$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa File: 2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa (raw, json) Hash identifier: dfhRxl5rEWjdiFN9L7BHpNnqu+j+i/AeUm1xI8FeOwc= Subject key identifier: 28:C7:AA:B0:AE:4B:03:3B:23:78:1E:7A:E8:C9:B7:A4:9B:02:EB:8B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEA87D0D6020E69120700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.123.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ea:87:d0:d6:02:0e:69:12:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=81b83388-bdb2-4062-964e-034649620303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:7b:d0:db:88:3f:77:3a:86:a8:2e:fe:5a: 4f:4a:10:3d:bf:38:33:c6:c5:0d:12:45:39:64:d1: 62:7e:9a:55:d5:b5:ab:0a:3c:e8:a8:79:a6:dd:6d: c0:69:f5:7c:eb:8a:1c:68:85:06:fd:73:a4:7f:12: fe:e1:d8:a8:57:52:1b:36:f2:64:e4:60:9e:ff:29: ee:ad:ec:0d:6b:eb:62:91:c0:98:0b:cf:6e:96:62: e0:81:58:1e:0a:0b:66:85:54:84:00:64:45:f6:f2: d8:35:7a:81:63:31:1b:59:b0:30:29:08:2e:b8:47: b3:cc:05:80:bb:28:ac:41:9f:63:83:3d:81:1f:17: 59:95:c4:c5:f8:f8:e7:b7:f2:4c:13:64:7c:25:0a: 13:ae:db:8f:f8:49:b2:f6:e8:0d:1c:3b:da:3a:ae: 60:27:c2:4c:04:e1:df:68:99:ad:f1:e2:cb:67:2e: 76:f8:dd:a2:33:53:7a:68:69:fe:31:2e:17:13:d2: 3e:0a:dc:3f:e0:fb:ac:ac:f4:2a:a3:23:21:b7:ad: 5f:12:a0:98:8b:ad:8b:77:34:4b:78:51:aa:69:e6: b9:1b:b8:66:70:f7:2b:ca:91:6d:46:c7:73:1c:7a: 5b:8a:c2:a4:50:55:4b:3f:84:bb:37:44:ed:59:52: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C7:AA:B0:AE:4B:03:3B:23:78:1E:7A:E8:C9:B7:A4:9B:02:EB:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7e:5b:65:98:ec:65:34:f9:b2:2b:4a:a7:f5:03:40:50:00: 7f:c8:fb:91:75:1f:a1:79:1f:7f:44:e9:09:4d:f8:42:53:7c: 8f:68:10:93:fa:f5:f1:2e:cb:59:f0:08:3e:76:1b:86:0a:05: aa:cf:48:6c:61:04:7e:36:65:18:c9:5d:37:99:96:b2:09:0d: 31:00:55:75:97:d7:f4:8c:c2:06:a5:1d:31:c4:d4:76:c0:39: 81:d1:33:f6:3d:fd:71:46:c7:bb:78:22:39:d6:4c:e0:5d:98: d2:c6:fc:6f:c5:d9:cb:24:d2:50:cd:aa:f5:e3:e9:c9:33:ba: d2:b2:a2:ac:76:73:b7:84:44:53:78:37:15:de:ff:b9:14:71: 3a:ed:4e:2c:db:d7:2b:bd:ac:bf:6a:c8:42:32:a8:9b:a9:c8: 61:b5:8b:94:ca:42:a6:16:c4:18:8e:78:0f:c4:df:52:39:05: 7d:54:52:84:85:a6:52:6f:65:3c:7f:f5:cc:a7:99:a8:d7:69: 9c:42:4f:c8:e2:f1:8e:d6:dd:bc:8b:76:f2:9e:a0:c2:5a:87: f4:c1:0b:65:6c:5d:5b:2f:40:51:56:1f:81:7b:89:b8:88:da: 6a:6c:d1:65:c5:cd:62:bf:09:ec:04:89:b4:e7:0b:f0:80:35: 56:19:33:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+qH0NYCDmkSBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODFiODMzODgtYmRiMi00MDYyLTk2NGUtMDM0NjQ5NjIwMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsat70NuIP3c6hqgu/lpPShA9vzgzxsUNEkU5 ZNFifppV1bWrCjzoqHmm3W3AafV864ocaIUG/XOkfxL+4dioV1IbNvJk5GCe/ynu rewNa+tikcCYC89ulmLggVgeCgtmhVSEAGRF9vLYNXqBYzEbWbAwKQguuEezzAWA uyisQZ9jgz2BHxdZlcTF+Pjnt/JME2R8JQoTrtuP+Emy9ugNHDvaOq5gJ8JMBOHf aJmt8eLLZy52+N2iM1N6aGn+MS4XE9I+Ctw/4PusrPQqoyMht61fEqCYi62LdzRL eFGqaea5G7hmcPcrypFtRsdzHHpbisKkUFVLP4S7N0TtWVIuDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjHqrCuSwM7I3geeujJt6SbAuuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmJkODViYTAtNTU0OS0z Y2E2LTk2ODEtMWM1MzFkY2QwYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN+W2WY7GU0+bIrSqf1A0BQAH/I+5F1H6F5H39E6QlN+EJTfI9oEJP6 9fEuy1nwCD52G4YKBarPSGxhBH42ZRjJXTeZlrIJDTEAVXWX1/SMwgalHTHE1HbA OYHRM/Y9/XFGx7t4IjnWTOBdmNLG/G/F2csk0lDNqvXj6ckzutKyoqx2c7eERFN4 NxXe/7kUcTrtTizb1yu9rL9qyEIyqJupyGG1i5TKQqYWxBiOeA/E31I5BX1UUoSF plJvZTx/9cynmajXaZxCT8ji8Y7W3byLdvKeoMJah/TBC2VsXVsvQFFWH4F7ibiI 2mps0WXFzWK/CewEibTnC/CANVYZM0k= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:40 2025 by rpki-client