$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4846ae6b-610f-39d8-af20-fd122a2d5899.roa File: 4846ae6b-610f-39d8-af20-fd122a2d5899.roa (raw, json) Hash identifier: cLSG+enLXfz2m8sfeHDvd/lzLUfXFr9E/luJUl+T8BA= Subject key identifier: 45:8C:86:13:33:D4:DA:E3:64:BA:C1:9A:03:1C:DE:BD:08:26:BB:EC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBEB842CDFB2B3A077320 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4846ae6b-610f-39d8-af20-fd122a2d5899.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.91.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:be:b8:42:cd:fb:2b:3a:07:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=5cb2baf4-3e26-47a6-b999-a8d2b6f3d554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b5:76:f0:07:bf:05:8e:a5:e8:35:35:f4:76: df:f5:a7:78:e2:d0:98:9e:7d:fd:c2:05:f1:59:b4: 7e:39:01:d8:89:f3:4e:6c:bc:7c:5c:c2:cd:7b:b1: 39:6d:20:c3:f1:0f:be:da:64:95:06:ec:ed:fe:0d: 1a:82:ac:29:bb:12:db:0d:51:8d:fb:bb:60:b5:15: f3:26:6c:37:7a:1e:90:3c:40:7e:ea:2e:53:08:f0: f0:3e:91:0e:d0:e0:56:68:f6:de:58:6d:64:37:c3: 3b:0c:67:54:94:ee:21:6c:d5:4d:2b:b0:9a:08:70: d9:f8:c3:37:7f:81:79:02:bb:b4:99:fb:bd:05:63: 5f:2b:e4:a3:82:19:6e:51:40:a4:b6:c0:3b:97:a5: 95:7b:52:40:1b:b7:50:9f:a1:59:69:e8:ec:ba:47: 05:ae:ba:35:3e:b3:82:66:12:ff:f2:d9:d9:4b:3c: c7:6d:22:22:ef:73:a7:f9:9c:ab:04:49:a5:ba:54: 26:75:4a:3a:29:d4:77:fc:c1:f3:e6:73:19:8b:e2: d6:99:d5:f6:ae:49:1a:cf:cc:e5:fc:10:ab:c2:88: 73:a5:20:21:2b:9d:7c:22:3b:36:0f:46:d9:15:40: f4:df:b7:2e:bf:d0:61:6e:17:9a:1b:97:ff:a0:b1: 85:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8C:86:13:33:D4:DA:E3:64:BA:C1:9A:03:1C:DE:BD:08:26:BB:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4846ae6b-610f-39d8-af20-fd122a2d5899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.91.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:1a:96:73:18:af:1f:b0:ca:42:fe:c4:ad:9f:8d:de:f8:55: 5a:0b:0f:d2:48:0f:e3:08:80:be:01:ac:80:3a:2a:0b:8b:a7: 4e:ef:f9:ce:8f:18:61:0a:9b:92:5e:e9:ce:2a:42:38:f4:75: 97:49:d0:a0:47:90:b1:d0:9d:f4:c0:01:c6:10:b5:bf:d1:ed: 66:2e:31:93:36:a5:3d:fc:ef:f5:6a:b3:eb:3d:d2:78:5f:f0: 56:ec:32:51:f3:0b:74:bb:80:8c:38:11:a1:52:52:27:5b:59: 7f:20:96:c0:9e:6f:29:b7:74:ca:f4:7e:a2:a6:b9:3f:10:89: a2:65:14:89:c0:93:da:cf:a5:2b:b0:e7:f5:69:2a:1e:74:1e: ae:ea:6d:01:4e:0b:1e:4d:43:0a:b6:bc:2d:ef:a6:7c:a3:f9: fc:ad:5e:82:07:8b:1f:28:61:a5:7a:e8:0d:07:db:8d:29:1e: fe:b5:99:9a:38:4d:f2:f8:6f:62:bf:e4:b6:a4:39:ee:e4:ac: d4:c9:0b:19:83:10:7f:1a:aa:96:0c:e4:3a:0e:15:7e:7a:be: 09:2c:fa:e0:2c:23:28:cb:20:5f:d5:2b:2e:d5:00:d8:69:f7: b1:ef:a3:41:50:fc:81:af:ac:42:b5:90:de:79:40:b2:9f:3e: 8c:a4:19:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2764Qs37KzoHcyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NWNiMmJhZjQtM2UyNi00N2E2LWI5OTktYThkMmI2ZjNkNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLV28Ae/BY6l6DU19Hbf9ad44tCYnn39wgXx WbR+OQHYifNObLx8XMLNe7E5bSDD8Q++2mSVBuzt/g0agqwpuxLbDVGN+7tgtRXz Jmw3eh6QPEB+6i5TCPDwPpEO0OBWaPbeWG1kN8M7DGdUlO4hbNVNK7CaCHDZ+MM3 f4F5Aru0mfu9BWNfK+SjghluUUCktsA7l6WVe1JAG7dQn6FZaejsukcFrro1PrOC ZhL/8tnZSzzHbSIi73On+ZyrBEmlulQmdUo6KdR3/MHz5nMZi+LWmdX2rkkaz8zl /BCrwohzpSAhK518Ijs2D0bZFUD037cuv9BhbheaG5f/oLGFKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWMhhMz1NrjZLrBmgMc3r0IJrvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDg0NmFlNmItNjEwZi0z OWQ4LWFmMjAtZmQxMjJhMmQ1ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIltgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgalnMYrx+wykL+xK2fjd74VVoLD9JID+MIgL4BrIA6KguLp07v+c6P GGEKm5Je6c4qQjj0dZdJ0KBHkLHQnfTAAcYQtb/R7WYuMZM2pT387/Vqs+s90nhf 8FbsMlHzC3S7gIw4EaFSUidbWX8glsCebym3dMr0fqKmuT8QiaJlFInAk9rPpSuw 5/VpKh50Hq7qbQFOCx5NQwq2vC3vpnyj+fytXoIHix8oYaV66A0H240pHv61mZo4 TfL4b2K/5LakOe7krNTJCxmDEH8aqpYM5DoOFX56vgks+uAsIyjLIF/VKy7VANhp 97Hvo0FQ/IGvrEK1kN55QLKfPoykGRY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:42 2025 by rpki-client