$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bcdff21-8078-3549-9e52-ad3a3a30b9c9.roa File: 2bcdff21-8078-3549-9e52-ad3a3a30b9c9.roa (raw, json) Hash identifier: FJgHCp2hpgKES0HLlnEh6WFrs/dZQ+DDXybmE1px0E8= Subject key identifier: 28:DA:55:11:BB:37:01:CF:C1:CF:2C:87:8A:15:14:FB:A6:3C:EB:97 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBCBABC04D5C1D5854ACA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bcdff21-8078-3549-9e52-ad3a3a30b9c9.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.84.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:cb:ab:c0:4d:5c:1d:58:54:ac:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c4c51caa-c175-4d02-a784-1d943a1b937d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:27:27:8a:57:fe:48:fd:43:85:52:84:00:0b: 29:9c:0a:a5:25:49:9e:7a:42:fd:88:22:de:cb:c9: 0f:4a:2a:a6:e7:9a:a4:f8:e0:e6:10:87:45:6d:2e: d5:2b:64:88:bb:fd:df:2f:a0:5d:5c:48:29:de:3d: e0:ef:35:b9:8f:6b:37:25:4c:35:09:76:80:de:1f: 0f:7f:09:67:1a:3b:79:16:63:6d:9d:95:3f:bc:4e: f7:dd:42:da:d9:40:c4:97:44:6d:7b:76:98:75:2e: e7:69:77:49:c5:47:30:9f:eb:98:99:cf:69:c6:1c: 13:ea:69:14:b3:78:d6:83:b9:c0:77:8b:28:b5:65: df:e2:27:23:4c:7f:13:ea:3b:95:3e:1c:ec:6e:63: 39:fe:7e:01:a0:43:f0:0c:42:b2:25:91:66:ea:e7: 3a:df:11:95:7a:c4:ff:c2:83:c4:46:f5:e9:83:ad: 83:93:75:24:7b:7f:69:c5:6a:84:e2:09:ef:e9:76: aa:e4:9b:37:5c:ae:c7:5a:8e:ba:20:d1:c4:48:4e: e3:1e:ea:3b:ba:f5:eb:73:e3:7f:24:50:2b:ee:5e: 8d:d2:11:aa:de:79:d7:44:b3:cd:3f:75:6d:ba:1b: fd:3d:ff:0c:3a:f5:1f:b6:fe:e1:d4:e7:f6:bc:bd: c9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DA:55:11:BB:37:01:CF:C1:CF:2C:87:8A:15:14:FB:A6:3C:EB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bcdff21-8078-3549-9e52-ad3a3a30b9c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:28:7a:76:aa:c5:c2:34:3c:ba:ba:bf:27:ea:c4:ad:5f:fc: 40:4f:ff:9f:de:98:32:8a:27:83:cd:cf:f4:60:f6:b5:69:70: f3:d0:d4:35:a6:e0:61:06:80:6f:b4:44:8a:67:ea:67:cb:2f: 40:95:36:b2:f0:c4:32:f8:5a:ef:9f:de:15:af:c6:86:28:a2: de:86:d8:67:4d:c7:a4:5e:c1:19:63:85:f6:01:cb:4e:51:a9: a1:65:e2:75:56:2d:43:c7:bd:b6:c7:47:b2:cd:cb:cc:cf:18: ba:82:23:ad:cb:e4:d4:cd:53:02:c6:be:16:9a:5b:ff:ad:f4: 86:2f:2c:43:89:23:ef:a0:ec:e3:13:8b:89:8b:0f:a4:20:ff: 10:7c:12:c9:70:73:bd:83:60:18:87:78:2d:1d:98:61:7b:33: 59:6d:60:9c:cd:7a:b5:de:a0:39:ab:af:e1:45:14:59:c1:a1: 51:8a:20:d6:9b:b8:32:2a:0f:03:35:80:3c:2e:ce:42:8e:c1: 47:65:4e:e9:a6:27:06:66:cf:f5:ef:56:32:6e:e2:d7:ea:0c: 1e:5f:97:4c:64:f2:f5:77:fd:d8:a9:61:71:51:01:c3:51:10: cb:c2:7b:f4:a4:0c:5c:5d:71:49:f4:25:31:1d:6b:ef:a1:e9: d1:15:da:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28urwE1cHVhUrKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzRjNTFjYWEtYzE3NS00ZDAyLWE3ODQtMWQ5NDNhMWI5MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnycnilf+SP1DhVKEAAspnAqlJUmeekL9iCLe y8kPSiqm55qk+ODmEIdFbS7VK2SIu/3fL6BdXEgp3j3g7zW5j2s3JUw1CXaA3h8P fwlnGjt5FmNtnZU/vE733ULa2UDEl0Rte3aYdS7naXdJxUcwn+uYmc9pxhwT6mkU s3jWg7nAd4sotWXf4icjTH8T6juVPhzsbmM5/n4BoEPwDEKyJZFm6uc63xGVesT/ woPERvXpg62Dk3Uke39pxWqE4gnv6Xaq5Js3XK7HWo66INHESE7jHuo7uvXrc+N/ JFAr7l6N0hGq3nnXRLPNP3Vtuhv9Pf8MOvUftv7h1Of2vL3JUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjaVRG7NwHPwc8sh4oVFPumPOuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmJjZGZmMjEtODA3OC0z NTQ5LTllNTItYWQzYTNhMzBiOWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEoenaqxcI0PLq6vyfqxK1f/EBP/5/emDKKJ4PNz/Rg9rVpcPPQ1DWm 4GEGgG+0RIpn6mfLL0CVNrLwxDL4Wu+f3hWvxoYoot6G2GdNx6RewRljhfYBy05R qaFl4nVWLUPHvbbHR7LNy8zPGLqCI63L5NTNUwLGvhaaW/+t9IYvLEOJI++g7OMT i4mLD6Qg/xB8Eslwc72DYBiHeC0dmGF7M1ltYJzNerXeoDmrr+FFFFnBoVGKINab uDIqDwM1gDwuzkKOwUdlTummJwZmz/XvVjJu4tfqDB5fl0xk8vV3/dipYXFRAcNR EMvCe/SkDFxdcUn0JTEda++h6dEV2qs= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:18 2025 by rpki-client