$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa File: 585aab71-22e8-39eb-861f-fec76f1605ea.roa (raw, json) Hash identifier: cOYM20ciUXBrOeYy2+wHwN9hnoESdlkcQJ3HTGOWRVA= Subject key identifier: 23:83:7D:49:1A:BE:92:A0:D9:21:2E:D6:85:CE:C3:F5:11:56:F2:9C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC9C838D4FE6FE4C38D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.133.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c9:c8:38:d4:fe:6f:e4:c3:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a4417b6d-a8d4-4f95-8b0d-a5132a7e1229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:82:00:47:af:95:d9:1d:54:69:15:f0:47: fc:80:8a:e8:87:e7:6d:ec:b5:d1:ef:57:ad:ec:76: ff:5a:61:ad:fe:c9:b9:de:b8:a5:de:3a:09:f8:52: 7d:f2:30:cb:ea:e8:61:5f:09:d1:58:42:0a:05:7d: 08:e1:b1:dc:f4:7a:e8:c9:74:54:18:22:54:c3:29: 40:f1:72:44:b3:68:c6:7e:a8:a6:6c:fb:e2:8a:1c: 6d:fd:da:ee:38:2d:44:c3:26:fd:38:99:6c:9c:c8: 00:3c:f1:09:21:4a:bb:ff:5c:a9:7b:c6:86:5b:0c: ab:a8:56:63:30:3e:5d:f8:9c:fb:02:8d:86:6d:05: 23:05:0d:49:3b:a1:21:d9:4a:3a:04:82:04:b0:b5: 90:c7:59:a9:5c:8f:d3:af:05:56:18:7c:53:72:dd: 47:59:8f:bb:4c:00:18:55:af:5d:dd:dd:41:cb:44: 5e:fa:60:ec:64:b8:87:2f:1c:ae:ff:1d:14:7a:83: 52:66:20:4a:81:50:cb:9f:86:ba:c4:37:b2:31:6f: c1:8b:32:84:3b:72:9a:ab:c2:a2:05:c0:b5:14:4b: 36:21:c4:4b:e0:21:eb:33:4c:68:c2:e9:eb:2c:87: ae:25:b2:11:c4:3d:69:89:22:c8:a3:bd:72:ec:d1: 7a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:83:7D:49:1A:BE:92:A0:D9:21:2E:D6:85:CE:C3:F5:11:56:F2:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:96:5d:1c:83:52:60:dc:7f:16:72:7b:c3:8a:85:d3:cc:6b: 6d:2e:89:c9:71:fe:f1:fa:e2:20:26:b6:b4:3e:67:18:37:dd: 27:e1:84:03:59:8f:54:dc:35:36:91:d2:1d:3a:77:53:02:b4: 90:d8:7a:0d:9b:63:ff:0c:ea:38:21:5b:13:b5:9f:5b:bf:f8: 2e:a8:23:d8:bb:45:10:d5:06:7d:a9:dd:2c:5f:ad:73:45:f4: e6:d5:db:1a:b8:d5:16:dd:b9:99:9d:60:6a:4f:cd:75:5d:b6: f4:77:a6:08:49:f3:3c:8c:a5:ef:5f:99:5a:f6:a5:85:f4:bf: 8a:ca:03:13:a9:1a:aa:c4:cb:bd:3e:f6:6a:e6:78:b3:bc:6b: f8:0b:fa:6e:be:36:e3:36:9c:c2:06:3e:73:b8:65:c5:80:e6: 05:3b:df:8d:3a:c3:13:5f:f8:8f:96:80:06:44:29:5b:e9:9f: 9d:1d:dd:c7:54:d5:9d:39:b5:69:e5:8b:cb:bd:0f:6a:a1:27: 30:f7:a7:68:52:f3:cc:04:dd:aa:fb:2c:58:a1:a2:1a:55:f2: 91:f8:22:11:bd:91:64:72:92:3e:e0:a0:ec:70:c4:e4:64:12: f8:6a:e7:b0:8e:49:f0:b0:44:9f:01:c7:77:56:bd:ba:ee:dd: ce:b7:60:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28nIONT+b+TDjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YTQ0MTdiNmQtYThkNC00Zjk1LThiMGQtYTUxMzJhN2UxMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAWCAEevldkdVGkV8Ef8gIroh+dt7LXR71et 7Hb/WmGt/sm53ril3joJ+FJ98jDL6uhhXwnRWEIKBX0I4bHc9HroyXRUGCJUwylA 8XJEs2jGfqimbPviihxt/druOC1Ewyb9OJlsnMgAPPEJIUq7/1ype8aGWwyrqFZj MD5d+Jz7Ao2GbQUjBQ1JO6Eh2Uo6BIIEsLWQx1mpXI/TrwVWGHxTct1HWY+7TAAY Va9d3d1By0Re+mDsZLiHLxyu/x0UeoNSZiBKgVDLn4a6xDeyMW/BizKEO3Kaq8Ki BcC1FEs2IcRL4CHrM0xowunrLIeuJbIRxD1piSLIo71y7NF6pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCODfUkavpKg2SEu1oXOw/URVvKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg1YWFiNzEtMjJlOC0z OWViLTg2MWYtZmVjNzZmMTYwNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOWXRyDUmDcfxZye8OKhdPMa20uiclx/vH64iAmtrQ+Zxg33SfhhANZ j1TcNTaR0h06d1MCtJDYeg2bY/8M6jghWxO1n1u/+C6oI9i7RRDVBn2p3SxfrXNF 9ObV2xq41RbduZmdYGpPzXVdtvR3pghJ8zyMpe9fmVr2pYX0v4rKAxOpGqrEy70+ 9mrmeLO8a/gL+m6+NuM2nMIGPnO4ZcWA5gU73406wxNf+I+WgAZEKVvpn50d3cdU 1Z05tWnli8u9D2qhJzD3p2hS88wE3ar7LFihohpV8pH4IhG9kWRykj7goOxwxORk Evhq57COSfCwRJ8Bx3dWvbru3c63YMI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:52 2025 by rpki-client