$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4231ac68-1e17-3d5b-91ba-831ddcad769f.roa File: 4231ac68-1e17-3d5b-91ba-831ddcad769f.roa (raw, json) Hash identifier: HEWlIOOEfjPZDuYmZR/GDdgCnp3MFj0GSDzviS4otBs= Subject key identifier: E2:AE:48:01:49:B3:E3:0C:2B:50:E2:57:62:BA:22:C4:76:43:7B:C8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841239E01371DFA6ACF88200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4231ac68-1e17-3d5b-91ba-831ddcad769f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.118.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:39:e0:13:71:df:a6:ac:f8:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6dbc8fa7-1c70-4fd5-a64c-6d0d004f5e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9a:44:72:ec:04:a1:49:86:60:84:d4:d2:1a: 9c:a9:b3:ec:9a:a4:e1:f8:48:37:cc:58:52:c0:4e: 47:bf:54:92:fb:7d:2b:cb:33:74:62:e5:d7:3b:54: 35:f9:76:0e:91:a0:de:b2:73:ce:cb:c5:c5:88:2c: c2:cc:f1:5a:2f:67:95:f7:ab:54:15:ed:52:9e:40: f4:7c:b8:5f:44:67:b7:f8:a4:fc:79:5c:0c:5c:83: 71:db:38:a9:ce:b5:72:c7:d6:6b:e4:da:f2:38:f3: 09:9a:2c:6a:e6:9a:29:66:c4:73:4e:9c:de:82:9c: 6e:e2:dd:aa:54:5c:7f:66:5f:4d:11:5b:d7:14:78: 78:fc:9e:7a:ae:82:85:14:8a:2b:15:59:ec:56:f6: 7e:e4:c2:aa:85:9d:1d:30:c3:16:88:ea:5b:8c:a1: 92:15:02:1b:7a:55:ad:45:cb:f2:93:d2:38:fa:ec: d5:0b:27:27:ce:3e:43:78:72:59:f8:42:1b:75:08: 0f:22:54:d2:37:7a:10:72:82:ad:cf:51:35:7e:8d: 22:57:01:e5:5a:53:2a:ef:43:87:ae:a7:bd:7f:3c: 71:f6:13:30:13:c1:30:a6:79:fd:12:4d:ac:be:ea: 65:b7:e4:31:73:c9:2b:74:a4:c2:ac:e8:38:06:b4: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:48:01:49:B3:E3:0C:2B:50:E2:57:62:BA:22:C4:76:43:7B:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4231ac68-1e17-3d5b-91ba-831ddcad769f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:bf:75:d1:85:9b:1e:ad:ec:4e:52:50:57:a4:ef:e7:7a:a3: 3c:a1:f0:ee:a4:4f:a2:2e:88:cf:68:94:a3:c6:9f:38:8a:9e: 56:77:d8:6c:67:61:34:20:f7:ac:09:12:97:07:83:7e:66:49: 6d:f9:96:64:00:ee:6f:bd:c3:5b:25:b0:e3:e0:8a:a8:1b:6d: 45:ba:2c:9c:27:b5:9a:50:13:5e:3c:79:c2:b5:c9:ba:b2:3e: 3d:02:da:81:76:7d:80:58:3c:75:63:b0:dc:77:8f:d3:bf:99: 6d:e0:98:f1:c4:44:7c:15:31:9b:1e:35:6d:df:21:fc:96:a7: db:7a:9a:1c:d1:16:1c:82:d2:f2:89:89:db:0b:82:f4:bd:9b: c7:2d:2b:ec:33:d2:a9:0e:51:8b:5e:de:c9:87:b1:82:ec:01: 85:60:e9:09:cc:96:73:03:c0:52:60:59:c3:61:5f:f8:0a:aa: f6:69:03:dc:0b:d9:6c:2b:21:43:cb:5b:a7:50:c8:37:e0:3e: 5f:51:64:39:7c:7a:4d:8d:62:2b:b8:3a:ad:6d:e6:e4:4c:08: 9a:dd:66:9d:f2:a3:20:3d:60:4b:dd:a0:10:ce:ec:3c:21:0f: 12:6c:d6:8e:2c:d7:f9:14:a4:65:fe:ce:65:c9:bd:c1:83:8c: 30:e2:9d:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjngE3Hfpqz4ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmRiYzhmYTctMWM3MC00ZmQ1LWE2NGMtNmQwZDAwNGY1ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JpEcuwEoUmGYITU0hqcqbPsmqTh+Eg3zFhS wE5Hv1SS+30ryzN0YuXXO1Q1+XYOkaDesnPOy8XFiCzCzPFaL2eV96tUFe1SnkD0 fLhfRGe3+KT8eVwMXINx2zipzrVyx9Zr5NryOPMJmixq5popZsRzTpzegpxu4t2q VFx/Zl9NEVvXFHh4/J56roKFFIorFVnsVvZ+5MKqhZ0dMMMWiOpbjKGSFQIbelWt Rcvyk9I4+uzVCycnzj5DeHJZ+EIbdQgPIlTSN3oQcoKtz1E1fo0iVwHlWlMq70OH rqe9fzxx9hMwE8Ewpnn9Ek2svuplt+Qxc8krdKTCrOg4BrQhPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKuSAFJs+MMK1DiV2K6IsR2Q3vIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDIzMWFjNjgtMWUxNy0z ZDViLTkxYmEtODMxZGRjYWQ3NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu/ddGFmx6t7E5SUFek7+d6ozyh8O6kT6IuiM9olKPGnziKnlZ32Gxn YTQg96wJEpcHg35mSW35lmQA7m+9w1slsOPgiqgbbUW6LJwntZpQE148ecK1ybqy Pj0C2oF2fYBYPHVjsNx3j9O/mW3gmPHERHwVMZseNW3fIfyWp9t6mhzRFhyC0vKJ idsLgvS9m8ctK+wz0qkOUYte3smHsYLsAYVg6QnMlnMDwFJgWcNhX/gKqvZpA9wL 2WwrIUPLW6dQyDfgPl9RZDl8ek2NYiu4Oq1t5uRMCJrdZp3yoyA9YEvdoBDO7Dwh DxJs1o4s1/kUpGX+zmXJvcGDjDDindg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:32 2025 by rpki-client