$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d0d9783-6f85-3a53-a5fd-efb9543c1c21.roa File: 3d0d9783-6f85-3a53-a5fd-efb9543c1c21.roa (raw, json) Hash identifier: jaMRSMdLLwQlaXOsD1v3RPfl31Iw9CtxvYVDvdOuc7g= Subject key identifier: C9:96:AE:AD:28:11:CC:84:99:4F:97:17:24:A9:83:FB:51:81:35:01 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBCBE90711259C7700CB40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d0d9783-6f85-3a53-a5fd-efb9543c1c21.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.82.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:cb:e9:07:11:25:9c:77:00:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=7c4799f8-31b9-42bd-8c81-154740987033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:1c:40:22:aa:b4:4b:03:a4:f2:20:92:11: 41:da:e6:34:74:97:91:32:47:a0:00:1e:a9:1d:69: 23:ff:74:cc:20:84:4c:49:86:fd:35:1b:73:04:19: a3:18:88:05:6f:e9:47:14:c7:c5:1a:c7:5b:18:6c: a9:a0:90:44:7e:bf:2f:e5:e3:c0:c5:4d:3f:56:dd: c9:74:6e:9d:dc:04:71:0a:37:0d:71:6d:e6:29:ce: d2:50:21:77:0c:4f:1f:28:a6:63:5f:e2:4e:21:0b: 07:12:b9:1a:b5:54:87:13:47:47:e8:d9:59:2d:f6: 49:65:e8:3c:75:64:23:47:04:5d:4c:5c:4f:99:b6: 5d:8e:e8:4f:27:ac:eb:7c:83:32:ac:68:32:2a:82: 21:d2:8f:06:7d:7c:fe:f8:1a:b4:71:06:2e:cb:fd: f1:89:ab:0c:8b:e4:71:e4:c0:d3:94:c3:7b:0b:0e: b3:37:bb:54:e4:5b:2a:1f:92:74:91:6e:87:22:42: 1b:ad:b4:32:d7:12:f1:f3:fc:09:ec:fb:43:f1:f9: 6f:37:40:86:4c:55:6e:23:c2:a6:22:80:11:3f:64: b1:99:4e:43:2b:00:0b:c5:ab:aa:eb:3e:cd:9c:86: 90:b3:90:3a:f3:01:28:19:2e:dc:d5:47:a0:ae:4f: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:96:AE:AD:28:11:CC:84:99:4F:97:17:24:A9:83:FB:51:81:35:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d0d9783-6f85-3a53-a5fd-efb9543c1c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.82.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6a:7a:7b:ef:19:ae:e1:b3:7b:ad:33:b2:ee:91:2a:b8:93: 89:19:19:be:1d:1b:56:0a:80:a7:14:d7:5e:4b:09:67:0c:1e: bb:31:77:e2:59:35:3e:93:57:5e:be:e7:f0:26:a4:07:ca:c4: 9f:2d:40:46:a8:09:e1:29:85:d0:9d:5f:9f:0f:ad:8b:83:21: d6:56:f9:0e:7c:47:b3:11:45:36:2e:39:28:97:97:78:54:df: 1f:68:76:70:86:88:7e:e3:29:0a:3f:1e:8a:be:87:fc:ce:c5: 50:94:5f:56:c3:5d:26:63:46:2c:16:6d:61:79:1a:5b:37:0b: f7:d6:9f:e5:05:b0:ec:58:49:5c:10:13:3c:26:8e:bc:56:5b: 5b:6e:eb:11:0e:b5:c8:52:67:e8:9e:53:e5:0e:fe:6e:0e:f1: 80:10:07:62:c0:6b:c9:ee:5f:4e:64:f6:dc:0f:c5:21:3a:7d: 45:ce:89:fd:d8:18:d2:00:9f:58:6b:14:ef:72:68:08:1e:48: 5e:f8:78:c2:00:86:57:a3:13:b4:9b:4f:c0:47:c1:d7:5e:43: 8f:14:b9:22:14:02:7c:7a:c3:8a:b5:d3:b6:d2:94:2a:8a:a2: 9f:c0:76:53:60:48:da:78:85:3d:34:7c:69:10:38:76:12:7e: 02:e1:7b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28vpBxElnHcAy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk N2M0Nzk5ZjgtMzFiOS00MmJkLThjODEtMTU0NzQwOTg3MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqwcQCKqtEsDpPIgkhFB2uY0dJeRMkegAB6p HWkj/3TMIIRMSYb9NRtzBBmjGIgFb+lHFMfFGsdbGGypoJBEfr8v5ePAxU0/Vt3J dG6d3ARxCjcNcW3mKc7SUCF3DE8fKKZjX+JOIQsHErkatVSHE0dH6NlZLfZJZeg8 dWQjRwRdTFxPmbZdjuhPJ6zrfIMyrGgyKoIh0o8GfXz++Bq0cQYuy/3xiasMi+Rx 5MDTlMN7Cw6zN7tU5FsqH5J0kW6HIkIbrbQy1xLx8/wJ7PtD8flvN0CGTFVuI8Km IoARP2SxmU5DKwALxauq6z7NnIaQs5A68wEoGS7c1Uegrk/3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmWrq0oEcyEmU+XFySpg/tRgTUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2QwZDk3ODMtNmY4NS0z YTUzLWE1ZmQtZWZiOTU0M2MxYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNqenvvGa7hs3utM7LukSq4k4kZGb4dG1YKgKcU115LCWcMHrsxd+JZ NT6TV16+5/AmpAfKxJ8tQEaoCeEphdCdX58PrYuDIdZW+Q58R7MRRTYuOSiXl3hU 3x9odnCGiH7jKQo/Hoq+h/zOxVCUX1bDXSZjRiwWbWF5Gls3C/fWn+UFsOxYSVwQ EzwmjrxWW1tu6xEOtchSZ+ieU+UO/m4O8YAQB2LAa8nuX05k9twPxSE6fUXOif3Y GNIAn1hrFO9yaAgeSF74eMIAhlejE7SbT8BHwddeQ48UuSIUAnx6w4q107bSlCqK op/AdlNgSNp4hT00fGkQOHYSfgLhe60= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:34 2025 by rpki-client