$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/381783b9-9b82-3052-bac6-27dac9347693.roa File: 381783b9-9b82-3052-bac6-27dac9347693.roa (raw, json) Hash identifier: J2ZUbe1VvDS8lhezRrDdtiYRqC5s+25hqrjSrE3qTbw= Subject key identifier: 95:22:8B:6C:CA:4B:47:34:CA:3B:7F:60:83:52:FD:CA:5D:65:7D:17 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84117327AC73368903ACD5C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/381783b9-9b82-3052-bac6-27dac9347693.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.121.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:73:27:ac:73:36:89:03:ac:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a563127f-f5b3-48c5-857f-4caa86fbb862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b9:a8:37:87:32:8f:48:64:2a:09:a9:6b:17: 10:01:63:1e:9b:de:51:6b:d5:70:03:2b:92:48:80: 57:4e:6e:14:ce:8c:cc:09:f6:92:e6:07:4c:37:4b: 04:f0:60:99:dd:5e:c7:30:7b:f1:84:be:7d:2e:42: 4c:46:d8:2a:e1:3f:be:82:4f:9e:dc:ad:03:38:ca: 2f:31:93:d1:91:0f:f3:46:0e:57:ac:64:51:33:be: 34:d8:39:ce:5b:81:14:88:0b:39:5e:e5:a4:50:33: 25:56:e8:6d:4f:c9:db:07:51:c1:8a:b8:72:93:0a: 12:4e:b5:da:d2:61:9d:63:58:ff:cf:64:b1:ac:4c: 2e:96:9f:bc:54:9b:b0:26:d6:cc:ca:df:ce:17:13: d4:69:9d:17:aa:67:12:13:78:db:58:59:45:2e:a7: d7:d7:d5:00:09:b3:64:ab:e4:82:f7:43:8b:7a:10: ec:5f:6c:91:0d:84:0e:1d:d3:b2:3c:04:a2:13:7b: 23:09:cd:d3:ce:60:50:4a:b5:e6:b8:7f:4a:4f:90: 7d:a3:f4:c7:f1:f0:cb:be:76:12:d7:da:a5:d3:80: 59:ab:b6:7e:38:df:67:58:8b:f6:a0:55:c8:23:eb: ef:91:6c:bc:26:81:8a:a2:56:4b:c2:68:88:6a:66: b6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:22:8B:6C:CA:4B:47:34:CA:3B:7F:60:83:52:FD:CA:5D:65:7D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/381783b9-9b82-3052-bac6-27dac9347693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:59:63:9b:fa:46:16:f1:db:df:a5:3a:86:1a:83:73:31:4a: e3:fe:cc:9f:44:b6:ac:a7:a3:46:2e:19:52:25:bc:c1:01:73: 24:b9:9e:2d:f3:c3:e8:50:c9:6a:38:52:be:95:ea:28:4c:72: b1:45:2d:6e:ed:d5:50:5c:8f:b1:91:3c:fe:c7:41:aa:78:18: ad:fa:1b:1e:9a:02:5f:3f:a8:d2:54:2f:ab:10:1b:fe:78:c1: 42:25:f8:50:aa:55:99:bc:cd:1f:a4:3c:59:2a:95:13:28:65: 2e:05:c9:56:82:a1:40:39:15:2d:42:90:1d:54:f2:90:d9:65: 14:a4:b8:fa:45:58:d7:0f:ae:14:2d:4e:0c:1d:b6:5f:3b:5a: 0f:ed:8e:2b:bf:97:a6:33:99:31:74:54:89:7b:d5:d2:19:9b: d4:32:97:ca:88:08:64:8c:1b:c3:0e:0f:aa:6c:f9:fc:79:c3: 84:96:8b:cb:cf:18:f1:ea:76:2e:48:eb:3d:b0:eb:4f:1c:a1: 91:04:a0:fc:cd:f3:5d:39:33:48:84:d2:74:ba:27:56:41:79: 6b:77:23:fd:6f:42:86:ac:11:33:bc:e8:58:ff:68:c3:68:f5: eb:25:70:cc:7e:14:f5:ce:4e:12:6c:05:0f:73:41:15:e2:ca: 66:36:44:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXMnrHM2iQOs1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTU2MzEyN2YtZjViMy00OGM1LTg1N2YtNGNhYTg2ZmJiODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrmoN4cyj0hkKgmpaxcQAWMem95Ra9VwAyuS SIBXTm4UzozMCfaS5gdMN0sE8GCZ3V7HMHvxhL59LkJMRtgq4T++gk+e3K0DOMov MZPRkQ/zRg5XrGRRM7402DnOW4EUiAs5XuWkUDMlVuhtT8nbB1HBirhykwoSTrXa 0mGdY1j/z2SxrEwulp+8VJuwJtbMyt/OFxPUaZ0XqmcSE3jbWFlFLqfX19UACbNk q+SC90OLehDsX2yRDYQOHdOyPASiE3sjCc3TzmBQSrXmuH9KT5B9o/TH8fDLvnYS 19ql04BZq7Z+ON9nWIv2oFXII+vvkWy8JoGKolZLwmiIama23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUii2zKS0c0yjt/YINS/cpdZX0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzgxNzgzYjktOWI4Mi0z MDUyLWJhYzYtMjdkYWM5MzQ3NjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJZY5v6Rhbx29+lOoYag3MxSuP+zJ9Etqyno0YuGVIlvMEBcyS5ni3z w+hQyWo4Ur6V6ihMcrFFLW7t1VBcj7GRPP7HQap4GK36Gx6aAl8/qNJUL6sQG/54 wUIl+FCqVZm8zR+kPFkqlRMoZS4FyVaCoUA5FS1CkB1U8pDZZRSkuPpFWNcPrhQt Tgwdtl87Wg/tjiu/l6YzmTF0VIl71dIZm9Qyl8qICGSMG8MOD6ps+fx5w4SWi8vP GPHqdi5I6z2w608coZEEoPzN8105M0iE0nS6J1ZBeWt3I/1vQoasETO86Fj/aMNo 9eslcMx+FPXOThJsBQ9zQRXiymY2RJM= -----END CERTIFICATE-----Generated at Thu Jul 24 04:58:01 2025 by rpki-client