N wJ5aBVAovoQLqT1LhFYffqR5K+l1/fxDTeVh5pqV/3/i173euVfoj0ge6hRzr0NL Del1bsghBo1Bg9lyen2IxqNSup67lkE= -----END CERTIFICATE-----Generated at Wed Aug 6 09:43:12 2025 by rpki-client