$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ff6b528-b620-3d32-bd31-d859ee65c282.roa File: 2ff6b528-b620-3d32-bd31-d859ee65c282.roa (raw, json) Hash identifier: hn0yjg5s73ekSAaYDnCPgOnXzOwYYOo3J2JH/7/W4zA= Subject key identifier: 22:AC:5E:B8:9D:C4:86:57:85:4B:9F:67:67:A9:DE:D0:24:51:8B:66 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA42FC460EB404277A880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ff6b528-b620-3d32-bd31-d859ee65c282.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.132.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a4:2f:c4:60:eb:40:42:77:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=cdfb1a1a-0b59-49bb-a8bd-9cd2be5caf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:af:7d:8e:f8:55:71:c6:d6:41:f8:c7:8b: 70:83:c8:d9:57:37:08:97:63:e1:e9:8e:d1:7f:16: dd:62:e8:bf:bc:87:f7:3c:4a:8b:0f:a7:6b:e9:db: 40:d5:ee:d9:dc:ef:14:f5:f7:5b:4b:f2:4c:3a:20: 33:cc:96:b7:21:13:2c:5a:be:2d:2d:13:02:4b:11: a1:bf:42:40:92:3a:5a:5f:f2:80:fe:d7:e2:a8:d0: 19:fa:b6:e4:31:9f:8e:03:71:43:8e:bf:8e:44:f7: aa:0d:37:8b:46:11:a2:a4:14:84:05:11:30:27:28: fc:4a:00:7d:73:1d:07:90:a2:66:b3:64:b4:32:1c: db:28:28:ac:69:34:0a:33:1d:49:af:17:00:72:85: fe:c3:8b:39:22:4d:85:e7:3d:97:c1:f1:d4:ad:6f: 01:4e:4e:2a:0f:a4:f9:8c:89:13:4a:ca:89:a3:8f: bc:ca:1b:40:d8:a8:1b:72:1d:48:71:13:e6:aa:d2: f9:d6:ef:6e:7f:30:ee:9c:90:40:88:1d:72:ea:f7: 85:1d:c2:eb:e2:3a:7c:18:b2:06:1b:44:84:e2:84: cb:f4:32:ab:64:50:c7:fe:c9:ff:92:c8:ff:58:96: 39:9d:c1:08:42:38:7d:0a:dd:1f:8d:88:a6:3b:84: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AC:5E:B8:9D:C4:86:57:85:4B:9F:67:67:A9:DE:D0:24:51:8B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ff6b528-b620-3d32-bd31-d859ee65c282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e6:0c:b0:59:46:2f:f8:24:9b:70:72:14:6a:88:24:9f:08: 66:00:17:b9:7f:0c:f4:40:5a:c8:ba:06:14:03:0c:a9:48:5a: 57:13:d4:2e:59:7d:7a:e6:44:a7:9a:0e:cc:34:7e:28:d8:64: 66:6a:2d:3f:5d:de:ac:54:b2:d3:ca:83:71:6b:d9:84:f4:5f: 30:8b:53:a6:4c:59:3c:31:cf:f8:74:b3:54:85:fb:c5:d7:05: 46:0c:1a:7a:ab:4b:ca:9c:37:3e:e3:0b:ed:e5:20:9f:5c:14: 07:41:8b:82:b1:ed:98:d7:b0:0d:2b:5e:95:ab:27:ea:e8:42: 4d:13:14:23:d3:a2:9b:60:5d:b8:7a:fa:45:53:a4:39:b4:a6: 14:29:af:06:7c:11:42:89:dc:6f:69:a6:19:0c:54:df:23:b9: e1:01:8a:dd:fa:cd:fc:3d:4c:33:24:bb:9e:02:0e:06:dd:f1: 05:1f:33:13:fa:ac:cc:1c:93:1d:bd:a5:42:28:24:4e:73:61: 07:f0:ba:69:65:81:20:bd:13:ed:40:6f:5e:94:dc:3a:42:71: 47:be:0b:e1:58:b1:5c:58:f6:d0:97:ae:60:ba:4d:2e:a4:9f: e9:f3:f0:06:7c:3c:ae:75:be:ed:0a:9e:a8:c7:2b:78:51:88: 51:e4:83:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26QvxGDrQEJ3qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2RmYjFhMWEtMGI1OS00OWJiLWE4YmQtOWNkMmJlNWNhZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48KvfY74VXHG1kH4x4twg8jZVzcIl2Ph6Y7R fxbdYui/vIf3PEqLD6dr6dtA1e7Z3O8U9fdbS/JMOiAzzJa3IRMsWr4tLRMCSxGh v0JAkjpaX/KA/tfiqNAZ+rbkMZ+OA3FDjr+ORPeqDTeLRhGipBSEBREwJyj8SgB9 cx0HkKJms2S0MhzbKCisaTQKMx1JrxcAcoX+w4s5Ik2F5z2XwfHUrW8BTk4qD6T5 jIkTSsqJo4+8yhtA2Kgbch1IcRPmqtL51u9ufzDunJBAiB1y6veFHcLr4jp8GLIG G0SE4oTL9DKrZFDH/sn/ksj/WJY5ncEIQjh9Ct0fjYimO4Q9vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKsXridxIZXhUufZ2ep3tAkUYtmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmZmNmI1MjgtYjYyMC0z ZDMyLWJkMzEtZDg1OWVlNjVjMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnmDLBZRi/4JJtwchRqiCSfCGYAF7l/DPRAWsi6BhQDDKlIWlcT1C5Z fXrmRKeaDsw0fijYZGZqLT9d3qxUstPKg3Fr2YT0XzCLU6ZMWTwxz/h0s1SF+8XX BUYMGnqrS8qcNz7jC+3lIJ9cFAdBi4Kx7ZjXsA0rXpWrJ+roQk0TFCPToptgXbh6 +kVTpDm0phQprwZ8EUKJ3G9pphkMVN8jueEBit36zfw9TDMku54CDgbd8QUfMxP6 rMwckx29pUIoJE5zYQfwumllgSC9E+1Ab16U3DpCcUe+C+FYsVxY9tCXrmC6TS6k n+nz8AZ8PK51vu0KnqjHK3hRiFHkg5Y= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:41 2025 by rpki-client