$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3183701f-09a0-3cb7-adc2-b652597c335e.roa File: 3183701f-09a0-3cb7-adc2-b652597c335e.roa (raw, json) Hash identifier: z42taTKvrnST5xSTlWfDj6tgXSiKHFaj3QaKf+cNT1A= Subject key identifier: 8E:6B:E8:10:54:07:CB:D3:55:A4:9E:EC:B3:3C:5C:84:63:70:18:AE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEFA2415CC8AA625EA520 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3183701f-09a0-3cb7-adc2-b652597c335e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.96.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ef:a2:41:5c:c8:aa:62:5e:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=856c1f24-4715-4574-ad62-e27488492324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:49:ee:4c:bc:39:25:90:40:75:d4:5f:85:b4: 41:b3:89:01:29:d1:6f:42:8e:3d:4c:fd:c4:c0:8f: 45:16:a3:45:0c:e1:18:5f:fd:7d:aa:b9:69:60:23: 98:aa:35:e9:18:f8:59:91:75:08:ab:b0:8b:c7:da: f5:fe:84:77:84:81:a9:4c:94:33:07:97:63:88:a9: 6d:b9:5e:4d:93:89:52:bd:0b:1a:b1:db:0a:44:0e: 87:21:f2:0c:bd:1a:6e:c6:8e:ab:cc:93:31:72:c8: d2:9e:1b:1d:e5:45:04:6c:82:f5:9b:f3:70:f6:4e: c0:8c:83:be:1f:8b:ad:8e:bb:19:c0:f9:c8:46:b4: 4b:a0:2a:63:de:8d:b6:fd:5d:a7:7d:8e:0f:7f:27: 27:53:f2:2e:fa:b1:2e:1d:b9:b2:c7:7a:0a:52:2c: 05:05:6d:35:23:9d:5a:ef:37:df:f5:3a:d3:de:c9: 26:7d:4b:09:f5:5a:71:59:6d:34:0a:e0:8a:f1:13: 18:31:9b:03:ec:98:4f:9f:24:58:3b:fc:f8:8c:9a: 43:0f:47:3c:ca:12:6f:a2:71:a9:9b:29:ad:c7:8e: a3:34:fb:57:b7:6b:c8:0d:8f:5a:e9:69:5c:ab:f2: 5b:36:15:7a:67:c6:45:25:e6:bc:60:72:9c:fc:78: d5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6B:E8:10:54:07:CB:D3:55:A4:9E:EC:B3:3C:5C:84:63:70:18:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3183701f-09a0-3cb7-adc2-b652597c335e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ca:2f:8e:8b:a6:3d:65:5a:ef:54:39:5d:00:2d:3e:f4:97: c5:95:3d:55:e8:78:46:b0:e7:dc:e9:4d:a3:1e:5d:c2:5d:06: 74:17:d4:01:78:d9:5b:24:de:01:34:3c:04:17:7f:50:0f:a4: 74:b8:3b:01:37:6e:d6:49:12:ef:ae:18:ed:ef:3c:d5:61:ec: b0:1d:c4:7a:35:78:c6:4f:3d:e9:42:bc:ef:27:61:94:d1:ab: 10:be:a0:97:fb:9b:bf:12:db:0b:b4:a1:be:f6:58:11:64:5d: 24:a0:d6:f6:a6:54:cb:85:88:4f:9a:d7:0a:ee:1e:eb:be:d5: 56:0f:df:93:0b:12:a1:69:f3:c6:f1:ee:03:44:16:a9:6e:5f: 36:12:2d:c1:52:a7:97:03:c4:03:64:ae:de:76:8c:4e:98:b9: 1a:ff:35:c9:59:be:f8:b7:bc:22:39:ec:0d:27:74:fe:75:e7: 79:29:a8:3f:47:74:41:49:e0:27:c6:18:bd:90:13:1a:87:16: 8c:a9:57:82:2f:fb:31:47:32:47:05:09:34:0a:4b:c3:aa:3e: fd:94:cc:93:9e:66:57:e7:f9:7b:ae:43:86:52:da:06:1e:3c: 12:55:83:6e:6e:0c:67:f6:1e:d7:d9:7a:b2:80:18:0b:9d:27: 23:2f:44:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2++iQVzIqmJepSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODU2YzFmMjQtNDcxNS00NTc0LWFkNjItZTI3NDg4NDkyMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiknuTLw5JZBAddRfhbRBs4kBKdFvQo49TP3E wI9FFqNFDOEYX/19qrlpYCOYqjXpGPhZkXUIq7CLx9r1/oR3hIGpTJQzB5djiKlt uV5Nk4lSvQsasdsKRA6HIfIMvRpuxo6rzJMxcsjSnhsd5UUEbIL1m/Nw9k7AjIO+ H4utjrsZwPnIRrRLoCpj3o22/V2nfY4PfycnU/Iu+rEuHbmyx3oKUiwFBW01I51a 7zff9TrT3skmfUsJ9VpxWW00CuCK8RMYMZsD7JhPnyRYO/z4jJpDD0c8yhJvonGp mymtx46jNPtXt2vIDY9a6Wlcq/JbNhV6Z8ZFJea8YHKc/HjV2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5r6BBUB8vTVaSe7LM8XIRjcBiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzE4MzcwMWYtMDlhMC0z Y2I3LWFkYzItYjY1MjU5N2MzMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDKL46Lpj1lWu9UOV0ALT70l8WVPVXoeEaw59zpTaMeXcJdBnQX1AF4 2Vsk3gE0PAQXf1APpHS4OwE3btZJEu+uGO3vPNVh7LAdxHo1eMZPPelCvO8nYZTR qxC+oJf7m78S2wu0ob72WBFkXSSg1vamVMuFiE+a1wruHuu+1VYP35MLEqFp88bx 7gNEFqluXzYSLcFSp5cDxANkrt52jE6YuRr/NclZvvi3vCI57A0ndP5153kpqD9H dEFJ4CfGGL2QExqHFoypV4Iv+zFHMkcFCTQKS8OqPv2UzJOeZlfn+XuuQ4ZS2gYe PBJVg25uDGf2HtfZerKAGAudJyMvROw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:23 2025 by rpki-client