$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/339cbc08-87f0-3d6f-a9d7-354a30461489.roa File: 339cbc08-87f0-3d6f-a9d7-354a30461489.roa (raw, json) Hash identifier: AUW3SQ6JDS7yvi88vqB4wo2XIIuNJvnFzeoYgSzr8So= Subject key identifier: CF:3C:17:46:23:10:A8:F9:A0:64:F4:1D:E9:A0:2F:8F:D2:FB:44:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB38D374FDDC02D86DD70 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/339cbc08-87f0-3d6f-a9d7-354a30461489.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.144.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b3:8d:37:4f:dd:c0:2d:86:dd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=3e62c654-c0e5-4f8a-879b-78bb61feb945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:0d:ed:0f:9f:5c:ea:62:9c:8f:47:f5:d7: ef:28:71:6b:8d:40:19:db:56:12:16:de:2c:c5:03: 71:0c:9d:0f:d7:49:15:4f:05:12:e7:da:2c:8c:33: e7:e6:c1:04:e6:3a:9b:ef:e9:30:90:80:ab:59:fe: a1:8d:00:eb:ee:a8:52:ce:9c:3a:ce:b7:2b:83:8a: ec:b3:32:b1:59:a4:1f:17:4f:ea:e9:eb:2b:1a:8c: 7c:fc:85:75:fb:e0:06:0d:51:76:71:ea:3e:5d:e5: 1d:17:aa:fc:b7:99:4b:10:4e:79:4c:65:a4:18:64: 7b:62:5a:8d:0b:21:7c:55:0a:25:ae:ab:35:c0:7a: 21:71:77:d0:da:d4:d9:39:d0:8e:83:ff:40:31:ee: 81:2e:db:6c:3b:05:b3:c1:ab:60:b2:a9:c8:1f:ec: 33:34:34:89:d4:9a:a4:f3:19:fa:5e:5b:16:cb:5e: a9:07:18:9e:15:20:56:bc:5c:2f:2b:42:27:af:88: a6:ea:2d:dc:60:b5:74:aa:68:35:88:bd:54:78:c9: 8c:53:29:07:8f:5c:f4:72:bc:a3:b8:41:59:3f:f1: 95:2d:57:e1:04:86:99:3e:ad:0c:5f:66:63:b2:86: 45:73:ab:e8:5b:57:e3:79:9f:2b:25:6d:6a:f6:c1: a5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3C:17:46:23:10:A8:F9:A0:64:F4:1D:E9:A0:2F:8F:D2:FB:44:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/339cbc08-87f0-3d6f-a9d7-354a30461489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c8:c6:e5:aa:c2:ff:a4:47:00:a3:b7:de:50:b7:23:e7:34: 97:af:19:ce:da:56:b7:2c:be:52:65:66:20:c2:e7:50:f5:44: 3d:6f:e1:4c:33:c2:54:1c:9b:4d:d7:a6:97:23:b4:2d:bc:b7: 1f:80:2f:e7:c2:77:b3:cd:ce:d0:47:c7:77:9b:85:13:4e:28: d7:1c:22:3c:c8:cd:1e:e7:d5:71:0b:ba:96:f5:7b:1a:e4:c6: 3f:7f:07:6a:e3:02:f8:b1:14:cc:b4:58:e3:6a:6b:4b:bb:1e: 13:bd:f6:c9:f7:84:41:47:5e:90:09:67:79:19:57:25:68:43: a2:34:a6:eb:28:06:71:51:02:dd:7b:c7:d8:49:b2:e4:b3:f5: 82:2d:d9:1c:f3:1f:f1:30:0d:84:78:35:17:64:47:61:f3:af: 2d:81:41:ad:c5:73:ea:de:84:28:25:19:9b:9d:23:3e:2f:c1: 51:1a:77:56:e3:0c:fb:e5:d9:ec:f6:c1:5a:77:36:8b:a2:9b: 69:81:b8:e1:64:97:9d:e7:3f:c0:a6:50:76:49:ae:3d:32:c4: cc:37:a1:37:b1:54:27:8b:77:8d:85:df:0b:39:05:3d:d8:4c: 57:4b:0d:66:7c:7a:98:08:49:9b:0c:e7:43:b6:4a:66:17:db: 0e:58:91:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27ONN0/dwC2G3XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk M2U2MmM2NTQtYzBlNS00ZjhhLTg3OWItNzhiYjYxZmViOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH8N7Q+fXOpinI9H9dfvKHFrjUAZ21YSFt4s xQNxDJ0P10kVTwUS59osjDPn5sEE5jqb7+kwkICrWf6hjQDr7qhSzpw6zrcrg4rs szKxWaQfF0/q6esrGox8/IV1++AGDVF2ceo+XeUdF6r8t5lLEE55TGWkGGR7YlqN CyF8VQolrqs1wHohcXfQ2tTZOdCOg/9AMe6BLttsOwWzwatgsqnIH+wzNDSJ1Jqk 8xn6XlsWy16pBxieFSBWvFwvK0Inr4im6i3cYLV0qmg1iL1UeMmMUykHj1z0cryj uEFZP/GVLVfhBIaZPq0MX2ZjsoZFc6voW1fjeZ8rJW1q9sGlsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM88F0YjEKj5oGT0HemgL4/S+0Q9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzM5Y2JjMDgtODdmMC0z ZDZmLWE5ZDctMzU0YTMwNDYxNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALIxuWqwv+kRwCjt95QtyPnNJevGc7aVrcsvlJlZiDC51D1RD1v4Uwz wlQcm03XppcjtC28tx+AL+fCd7PNztBHx3ebhRNOKNccIjzIzR7n1XELupb1exrk xj9/B2rjAvixFMy0WONqa0u7HhO99sn3hEFHXpAJZ3kZVyVoQ6I0pusoBnFRAt17 x9hJsuSz9YIt2RzzH/EwDYR4NRdkR2Hzry2BQa3Fc+rehCglGZudIz4vwVEad1bj DPvl2ez2wVp3Nouim2mBuOFkl53nP8CmUHZJrj0yxMw3oTexVCeLd42F3ws5BT3Y TFdLDWZ8epgISZsM50O2SmYX2w5YkRc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:47 2025 by rpki-client