$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f8e0a74-6f88-36db-a753-d62b16d9c96b.roa File: 4f8e0a74-6f88-36db-a753-d62b16d9c96b.roa (raw, json) Hash identifier: up7qjyoG46GQ4k8s133bYOVWHUPLXI6rdrP3rLCKatc= Subject key identifier: 67:A4:C1:2E:3E:E4:85:41:0E:49:A0:F5:DA:DD:7B:72:02:99:87:65 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBBC332B97A4499C28E600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f8e0a74-6f88-36db-a753-d62b16d9c96b.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.167.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:bc:33:2b:97:a4:49:9c:28:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=47d3fa7c-0ef5-4c7c-a172-3d3f0724adc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:c6:8a:bd:7d:fc:f9:6a:02:78:1b:a6:7b: db:9e:ef:e8:93:ed:2d:aa:da:2f:a7:d2:19:1d:67: e5:33:9a:0f:d9:c2:1a:5b:84:22:83:de:d3:4e:9d: 90:15:cb:92:36:63:88:ea:ee:ab:f0:fd:d0:e5:a1: e4:7c:26:e5:d9:d1:1e:d7:f6:e0:51:0a:71:f2:f2: b6:03:ed:3d:6a:eb:8f:48:9a:18:08:5a:00:18:48: 00:e4:4c:49:53:c0:f4:9e:ed:29:0a:94:f5:98:07: f4:97:03:01:e9:d9:4f:ed:e7:57:fb:47:84:a8:6f: c2:2b:68:ad:aa:76:15:8f:9b:09:f7:57:9c:39:75: 0c:3f:79:ef:4e:f6:72:49:28:15:2e:9e:57:c7:54: 3a:48:30:4b:0f:f4:53:f2:ea:f2:27:7c:fb:05:fc: 85:b4:4a:9b:c8:99:e8:15:29:29:ab:3e:43:99:3c: bc:73:38:32:14:5f:0c:d8:26:75:11:c6:b9:8b:5a: 73:a7:6b:7d:8e:8d:a0:6a:61:47:2c:66:50:e1:cf: 39:c8:ef:c7:9f:ce:60:51:2d:e6:2b:32:c6:6c:7d: b2:02:41:ba:97:72:cc:12:ce:55:94:96:38:64:2a: 43:c8:55:0e:70:21:bd:26:ef:af:5b:3c:05:b7:8d: b7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A4:C1:2E:3E:E4:85:41:0E:49:A0:F5:DA:DD:7B:72:02:99:87:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f8e0a74-6f88-36db-a753-d62b16d9c96b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.167.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:58:b4:78:59:7e:a2:06:3c:67:4d:e2:2c:ba:e7:86:0a:28: 82:b0:f5:24:3f:6e:89:4f:95:01:91:87:2e:5d:8e:36:a6:bd: 23:5d:fd:8c:55:ef:ab:e8:54:b9:44:69:1b:69:84:a5:cc:bb: 32:a1:3c:24:81:40:7e:59:89:3e:ef:89:41:da:ed:5f:bc:76: d2:33:dc:2c:92:43:64:f8:43:e8:16:52:c6:0b:fe:ed:bd:a4: bd:1b:ae:04:08:6d:c1:ed:e3:34:f3:77:03:2d:ce:db:c1:7b: eb:af:eb:47:4d:67:2a:8c:b3:6e:c1:cd:16:ae:50:55:c2:56: 1f:ca:e1:ba:2c:22:2b:dd:aa:e5:e6:ff:fe:b3:07:e8:8f:3c: f7:15:44:88:ab:01:f8:f0:07:f4:39:d5:6c:af:e7:0d:c8:79: 58:e8:14:6b:41:47:46:20:10:96:68:5a:7f:7e:95:0c:4c:57: 04:28:d4:be:ef:d3:38:7e:88:00:95:7e:d2:b0:85:62:4f:18: 4a:24:05:9b:ce:5a:fe:74:03:cf:6d:01:2f:57:1f:17:44:b9: 97:d4:cc:c3:9e:43:12:9a:73:80:02:d4:0b:04:a5:0d:db:bd: 28:c0:24:2d:d3:85:49:26:7f:e0:ff:3d:ad:94:62:f1:84:92: 1f:09:13:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27wzK5ekSZwo5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDdkM2ZhN2MtMGVmNS00YzdjLWExNzItM2QzZjA3MjRhZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEjGir19/PlqAngbpnvbnu/ok+0tqtovp9IZ HWflM5oP2cIaW4Qig97TTp2QFcuSNmOI6u6r8P3Q5aHkfCbl2dEe1/bgUQpx8vK2 A+09auuPSJoYCFoAGEgA5ExJU8D0nu0pCpT1mAf0lwMB6dlP7edX+0eEqG/CK2it qnYVj5sJ91ecOXUMP3nvTvZySSgVLp5Xx1Q6SDBLD/RT8uryJ3z7BfyFtEqbyJno FSkpqz5DmTy8czgyFF8M2CZ1Eca5i1pzp2t9jo2gamFHLGZQ4c85yO/Hn85gUS3m KzLGbH2yAkG6l3LMEs5VlJY4ZCpDyFUOcCG9Ju+vWzwFt4233QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGekwS4+5IVBDkmg9drde3ICmYdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGY4ZTBhNzQtNmY4OC0z NmRiLWE3NTMtZDYyYjE2ZDljOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIqdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClYtHhZfqIGPGdN4iy654YKKIKw9SQ/bolPlQGRhy5djjamvSNd/YxV 76voVLlEaRtphKXMuzKhPCSBQH5ZiT7viUHa7V+8dtIz3CySQ2T4Q+gWUsYL/u29 pL0brgQIbcHt4zTzdwMtztvBe+uv60dNZyqMs27BzRauUFXCVh/K4bosIivdquXm //6zB+iPPPcVRIirAfjwB/Q51Wyv5w3IeVjoFGtBR0YgEJZoWn9+lQxMVwQo1L7v 0zh+iACVftKwhWJPGEokBZvOWv50A89tAS9XHxdEuZfUzMOeQxKac4AC1AsEpQ3b vSjAJC3ThUkmf+D/Pa2UYvGEkh8JE1Y= -----END CERTIFICATE-----Generated at Tue Jul 22 04:38:05 2025 by rpki-client