$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/524b1923-b3eb-3d24-bcbc-0d3b274769ad.roa File: 524b1923-b3eb-3d24-bcbc-0d3b274769ad.roa (raw, json) Hash identifier: K8znMZbSXucVTCubjGnZ2YwfNxbD+gnnAMTnNPUI6Vg= Subject key identifier: 53:7D:13:AA:8E:08:6D:73:3F:76:C2:3D:45:1B:E2:49:87:F7:CB:ED Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9D8E718EA18E84943600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/524b1923-b3eb-3d24-bcbc-0d3b274769ad.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.89.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9d:8e:71:8e:a1:8e:84:94:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=56162df2-c666-4e15-a262-099186682eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:c3:0a:22:2c:e5:69:5b:30:31:a7:88:26: 67:f2:6c:ef:94:77:9b:db:47:77:17:e4:2c:4e:19: 53:99:96:28:92:e4:94:36:43:ed:c3:e9:d9:fd:1b: f6:5d:82:0f:ba:59:29:56:e9:81:ee:44:cc:6c:7d: 62:c0:37:a8:bd:cd:08:26:6a:b7:cc:87:e9:23:52: bf:5b:90:ab:c5:8b:8e:60:12:04:d1:d5:38:0b:30: 09:ef:02:07:d5:00:ca:d1:13:48:52:9b:f5:9c:c4: 09:be:b3:a2:31:7b:41:2f:17:0c:42:83:af:2e:bd: e3:00:21:ab:25:db:06:1d:44:5e:92:be:6a:d2:05: 82:66:42:1a:e3:28:74:40:ac:ce:99:ca:02:c8:e5: e7:4b:3d:96:dd:58:57:e3:17:59:4a:44:e0:ec:99: 42:50:5a:3e:c5:ba:37:49:5e:41:0c:9d:e7:a1:ca: ee:25:c8:71:4e:65:53:c0:e0:7c:2c:9b:c0:a1:56: ea:42:fc:65:6e:52:c8:bc:6d:25:64:28:b2:3a:fa: 7d:b1:cd:47:e3:e7:04:ae:bd:93:16:cc:02:bb:75: f9:e4:b7:8a:b1:6d:24:8d:92:d7:5c:b2:07:69:0d: c7:33:67:50:89:cd:1f:e1:a3:8f:f4:97:85:f2:2f: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7D:13:AA:8E:08:6D:73:3F:76:C2:3D:45:1B:E2:49:87:F7:CB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/524b1923-b3eb-3d24-bcbc-0d3b274769ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:fb:6d:e0:33:99:43:ee:2e:8b:93:3e:3b:f7:dc:03:aa:ac: ce:ef:d1:40:30:2d:a9:33:79:0b:b0:5e:b2:7b:e0:20:b5:01: 83:f6:25:e1:95:5f:5c:e6:ad:2b:91:37:48:ca:a3:99:c6:db: c7:b9:aa:97:b3:e8:70:6f:d8:23:cc:19:27:f1:cf:a4:11:5c: 5c:6f:bb:60:7f:a5:ac:50:38:55:7a:aa:a5:53:85:ca:c5:b2: 1a:fc:7e:6a:66:b6:cc:f1:84:e4:2d:af:52:4b:59:ce:99:56: 70:fe:9b:52:14:ba:51:32:cc:af:6d:60:1f:b0:36:f6:df:18: 93:bd:a8:71:9c:9a:eb:64:67:a6:36:d6:6f:10:a7:0d:f5:38: 15:ed:30:bd:c5:4a:39:81:f9:8c:10:eb:ae:96:d7:20:06:ea: 57:eb:f0:b2:74:54:5f:fa:5f:7f:bb:66:e4:38:4f:b7:f7:84: 03:09:8c:80:e6:7c:0f:30:29:37:94:4f:36:d8:5a:38:a4:b5: 27:ed:e5:58:24:b7:a0:03:14:06:c9:87:82:96:7a:6d:d3:69: db:55:7a:76:28:92:4b:76:1b:ea:62:ad:00:e0:e9:f0:0e:fe: fb:65:91:29:b1:49:43:33:d4:8c:78:5a:a9:bd:9b:f6:43:6a: 98:dd:5e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG252OcY6hjoSUNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NTYxNjJkZjItYzY2Ni00ZTE1LWEyNjItMDk5MTg2NjgyZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEzDCiIs5WlbMDGniCZn8mzvlHeb20d3F+Qs ThlTmZYokuSUNkPtw+nZ/Rv2XYIPulkpVumB7kTMbH1iwDeovc0IJmq3zIfpI1K/ W5CrxYuOYBIE0dU4CzAJ7wIH1QDK0RNIUpv1nMQJvrOiMXtBLxcMQoOvLr3jACGr JdsGHURekr5q0gWCZkIa4yh0QKzOmcoCyOXnSz2W3VhX4xdZSkTg7JlCUFo+xbo3 SV5BDJ3nocruJchxTmVTwOB8LJvAoVbqQvxlblLIvG0lZCiyOvp9sc1H4+cErr2T FswCu3X55LeKsW0kjZLXXLIHaQ3HM2dQic0f4aOP9JeF8i/NMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFN9E6qOCG1zP3bCPUUb4kmH98vtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTI0YjE5MjMtYjNlYi0z ZDI0LWJjYmMtMGQzYjI3NDc2OWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj7beAzmUPuLouTPjv33AOqrM7v0UAwLakzeQuwXrJ74CC1AYP2JeGV X1zmrSuRN0jKo5nG28e5qpez6HBv2CPMGSfxz6QRXFxvu2B/paxQOFV6qqVThcrF shr8fmpmtszxhOQtr1JLWc6ZVnD+m1IUulEyzK9tYB+wNvbfGJO9qHGcmutkZ6Y2 1m8Qpw31OBXtML3FSjmB+YwQ666W1yAG6lfr8LJ0VF/6X3+7ZuQ4T7f3hAMJjIDm fA8wKTeUTzbYWjiktSft5Vgkt6ADFAbJh4KWem3TadtVenYokkt2G+pirQDg6fAO /vtlkSmxSUMz1Ix4Wqm9m/ZDapjdXrM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:57 2025 by rpki-client