$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa File: 0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa (raw, json) Hash identifier: LRJLVxw3lb4iVpPBBxOxlAw7BwLjedqehRYy+1PyI7s= Subject key identifier: 52:20:15:65:AC:7A:F2:CB:C0:1B:19:9A:F1:83:F4:B7:74:CB:3B:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC7B7AE4F2C9B0303FD80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c7:b7:ae:4f:2c:9b:03:03:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=f37cf444-0e86-4307-8d1c-1c6da800b9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:68:8b:04:46:3d:9e:d3:c4:db:31:cb:69:d4: 98:bc:c3:b8:41:52:ad:05:3e:6a:6f:38:05:09:df: 78:ed:ea:09:54:0b:eb:f8:65:6d:92:9f:4a:ce:75: ee:b5:a0:8e:03:4d:88:e6:1b:da:50:31:3e:1a:c7: 26:c6:a1:1f:eb:79:f4:1f:a6:71:9d:48:2c:1a:da: 7d:27:b5:37:c2:29:94:d9:07:da:02:0b:7c:f2:55: 6b:89:e3:15:dd:71:b5:25:a6:b8:9f:58:dc:2f:82: 7c:2b:d4:47:89:fb:5d:a8:ec:bc:89:41:b3:16:de: 03:e2:79:d6:3f:48:ad:ea:95:28:c4:2d:9d:1b:38: 21:6c:bc:d9:80:16:65:35:c7:82:83:c1:bd:06:bb: dc:47:5f:7d:f6:dc:58:eb:ef:21:68:93:47:1a:98: 5a:22:7a:c2:93:bb:0f:60:b8:d5:b4:92:5b:3f:6f: 81:78:33:94:a9:ee:db:c4:e7:9f:41:bc:eb:be:8b: c8:5c:6a:7a:ac:a4:57:60:e5:ad:b9:05:45:fd:6d: 64:2e:1b:06:5b:80:dd:06:a2:b1:64:4b:3b:30:6c: ca:4a:5f:80:38:d1:d1:4a:ac:e1:31:e3:e2:5a:33: 7e:ed:30:4f:1d:8d:c2:71:85:50:c4:9c:8c:46:a7: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:20:15:65:AC:7A:F2:CB:C0:1B:19:9A:F1:83:F4:B7:74:CB:3B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.21.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:43:63:a3:7d:75:a4:31:22:3b:6f:2b:7b:57:24:e2:57:8d: 9a:ca:da:84:2b:2a:7a:61:9a:93:dd:b0:59:0b:26:0b:70:21: 49:4a:13:a5:dd:fb:a1:42:42:c0:f3:fe:10:a3:72:e9:ec:4e: d5:0c:3f:1e:f6:20:8c:62:69:2b:0b:65:2a:58:0f:7a:05:72: 99:e7:7a:d3:2c:62:38:50:87:fc:1c:f7:4b:e5:34:f4:ae:e7: 1e:1a:48:c9:67:ba:ca:6f:c9:9f:97:17:f4:0c:72:a5:ed:0b: 01:aa:26:51:09:6a:98:da:9c:2b:00:59:b4:b3:5c:a8:eb:d5: 2c:00:17:f0:39:dd:f8:a7:1b:b7:22:65:3b:71:ea:cc:1e:02: a6:95:84:d8:3e:38:a9:f0:d9:3f:b0:ef:69:40:31:b5:ac:9c: 36:96:6e:de:10:e3:da:9b:01:a1:17:eb:b3:7d:0e:e4:42:71: e6:55:e5:05:39:38:9a:3d:c3:c9:ec:15:6d:02:24:59:2c:d7: 8b:d5:68:47:39:57:e4:8c:15:fc:f6:a4:61:f3:e1:f0:83:3c: bd:a4:c6:74:b4:3f:ad:40:47:d4:b7:aa:0e:cb:00:7d:53:0b: aa:a4:7b:4a:4d:36:d6:a5:db:4f:b9:5d:1a:1e:99:c6:2a:8b: ed:57:f2:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28e3rk8smwMD/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjM3Y2Y0NDQtMGU4Ni00MzA3LThkMWMtMWM2ZGE4MDBiOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGiLBEY9ntPE2zHLadSYvMO4QVKtBT5qbzgF Cd947eoJVAvr+GVtkp9KznXutaCOA02I5hvaUDE+GscmxqEf63n0H6ZxnUgsGtp9 J7U3wimU2QfaAgt88lVrieMV3XG1Jaa4n1jcL4J8K9RHiftdqOy8iUGzFt4D4nnW P0it6pUoxC2dGzghbLzZgBZlNceCg8G9BrvcR1999txY6+8haJNHGphaInrCk7sP YLjVtJJbP2+BeDOUqe7bxOefQbzrvovIXGp6rKRXYOWtuQVF/W1kLhsGW4DdBqKx ZEs7MGzKSl+AONHRSqzhMePiWjN+7TBPHY3CcYVQxJyMRqfBCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIgFWWsevLLwBsZmvGD9Ld0yzvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGE0M2U0NzgtZmM1Yy0z OWQ5LWJmMjMtZjU4ZTNjMDkzZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRDY6N9daQxIjtvK3tXJOJXjZrK2oQrKnphmpPdsFkLJgtwIUlKE6Xd +6FCQsDz/hCjcunsTtUMPx72IIxiaSsLZSpYD3oFcpnnetMsYjhQh/wc90vlNPSu 5x4aSMlnuspvyZ+XF/QMcqXtCwGqJlEJapjanCsAWbSzXKjr1SwAF/A53finG7ci ZTtx6sweAqaVhNg+OKnw2T+w72lAMbWsnDaWbt4Q49qbAaEX67N9DuRCceZV5QU5 OJo9w8nsFW0CJFks14vVaEc5V+SMFfz2pGHz4fCDPL2kxnS0P61AR9S3qg7LAH1T C6qke0pNNtal20+5XRoemcYqi+1X8go= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:08 2025 by rpki-client