$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa File: 2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa (raw, json) Hash identifier: tNV5KQwOTVfmo1faLDCZ545F+C6CWOHRLMxnPYpYL2Y= Subject key identifier: 16:3B:5D:E2:D4:A0:3E:41:9E:0F:A4:63:B4:CA:C0:70:75:49:18:FC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9D39DB8FACB509107D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.128.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9d:39:db:8f:ac:b5:09:10:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=d3c06339-bdd2-4081-9cda-5661c90b4883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:4c:98:7d:0d:43:13:4f:24:c5:bb:b4:5c: c3:f6:65:97:59:3b:7b:ad:f8:93:57:eb:1d:a8:4d: df:c3:c5:72:49:dc:bc:8b:f7:bc:df:be:34:ff:87: 89:a4:1b:43:a1:11:77:2e:d1:ef:05:ea:83:65:49: 1f:d5:ca:c1:bf:ae:e2:ef:67:21:9d:f7:bb:89:94: 08:af:07:5e:87:75:f1:45:f6:94:b5:5a:c5:a4:76: 25:ea:0a:6d:da:62:05:c8:73:26:48:16:b0:de:c4: 0d:45:86:8f:b2:58:7d:41:9e:f2:bc:59:b3:2c:e5: 9e:7c:b7:3c:15:ea:0d:9e:83:39:a3:cd:15:11:0d: 19:96:04:7c:2b:4a:50:07:c7:cb:b8:db:10:1a:b1: 84:62:ff:35:69:fa:2b:b8:4d:4e:23:3f:3e:42:94: 8a:90:06:9f:78:81:cb:32:77:b0:e3:40:6a:df:97: 7b:da:f0:01:1e:41:92:8c:2c:e0:70:22:2f:1f:a4: 05:fd:a2:74:2c:28:28:0a:d7:af:52:bf:d8:af:00: a9:0a:16:1a:ab:be:6f:ad:1b:c6:39:7a:b7:d0:65: 24:32:7c:e4:01:c8:9f:04:bd:e8:6f:b4:74:9f:fc: 7b:70:9a:30:b8:7e:87:2b:33:c7:7c:88:7d:50:e0: 23:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3B:5D:E2:D4:A0:3E:41:9E:0F:A4:63:B4:CA:C0:70:75:49:18:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bf:bd:98:39:1f:86:40:57:c0:94:a5:92:11:a3:7d:24:b1: 2b:36:62:5d:55:61:ed:2b:9b:c6:f3:3c:b1:7d:b0:72:99:e6: 8e:e8:4c:66:72:fb:26:4a:76:cb:8f:81:1f:17:19:3f:9f:60: d0:d8:7c:3d:d1:03:10:45:4d:4d:60:f1:8e:08:8c:07:56:0d: 82:c5:b1:58:11:03:21:4d:53:c1:28:ae:87:12:ee:36:f7:df: c0:e1:c9:d5:45:2e:47:e0:1e:c6:76:d7:2e:0e:2b:6b:13:35: c2:83:31:d9:60:bc:c2:9f:b9:f3:56:31:b9:c7:b3:ba:d9:2f: f5:f3:fc:32:40:32:f8:24:6e:3e:e5:3c:71:71:87:ac:77:45: 1e:af:8f:9b:c9:40:84:2c:7b:91:bd:ca:1a:31:ff:26:72:1a: d7:ca:41:67:ab:df:2e:69:f6:ec:35:f4:e0:9c:23:2d:b2:df: 11:de:3e:ff:ad:d7:d3:47:82:8a:9d:d1:d3:ad:a4:e1:e3:2e: a2:b6:35:0f:73:cc:a8:1c:c9:bb:82:f9:ff:46:51:1a:9e:f0: 0a:c5:63:2a:6e:8a:bf:97:54:99:6d:97:0c:bc:41:92:3e:3a: 15:4d:18:9c:bd:ea:1f:dd:27:8c:40:03:4b:a8:72:4e:7b:9d: 35:43:54:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG250524+stQkQfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZDNjMDYzMzktYmRkMi00MDgxLTljZGEtNTY2MWM5MGI0ODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEpMmH0NQxNPJMW7tFzD9mWXWTt7rfiTV+sd qE3fw8VySdy8i/e83740/4eJpBtDoRF3LtHvBeqDZUkf1crBv67i72chnfe7iZQI rwdeh3XxRfaUtVrFpHYl6gpt2mIFyHMmSBaw3sQNRYaPslh9QZ7yvFmzLOWefLc8 FeoNnoM5o80VEQ0ZlgR8K0pQB8fLuNsQGrGEYv81aforuE1OIz8+QpSKkAafeIHL Mnew40Bq35d72vABHkGSjCzgcCIvH6QF/aJ0LCgoCtevUr/YrwCpChYaq75vrRvG OXq30GUkMnzkAcifBL3ob7R0n/x7cJowuH6HKzPHfIh9UOAjvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY7XeLUoD5Bng+kY7TKwHB1SRj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmNhNzMzYjItOGM5OS0z YWIyLWE3ZjQtNzUyYWQxNmUxMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIoAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+/vZg5H4ZAV8CUpZIRo30ksSs2Yl1VYe0rm8bzPLF9sHKZ5o7oTGZy +yZKdsuPgR8XGT+fYNDYfD3RAxBFTU1g8Y4IjAdWDYLFsVgRAyFNU8EorocS7jb3 38DhydVFLkfgHsZ21y4OK2sTNcKDMdlgvMKfufNWMbnHs7rZL/Xz/DJAMvgkbj7l PHFxh6x3RR6vj5vJQIQse5G9yhox/yZyGtfKQWer3y5p9uw19OCcIy2y3xHePv+t 19NHgoqd0dOtpOHjLqK2NQ9zzKgcybuC+f9GURqe8ArFYypuir+XVJltlwy8QZI+ OhVNGJy96h/dJ4xAA0uock57nTVDVJQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:16 2025 by rpki-client