$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd6ae5bb-fd7a-3754-830f-96663c613bf3.roa File: fd6ae5bb-fd7a-3754-830f-96663c613bf3.roa (raw, json) Hash identifier: its74VofTz2MubIpLkQ3hoeZKefOQZ/DX18ASq5oXBM= Subject key identifier: D9:4B:83:4C:78:92:D4:53:2B:6D:98:1A:58:CF:0B:1B:BA:EE:50:0E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AA590ED6AD0B11C4EE27B2180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd6ae5bb-fd7a-3754-830f-96663c613bf3.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 34.191.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:ed:6a:d0:b1:1c:4e:e2:7b:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=44e7b7a6-01fb-4143-afde-37c5e1b0e7ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:67:96:4e:78:0f:cd:2b:8a:de:04:3c:52: e1:44:56:9f:31:d3:b7:68:ac:e3:d5:c2:ce:46:28: 96:f7:a6:2e:e8:a5:b2:31:6b:1b:fe:11:fe:34:34: 75:ec:83:9f:6d:58:f9:50:ba:b6:0e:39:92:79:7a: 3e:0b:a1:1d:35:1f:c5:75:9d:30:37:54:bb:c2:67: 1f:ba:8c:f0:e4:f8:2c:e0:26:94:52:ec:e5:56:ef: 0f:47:80:05:cf:d0:3c:5c:a7:55:c6:3b:28:c5:17: 46:96:32:43:9a:48:93:2c:fb:b9:c5:22:e2:6f:c8: a2:d1:d7:61:90:5a:02:bf:4a:6c:44:11:2b:7b:2e: 16:4f:e6:ac:7e:41:da:8f:e0:cf:b9:0c:ed:ba:8d: 25:f2:cd:21:7e:83:b7:83:7c:32:c1:90:41:64:1f: 0b:80:c0:f0:17:b2:21:6b:6d:8e:a7:77:44:12:5d: d0:fd:0e:6f:56:cd:0b:35:e1:91:ed:37:77:33:f4: 77:a9:9f:90:3e:41:e0:41:ca:fe:b3:e8:bd:e1:49: 86:27:62:25:9d:fe:1f:74:0d:7a:1c:ad:bb:ef:46: 9c:91:ce:26:01:f3:8f:99:cb:ac:20:78:d1:ca:10: 7e:4c:4d:cc:07:2d:96:08:a5:3f:e9:cf:c8:b0:1c: ab:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4B:83:4C:78:92:D4:53:2B:6D:98:1A:58:CF:0B:1B:BA:EE:50:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd6ae5bb-fd7a-3754-830f-96663c613bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e1:50:c4:3d:37:bd:2a:8c:61:7a:af:0c:a4:79:03:35:ea: 5f:98:f1:04:db:a7:eb:a9:82:18:53:26:7b:23:a6:fb:31:41: e9:4b:f6:25:05:81:e4:ad:e9:14:25:a3:06:81:b6:d3:76:03: bb:7a:7f:95:4d:2b:2a:16:96:a9:22:28:5c:20:54:3a:17:e9: b3:02:c9:ee:0b:e3:76:98:f0:4d:58:9f:0c:ed:a5:d5:73:34: a6:ab:5c:e1:1e:c4:e1:ea:24:5b:4c:c7:b6:78:73:d3:28:f5: 3e:07:a7:a0:3d:a7:90:86:63:b2:af:a9:7e:5a:80:ce:12:84: fd:5b:c6:6c:02:01:d3:11:5e:e0:40:3e:b3:bd:e5:29:be:09: 65:9e:34:e6:c4:10:71:f6:0a:4c:e4:8e:cf:46:c1:a6:45:b0: 30:5a:c1:c6:9d:f5:d2:1a:b5:fa:3a:95:a2:1c:63:ad:60:85: 54:0b:26:f0:b4:0d:bc:38:2e:6a:b5:52:b8:57:0f:8f:2c:a9: bb:a1:4c:7d:fd:d4:9b:ee:6b:43:c3:18:a8:bb:36:63:c5:2c: 20:a8:6a:95:3c:ae:bf:07:26:f7:58:6c:03:64:86:72:e7:7e: 05:fb:39:e4:c5:0e:5f:27:0c:24:31:35:14:b9:ec:32:15:b5: 9f:4e:90:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkO1q0LEcTuJ7IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk NDRlN2I3YTYtMDFmYi00MTQzLWFmZGUtMzdjNWUxYjBlN2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Vnlk54D80rit4EPFLhRFafMdO3aKzj1cLO RiiW96Yu6KWyMWsb/hH+NDR17IOfbVj5ULq2DjmSeXo+C6EdNR/FdZ0wN1S7wmcf uozw5Pgs4CaUUuzlVu8PR4AFz9A8XKdVxjsoxRdGljJDmkiTLPu5xSLib8ii0ddh kFoCv0psRBErey4WT+asfkHaj+DPuQztuo0l8s0hfoO3g3wywZBBZB8LgMDwF7Ih a22Op3dEEl3Q/Q5vVs0LNeGR7Td3M/R3qZ+QPkHgQcr+s+i94UmGJ2Ilnf4fdA16 HK2770ackc4mAfOPmcusIHjRyhB+TE3MBy2WCKU/6c/IsByrZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlLg0x4ktRTK22YGljPCxu67lAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmQ2YWU1YmItZmQ3YS0z NzU0LTgzMGYtOTY2NjNjNjEzYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7hUMQ9N70qjGF6rwykeQM16l+Y8QTbp+upghhTJnsjpvsxQelL9iUF geSt6RQlowaBttN2A7t6f5VNKyoWlqkiKFwgVDoX6bMCye4L43aY8E1YnwztpdVz NKarXOEexOHqJFtMx7Z4c9Mo9T4Hp6A9p5CGY7KvqX5agM4ShP1bxmwCAdMRXuBA PrO95Sm+CWWeNObEEHH2Ckzkjs9GwaZFsDBawcad9dIatfo6laIcY61ghVQLJvC0 Dbw4Lmq1UrhXD48sqbuhTH391Jvua0PDGKi7NmPFLCCoapU8rr8HJvdYbANkhnLn fgX7OeTFDl8nDCQxNRS57DIVtZ9OkPI= -----END CERTIFICATE-----Generated at Wed Aug 6 11:06:47 2025 by rpki-client