$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa File: 2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa (raw, json) Hash identifier: hXO8G1Rq0WYSq8IyPSrM0RLDY3r8qwhCFrcGt7BpWyk= Subject key identifier: 6B:F5:A0:02:EC:9A:CB:6E:7D:DE:34:AA:2F:28:44:48:28:97:3A:59 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA9D69A964D4D720ABEA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.66.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a9:d6:9a:96:4d:4d:72:0a:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=20b7ecf6-740b-4ec3-8e18-7706a989cdf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6b:da:3b:93:d0:2d:65:50:37:6c:9d:75:62: af:90:50:87:4a:e0:93:18:99:fe:ef:60:a4:c3:df: 80:2d:48:ab:2e:47:29:c6:43:0f:8b:23:62:13:90: 19:48:33:f0:41:ae:38:7d:65:ef:6f:12:b6:94:72: 09:2f:90:56:7a:7e:7b:fd:74:f8:c0:a0:d9:90:26: 26:d9:d1:f9:97:38:e1:f0:5c:f1:53:74:1e:aa:89: a3:9d:4b:d7:46:70:62:73:4f:60:48:1e:87:63:49: 70:0a:a3:f3:02:54:7d:24:cb:40:20:3f:f4:d2:ad: c2:4f:a2:4b:ae:aa:4f:54:56:65:e6:ff:f8:99:4f: 3a:5b:a3:6d:26:d8:ee:76:a4:85:31:14:5b:ba:6d: 45:fc:ba:42:a0:03:55:64:db:27:ee:0e:00:26:74: 2e:db:a3:a9:49:95:02:39:6b:2e:d2:55:3e:0a:bb: 7f:f3:13:f8:69:57:45:b2:34:b2:ec:43:64:71:8f: 7e:8c:38:14:32:ac:13:da:79:8c:6a:de:3f:3c:49: fe:d5:0f:60:1c:84:8c:77:5e:8d:e1:4d:75:5e:9c: b6:6c:3f:db:9e:04:21:3c:0e:c6:ae:1b:0b:f0:7f: 78:f6:77:d9:db:69:8e:61:d8:ae:55:ed:22:88:f2: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F5:A0:02:EC:9A:CB:6E:7D:DE:34:AA:2F:28:44:48:28:97:3A:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5f:3c:1d:c0:70:81:32:0d:02:c7:bd:51:eb:71:69:76:ba: 69:4c:30:38:9c:17:f7:72:21:90:ae:22:9f:e6:b0:71:d2:c8: f3:e4:9d:e2:71:97:c1:18:b3:82:9d:dc:98:1b:cf:ae:d8:2a: 6f:c8:c4:cf:03:b0:54:e2:7b:30:3f:b7:d8:3d:07:be:c7:93: 6b:09:0e:94:b6:42:b7:6d:3c:af:ad:01:f8:7a:20:97:17:e9: 04:4b:a3:f4:8a:d0:9a:05:84:6e:15:ef:3e:ac:7e:6c:2f:ba: a3:d4:91:c5:a8:20:00:d4:14:e4:26:66:56:59:6e:b2:89:2b: 90:d3:9f:e9:5d:1b:f9:a9:37:ad:22:00:b0:e6:a5:13:1f:6a: c6:88:bf:e4:10:4c:57:fe:ef:d4:22:e0:61:a7:64:3e:04:59: d7:de:bf:c5:e5:f8:95:74:04:fb:31:52:e6:1e:c8:da:20:c7: f0:18:c6:46:7e:31:19:af:ac:b6:d1:3b:d8:dc:a4:39:8d:b6: d6:3f:c7:c5:50:d5:7a:f2:b5:f1:c0:b8:8f:b6:8d:cc:5b:0c: 53:ed:7b:11:1e:c8:62:dc:f5:3d:41:b7:38:4e:9f:0e:37:7e: 21:15:d4:a4:bf:66:17:c3:3f:a7:c4:2f:ff:5f:b6:17:ba:a8: 72:d3:5e:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26nWmpZNTXIKvqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MjBiN2VjZjYtNzQwYi00ZWMzLThlMTgtNzcwNmE5ODljZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GvaO5PQLWVQN2yddWKvkFCHSuCTGJn+72Ck w9+ALUirLkcpxkMPiyNiE5AZSDPwQa44fWXvbxK2lHIJL5BWen57/XT4wKDZkCYm 2dH5lzjh8FzxU3QeqomjnUvXRnBic09gSB6HY0lwCqPzAlR9JMtAID/00q3CT6JL rqpPVFZl5v/4mU86W6NtJtjudqSFMRRbum1F/LpCoANVZNsn7g4AJnQu26OpSZUC OWsu0lU+Crt/8xP4aVdFsjSy7ENkcY9+jDgUMqwT2nmMat4/PEn+1Q9gHISMd16N 4U11Xpy2bD/bngQhPA7GrhsL8H949nfZ22mOYdiuVe0iiPJJJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv1oALsmstufd40qi8oREgolzpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmZiMzI4MjQtMmRlMi0z OWMwLWEwZWYtMGUwNDE4Y2ZjMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdfPB3AcIEyDQLHvVHrcWl2umlMMDicF/dyIZCuIp/msHHSyPPkneJx l8EYs4Kd3Jgbz67YKm/IxM8DsFTiezA/t9g9B77Hk2sJDpS2QrdtPK+tAfh6IJcX 6QRLo/SK0JoFhG4V7z6sfmwvuqPUkcWoIADUFOQmZlZZbrKJK5DTn+ldG/mpN60i ALDmpRMfasaIv+QQTFf+79Qi4GGnZD4EWdfev8Xl+JV0BPsxUuYeyNogx/AYxkZ+ MRmvrLbRO9jcpDmNttY/x8VQ1XrytfHAuI+2jcxbDFPtexEeyGLc9T1BtzhOnw43 fiEV1KS/ZhfDP6fEL/9fthe6qHLTXto= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:00 2025 by rpki-client