$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa File: 36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa (raw, json) Hash identifier: 0fsXeWXHq6OxQJySG/8tHUq6w/OCsfuVSqFhlNeV8Gc= Subject key identifier: 85:C5:43:5C:2C:BE:49:A0:89:2F:1B:83:08:19:23:71:E5:24:8C:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBD4603E376974ACB8D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.67.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:bd:46:03:e3:76:97:4a:cb:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a8cb9409-89a4-414f-9d23-a53a2b488ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:58:ea:c4:53:42:ef:df:de:4a:57:a7:f0: 83:d0:ec:8b:8c:08:91:9c:6e:ec:8a:ee:1a:f6:ca: ef:ea:55:5c:0c:b4:1d:bb:f5:fe:b3:16:60:0e:7d: 59:10:d9:fc:94:98:04:e6:a3:c3:16:ee:21:f7:77: 12:59:ab:83:0f:00:f4:7c:38:3b:34:2a:d0:6f:a5: 2b:1a:95:06:cb:ea:bb:89:6b:f9:02:f8:62:28:45: fd:79:7a:ea:cb:b0:13:98:c6:bc:38:82:e3:fc:53: b1:29:ca:e1:1a:c2:d0:37:d3:e7:ab:b8:70:6c:9c: 4a:80:92:ab:36:0a:13:7c:75:ed:7d:a2:72:f2:1f: 36:60:5f:03:b9:1f:ef:1d:9c:6a:71:8e:82:f1:59: 66:47:9a:21:2c:b9:fd:03:6d:b9:a5:e7:51:7d:32: 4d:cf:81:8c:48:55:b7:5e:54:cd:4e:ad:a1:19:51: 2e:44:80:a4:10:d3:89:d1:87:d4:fc:f0:cf:7e:cf: ce:44:10:e3:a5:e2:b4:b9:ef:17:a2:27:66:2b:10: 90:21:0e:b3:92:a8:fb:29:5e:7a:af:2f:3f:75:7c: 76:58:8a:bd:f0:8f:69:e5:b5:85:1a:c3:bb:57:af: 65:b9:5b:25:f2:3c:13:c5:3f:2e:95:f4:f6:24:ff: 0d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C5:43:5C:2C:BE:49:A0:89:2F:1B:83:08:19:23:71:E5:24:8C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:64:d4:ac:40:bb:06:eb:20:c8:a2:c7:b9:f1:8a:c6:b4:63: 42:37:6c:36:b8:da:71:d0:c1:45:39:f6:43:e3:ed:bb:b6:ce: 2e:f1:15:0b:a8:a6:f8:d1:10:ca:ab:9b:94:8a:a0:b4:90:96: 8a:58:c9:30:f7:2b:af:7c:d1:4e:45:a1:32:5f:28:e8:71:c5: df:8f:b1:32:78:35:a6:40:7b:d4:6b:57:1f:ca:97:50:ee:65: 88:e7:59:b5:66:d5:2d:99:de:4d:98:29:69:3a:28:6c:4a:f2: 5c:b6:cd:21:67:4e:ff:b6:4d:91:de:9a:2a:f4:7f:b1:57:3e: fa:88:5b:04:a6:c7:77:a1:43:16:29:87:9f:b7:3b:f1:6b:36: 1d:24:a8:4d:d6:00:4d:a5:46:67:31:cb:b8:e8:05:7a:0b:44: 37:91:d7:0d:6a:7b:cf:66:6a:c8:28:5f:00:87:34:32:48:85: 76:28:c6:48:3e:c6:a3:d7:e3:d8:7b:31:31:a9:c5:8d:73:4d: 25:b6:ff:ba:7f:63:9a:a3:62:72:80:dc:ec:f6:05:40:28:11: 4c:8f:36:ff:45:0a:94:c5:08:1b:72:ad:64:07:f1:f3:8f:2c: a2:0e:94:1e:74:49:33:9e:49:d0:04:42:da:90:a5:4b:f7:06: f3:d6:65:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG271GA+N2l0rLjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YThjYjk0MDktODlhNC00MTRmLTlkMjMtYTUzYTJiNDg4YWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB9Y6sRTQu/f3kpXp/CD0OyLjAiRnG7siu4a 9srv6lVcDLQdu/X+sxZgDn1ZENn8lJgE5qPDFu4h93cSWauDDwD0fDg7NCrQb6Ur GpUGy+q7iWv5AvhiKEX9eXrqy7ATmMa8OILj/FOxKcrhGsLQN9Pnq7hwbJxKgJKr NgoTfHXtfaJy8h82YF8DuR/vHZxqcY6C8VlmR5ohLLn9A225pedRfTJNz4GMSFW3 XlTNTq2hGVEuRICkENOJ0YfU/PDPfs/ORBDjpeK0ue8XoidmKxCQIQ6zkqj7KV56 ry8/dXx2WIq98I9p5bWFGsO7V69luVsl8jwTxT8ulfT2JP8NOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXFQ1wsvkmgiS8bgwgZI3HlJIyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzZkMTdlNzUtOGY5Yi0z YjgyLTg5ZTQtNDBkNTEwMmJmM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtk1KxAuwbrIMiix7nxisa0Y0I3bDa42nHQwUU59kPj7bu2zi7xFQuo pvjREMqrm5SKoLSQlopYyTD3K6980U5FoTJfKOhxxd+PsTJ4NaZAe9RrVx/Kl1Du ZYjnWbVm1S2Z3k2YKWk6KGxK8ly2zSFnTv+2TZHemir0f7FXPvqIWwSmx3ehQxYp h5+3O/FrNh0kqE3WAE2lRmcxy7joBXoLRDeR1w1qe89masgoXwCHNDJIhXYoxkg+ xqPX49h7MTGpxY1zTSW2/7p/Y5qjYnKA3Oz2BUAoEUyPNv9FCpTFCBtyrWQH8fOP LKIOlB50STOeSdAEQtqQpUv3BvPWZUw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:20 2025 by rpki-client