$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa File: 2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa (raw, json) Hash identifier: VAsUTWhKYMKFUwKkHKIhpam1rJ3pAlFWxp21VNVws6c= Subject key identifier: A1:51:3D:A3:48:E2:A7:DA:A4:E6:7E:04:19:38:F3:57:AF:96:98:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB95F789ADADECA10C0080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.72.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:95:f7:89:ad:ad:ec:a1:0c:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=4938064a-8044-4976-91a5-ed94e78c8440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c8:27:4b:d4:80:bd:50:0b:e0:b1:65:19:7c: 5c:06:85:ff:3d:5e:ba:b0:61:17:5f:12:11:00:19: 60:35:e6:1e:97:30:e4:ec:75:15:d5:ac:39:a2:92: 6e:69:c1:23:40:43:90:84:e2:2d:dc:41:29:13:8f: f2:f7:1c:5d:92:e2:08:cd:5f:e2:ae:df:67:57:f0: 21:7e:67:b2:48:5b:ed:9f:46:a0:07:ad:8f:46:3c: cc:0f:dc:79:21:2d:19:f0:68:92:76:08:70:82:06: ec:8e:7b:d5:20:8e:e3:51:b3:6e:66:8c:21:1b:15: ec:23:30:f3:4e:63:30:64:25:9d:59:d4:93:16:22: cf:db:bc:75:2a:3d:19:af:a5:0e:13:d3:b7:de:ed: 2a:64:73:54:98:89:ae:97:0a:d2:e9:70:c2:64:6a: ea:9e:b6:6c:f9:1f:40:39:58:af:f5:19:32:46:02: 72:04:69:e4:ce:a8:bb:53:6e:f3:5a:28:59:c3:de: 58:8a:28:43:50:3f:ea:60:97:e8:0d:72:25:6d:1a: e4:30:38:69:fa:99:9a:29:57:26:e7:1d:28:65:3c: 1e:87:66:09:46:5a:23:12:de:c3:1b:b7:50:21:4b: a2:12:f4:29:ff:46:12:a2:35:e8:42:3a:bc:d9:12: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:51:3D:A3:48:E2:A7:DA:A4:E6:7E:04:19:38:F3:57:AF:96:98:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b0:51:85:3e:8b:84:2a:bf:65:32:f8:82:6f:5c:7c:64:bf: 98:2c:ea:f5:6e:ab:86:ca:42:2b:ae:9c:b4:7c:8d:7f:80:0a: 21:ce:37:44:4f:3e:f2:07:47:8f:6b:b0:ac:e7:7b:cd:7f:3d: ed:94:77:4f:05:56:57:a0:57:e9:f3:6e:e5:fc:3c:34:3b:c4: b8:25:8e:ac:2a:52:d3:e3:c9:84:aa:7a:dd:7c:09:0a:51:32: 7c:1b:0a:89:dd:e2:6a:da:41:a5:1d:a0:79:77:ea:04:73:5c: 44:37:64:bc:23:8c:ed:68:59:00:4b:50:aa:7c:a8:96:bc:61: 86:42:5f:e5:6b:77:4b:45:02:07:59:56:8c:ba:73:12:90:22: 60:90:8d:47:18:65:4c:c3:8c:ad:ca:93:75:ed:55:6e:7d:11: a3:33:b1:09:3c:ca:f5:c3:4d:fa:c2:5c:e2:a9:42:2a:f2:0d: c5:2b:9e:11:64:35:87:40:80:8e:48:9b:b3:dd:77:92:21:d0: 18:7c:13:2d:9f:1d:56:23:a1:b2:da:60:63:75:ab:54:ab:38: f1:07:8f:89:54:0a:68:cd:e1:3c:1d:c1:87:67:ea:37:22:a7: b3:e9:55:e4:94:d5:de:97:f1:2d:42:84:0c:90:74:db:7a:55: 3e:d2:5a:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25X3ia2t7KEMAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDkzODA2NGEtODA0NC00OTc2LTkxYTUtZWQ5NGU3OGM4NDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicgnS9SAvVAL4LFlGXxcBoX/PV66sGEXXxIR ABlgNeYelzDk7HUV1aw5opJuacEjQEOQhOIt3EEpE4/y9xxdkuIIzV/irt9nV/Ah fmeySFvtn0agB62PRjzMD9x5IS0Z8GiSdghwggbsjnvVII7jUbNuZowhGxXsIzDz TmMwZCWdWdSTFiLP27x1Kj0Zr6UOE9O33u0qZHNUmImulwrS6XDCZGrqnrZs+R9A OViv9RkyRgJyBGnkzqi7U27zWihZw95YiihDUD/qYJfoDXIlbRrkMDhp+pmaKVcm 5x0oZTweh2YJRlojEt7DG7dQIUuiEvQp/0YSojXoQjq82RJGOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFRPaNI4qfapOZ+BBk481evlpjJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmY4OWYyZmEtMTMxMS0z YjY4LThhZDktM2ZhY2NkZjc0ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEewUYU+i4Qqv2Uy+IJvXHxkv5gs6vVuq4bKQiuunLR8jX+ACiHON0RP PvIHR49rsKzne81/Pe2Ud08FVlegV+nzbuX8PDQ7xLgljqwqUtPjyYSqet18CQpR MnwbCond4mraQaUdoHl36gRzXEQ3ZLwjjO1oWQBLUKp8qJa8YYZCX+Vrd0tFAgdZ Voy6cxKQImCQjUcYZUzDjK3Kk3XtVW59EaMzsQk8yvXDTfrCXOKpQiryDcUrnhFk NYdAgI5Im7Pdd5Ih0Bh8Ey2fHVYjobLaYGN1q1SrOPEHj4lUCmjN4TwdwYdn6jci p7PpVeSU1d6X8S1ChAyQdNt6VT7SWsc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:55 2025 by rpki-client