$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5dd307-17ba-331d-92b9-e7ee09ef8339.roa File: 2d5dd307-17ba-331d-92b9-e7ee09ef8339.roa (raw, json) Hash identifier: 04J37xIiS+WPFRIioFl4gnsOf3LR5VntyFIwQTFQNgo= Subject key identifier: 17:E7:58:B8:3B:3E:73:AA:5B:3D:53:B6:9F:F0:53:2D:08:A9:EA:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBCA49C0A0415631C19AB8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5dd307-17ba-331d-92b9-e7ee09ef8339.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.91.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ca:49:c0:a0:41:56:31:c1:9a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=91a5448d-8ef0-4e6d-9aca-ee62bec7a95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:15:cb:d2:57:26:62:a6:83:db:29:f4:20: c8:71:c5:ce:8c:7f:b9:68:a8:a1:bc:96:8b:d0:17: 15:04:4d:3b:bf:fa:2f:8d:a4:e4:0b:cc:f3:c1:7b: c0:0e:2d:06:b3:9c:5b:c6:82:d4:c7:45:48:24:d8: 95:e9:f1:25:55:3e:c2:33:20:04:27:95:df:b6:aa: 46:f4:4d:3b:0c:65:e1:cc:1d:44:61:6e:88:98:4a: c1:4d:bd:dd:cd:64:c2:2f:ee:27:18:1f:3d:03:92: 09:32:54:6c:17:2e:62:c4:fd:13:67:e5:0c:27:b3: 60:ad:50:f2:64:03:a9:f5:75:fb:67:7d:bb:cb:51: 7f:bf:1a:94:8d:b7:67:b6:4f:4f:ac:19:25:a1:73: c0:71:77:14:5c:b7:c5:4d:d5:c9:c7:4e:ec:cf:12: c5:4f:59:be:6b:7f:36:1b:03:a0:17:bf:f3:a7:34: 92:d7:90:12:94:7c:82:84:35:1b:b6:ea:17:99:8e: af:0b:3a:aa:94:b6:80:ca:fa:a9:fd:51:66:0e:6e: e5:64:50:17:91:c7:12:21:fb:f9:30:e3:a2:a2:9d: 71:53:a1:2d:b6:71:c1:25:9e:4f:0f:50:a0:c5:21: 03:60:25:ea:78:9a:b2:b0:04:c3:c2:15:a9:80:c5: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E7:58:B8:3B:3E:73:AA:5B:3D:53:B6:9F:F0:53:2D:08:A9:EA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5dd307-17ba-331d-92b9-e7ee09ef8339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.91.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:31:f4:ec:38:aa:47:93:bb:97:a1:2f:b9:8b:eb:f8:04:59: 93:4e:75:d8:56:8e:14:82:4f:ac:98:d8:8e:e0:87:9e:a5:ad: 76:b0:6a:36:73:82:32:c9:2b:0e:0e:a5:c8:8b:a0:c4:8d:57: 27:8c:19:1e:7f:f7:7a:5f:d9:c6:13:aa:ae:47:f9:83:65:7c: 71:4e:db:3e:75:97:61:94:ab:77:10:fa:fc:5e:3a:a8:b4:e4: 3b:87:bd:19:f2:9b:ac:94:e0:0c:b8:4a:36:4c:41:c0:1d:1f: f5:c7:88:16:91:5f:1a:c2:44:be:97:e5:61:2f:ed:dc:c4:af: 3a:af:93:d2:e4:ff:30:13:9b:73:aa:81:33:27:78:d6:09:fa: 89:54:6a:4f:97:db:e6:9d:8c:4c:75:b9:48:ec:21:1d:56:c1: 09:23:9b:ba:e4:2c:ed:1f:62:0d:7d:32:ef:c8:8c:6b:ee:c0: 8e:a4:cf:f1:bf:76:f3:73:6c:56:06:c3:85:34:08:cb:ec:a3: 09:3f:0e:12:0e:39:9c:8b:0d:71:d0:1c:5e:a2:9c:7a:09:26: f6:df:7d:80:c0:07:6f:b9:e1:e6:bb:1b:ee:f1:5e:70:b1:a7: 02:6e:89:48:34:c7:2d:c6:aa:b7:e1:34:c7:20:e9:c0:96:7e: 44:d5:c5:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28pJwKBBVjHBmrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OTFhNTQ0OGQtOGVmMC00ZTZkLTlhY2EtZWU2MmJlYzdhOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldMVy9JXJmKmg9sp9CDIccXOjH+5aKihvJaL 0BcVBE07v/ovjaTkC8zzwXvADi0Gs5xbxoLUx0VIJNiV6fElVT7CMyAEJ5XftqpG 9E07DGXhzB1EYW6ImErBTb3dzWTCL+4nGB89A5IJMlRsFy5ixP0TZ+UMJ7NgrVDy ZAOp9XX7Z327y1F/vxqUjbdntk9PrBkloXPAcXcUXLfFTdXJx07szxLFT1m+a382 GwOgF7/zpzSS15ASlHyChDUbtuoXmY6vCzqqlLaAyvqp/VFmDm7lZFAXkccSIfv5 MOOiop1xU6EttnHBJZ5PD1CgxSEDYCXqeJqysATDwhWpgMXUSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfnWLg7PnOqWz1Ttp/wUy0IqepGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmQ1ZGQzMDctMTdiYS0z MzFkLTkyYjktZTdlZTA5ZWY4MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMx9Ow4qkeTu5ehL7mL6/gEWZNOddhWjhSCT6yY2I7gh56lrXawajZz gjLJKw4OpciLoMSNVyeMGR5/93pf2cYTqq5H+YNlfHFO2z51l2GUq3cQ+vxeOqi0 5DuHvRnym6yU4Ay4SjZMQcAdH/XHiBaRXxrCRL6X5WEv7dzErzqvk9Lk/zATm3Oq gTMneNYJ+olUak+X2+adjEx1uUjsIR1WwQkjm7rkLO0fYg19Mu/IjGvuwI6kz/G/ dvNzbFYGw4U0CMvsowk/DhIOOZyLDXHQHF6inHoJJvbffYDAB2+54ea7G+7xXnCx pwJuiUg0xy3GqrfhNMcg6cCWfkTVxXI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:47 2025 by rpki-client