$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c749249-ee2b-3147-8676-fc5c4f882474.roa File: 5c749249-ee2b-3147-8676-fc5c4f882474.roa (raw, json) Hash identifier: tYhFxpLTdefbZgx8UxtihCeSBXitvVMsQ7XHeP+y5Jo= Subject key identifier: 30:63:3C:97:19:56:06:CC:22:37:6D:49:7C:93:31:42:15:59:F6:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD14147F9ACF85364B4C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c749249-ee2b-3147-8676-fc5c4f882474.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.130.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d1:41:47:f9:ac:f8:53:64:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=11e59c9a-8e4e-4f73-ae00-7dd8a158ca0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:90:81:cf:11:08:47:38:fb:8c:4a:ec:fc: f8:33:b2:e5:0b:d9:25:ef:f9:68:67:65:60:24:8f: 4e:28:16:77:8a:c2:8e:d4:08:37:f7:e5:c0:10:8c: 3c:ed:ba:d3:33:c6:ae:3e:2f:4d:b8:ce:ea:f1:32: 98:c5:26:e3:5e:0d:63:05:b1:41:6c:ba:ad:2e:b1: 3e:c6:5d:08:4b:77:8e:83:c1:4d:8f:e3:c7:5e:40: f7:1c:7b:df:f9:4a:7a:fd:9b:48:ca:25:42:91:1d: 19:42:e6:e1:6b:50:fa:f3:64:57:de:57:85:c7:05: 96:2d:85:26:94:a6:18:31:bb:67:5b:57:7f:54:31: 8d:a3:5d:7d:f4:61:f9:fa:72:ac:3d:79:c2:a1:60: 1f:9b:ee:89:54:13:12:7c:7f:3b:31:06:57:85:fc: 5f:1f:04:ff:f7:6f:b8:20:4f:9e:18:d9:58:7f:af: f4:46:a5:83:55:3e:be:88:4c:48:8f:8b:f1:6c:15: eb:34:c9:f5:69:33:0e:ae:37:32:ab:5b:5a:fb:13: 34:a0:bf:9f:2a:0a:54:f7:fd:e2:57:e0:d4:ce:55: 6e:4c:72:65:4f:e2:02:d7:44:56:c4:e4:66:0d:c5: 29:83:ba:c0:70:42:1f:ae:80:7a:3d:df:97:f4:15: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:63:3C:97:19:56:06:CC:22:37:6D:49:7C:93:31:42:15:59:F6:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c749249-ee2b-3147-8676-fc5c4f882474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.130.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:fe:49:35:fc:02:b8:a8:11:b9:e1:3a:37:00:93:70:8f:39: cd:58:f9:27:47:7e:c8:6c:ae:7d:c0:fb:e6:6c:15:d5:73:c3: e6:46:25:00:c4:a9:e7:6c:9f:2b:4c:44:a8:49:df:15:00:04: d2:06:d4:8e:eb:d4:f4:86:f5:8d:55:10:ef:2a:c4:fc:f6:6f: 31:27:0e:d1:f2:96:32:00:ad:ee:c0:09:0c:88:d7:72:52:90: 6e:8a:72:35:d9:42:5c:de:9f:48:33:a3:58:87:30:1e:89:10: 4e:b2:e2:fc:dc:cd:c9:26:00:fd:e9:bf:59:e1:74:5f:fe:b2: 56:98:ca:bf:29:f5:0d:6f:68:b6:1c:cf:7c:6a:e9:9e:ae:89: 57:76:7a:3b:5e:c1:30:47:6b:56:df:d9:de:36:0c:1c:37:2b: 27:a2:bd:3e:2f:46:80:e9:83:82:e8:fe:01:3b:eb:ad:c5:d8: e1:33:ff:dd:b5:62:99:5d:f4:f5:db:b0:b7:33:90:85:52:c3: 36:83:26:b5:d7:39:00:f7:96:1b:80:9a:a8:fa:e9:5a:16:f3: 54:38:84:1a:85:7e:2a:68:f7:ad:19:a6:89:ef:86:39:43:b4: 5d:58:28:d8:e6:33:4f:eb:e4:eb:07:37:7d:c9:5b:53:f7:d4: 8f:0e:27:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29FBR/ms+FNktMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTFlNTljOWEtOGU0ZS00ZjczLWFlMDAtN2RkOGExNThjYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB6Qgc8RCEc4+4xK7Pz4M7LlC9kl7/loZ2Vg JI9OKBZ3isKO1Ag39+XAEIw87brTM8auPi9NuM7q8TKYxSbjXg1jBbFBbLqtLrE+ xl0IS3eOg8FNj+PHXkD3HHvf+Up6/ZtIyiVCkR0ZQubha1D682RX3leFxwWWLYUm lKYYMbtnW1d/VDGNo1199GH5+nKsPXnCoWAfm+6JVBMSfH87MQZXhfxfHwT/92+4 IE+eGNlYf6/0RqWDVT6+iExIj4vxbBXrNMn1aTMOrjcyq1ta+xM0oL+fKgpU9/3i V+DUzlVuTHJlT+IC10RWxORmDcUpg7rAcEIfroB6Pd+X9BV9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBjPJcZVgbMIjdtSXyTMUIVWfavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWM3NDkyNDktZWUyYi0z MTQ3LTg2NzYtZmM1YzRmODgyNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr+STX8ArioEbnhOjcAk3CPOc1Y+SdHfshsrn3A++ZsFdVzw+ZGJQDE qedsnytMRKhJ3xUABNIG1I7r1PSG9Y1VEO8qxPz2bzEnDtHyljIAre7ACQyI13JS kG6KcjXZQlzen0gzo1iHMB6JEE6y4vzczckmAP3pv1nhdF/+slaYyr8p9Q1vaLYc z3xq6Z6uiVd2ejtewTBHa1bf2d42DBw3KyeivT4vRoDpg4Lo/gE7663F2OEz/921 Ypld9PXbsLczkIVSwzaDJrXXOQD3lhuAmqj66VoW81Q4hBqFfipo960ZponvhjlD tF1YKNjmM0/r5OsHN33JW1P31I8OJ7Q= -----END CERTIFICATE-----Generated at Tue Jul 22 04:42:09 2025 by rpki-client