$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e586e27-366f-3114-916b-691e605b157a.roa File: 5e586e27-366f-3114-916b-691e605b157a.roa (raw, json) Hash identifier: nOGyhWN6eKlfBuB8zPvBsZat+cHpZ3OiHrmBJxWDx8A= Subject key identifier: D3:B1:2D:FE:9E:E4:44:62:2B:05:D9:B1:79:39:10:E2:FC:F5:A4:A4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84118EBC8C232AF6F15BFF40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e586e27-366f-3114-916b-691e605b157a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.108.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8e:bc:8c:23:2a:f6:f1:5b:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2c61e6fd-fd13-42d9-b97d-af47107e1ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:dc:57:c8:69:bc:58:b3:7b:73:13:dc:c9: ae:13:48:68:4d:82:2c:6b:2a:0e:d3:a9:60:cc:7a: 4e:8f:e0:f4:ba:d8:c5:9d:98:a9:4c:ca:75:28:03: 5b:d2:b4:85:fe:99:da:6d:df:ef:90:3e:22:54:ab: 0c:83:ba:0f:d8:b4:7c:d9:f7:e4:9c:63:83:ad:36: d3:24:6f:83:6d:0d:65:7a:db:9e:29:a1:6d:70:8c: 60:2c:c0:d4:20:0d:da:2c:39:61:70:b8:54:de:29: 50:89:0a:db:42:15:39:25:d3:ce:ca:a7:02:f4:7a: 2d:ee:81:d4:b1:a5:8d:65:a0:5b:bb:23:cf:fc:6d: 08:1d:b7:66:59:6f:7e:63:bd:4b:08:42:af:fd:c5: df:5a:71:b1:2b:1d:ac:7d:8b:b5:df:97:4c:61:26: f8:6a:d9:a4:7d:1f:f8:06:cd:13:cd:8e:8c:8d:37: f3:f8:19:ed:78:a6:46:ba:12:65:d6:19:f8:5b:03: f9:56:04:f1:16:e2:a3:4a:6a:b3:01:0b:a5:f2:df: c5:f7:1b:31:2f:48:19:4b:d1:8b:e7:3a:17:51:8a: 63:45:61:53:12:48:97:c6:78:1f:7d:dc:f6:64:b9: 1c:66:36:5a:ea:ab:87:c7:66:da:4e:c2:e8:d0:e1: 98:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B1:2D:FE:9E:E4:44:62:2B:05:D9:B1:79:39:10:E2:FC:F5:A4:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e586e27-366f-3114-916b-691e605b157a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0a:28:cc:70:a7:03:ac:96:36:54:e8:fb:a2:3c:cd:c6:28: 3c:99:ad:ab:5a:dc:a7:dd:8a:ed:bf:b3:6b:72:2f:87:d9:7c: b9:71:8d:2c:cb:92:c2:e4:ee:c6:2b:1a:38:d3:d3:c7:9d:11: a6:10:ff:61:82:d1:69:25:f2:21:c8:1b:48:15:c7:ce:4b:bc: bd:47:ea:a9:98:66:eb:7a:77:4f:1b:2d:e7:d5:9c:6d:66:43: ad:e3:53:23:08:39:a2:d0:48:0f:92:2a:7e:2f:da:35:1b:9c: e3:cd:1f:77:b0:b7:37:82:06:51:13:e6:61:2f:e9:e5:e7:97: f4:b0:b2:28:99:2b:7d:1b:c1:a3:e9:db:29:a6:57:e3:23:d2: f3:58:d9:2a:3f:a1:00:cd:03:94:35:85:5f:db:0e:87:13:64: 45:6e:f2:e6:e7:81:54:42:bf:a1:21:aa:69:05:5e:2b:43:c0: 73:b5:ab:f2:c3:0e:90:60:c0:21:01:70:12:07:55:1a:72:01: 2d:7b:d1:a7:fe:f6:46:da:9f:07:c3:cc:55:6f:0f:bf:10:dc: 27:04:1c:a7:4a:bc:2d:36:fa:ca:0f:17:59:ab:b9:5e:11:bf: 37:23:9a:83:0b:73:8a:86:3b:cb:ab:63:fc:6f:ed:51:1d:a7: d7:58:c8:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEY68jCMq9vFb/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmM2MWU2ZmQtZmQxMy00MmQ5LWI5N2QtYWY0NzEwN2UxZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmncV8hpvFize3MT3MmuE0hoTYIsayoO06lg zHpOj+D0utjFnZipTMp1KANb0rSF/pnabd/vkD4iVKsMg7oP2LR82ffknGODrTbT JG+DbQ1letueKaFtcIxgLMDUIA3aLDlhcLhU3ilQiQrbQhU5JdPOyqcC9Hot7oHU saWNZaBbuyPP/G0IHbdmWW9+Y71LCEKv/cXfWnGxKx2sfYu135dMYSb4atmkfR/4 Bs0TzY6MjTfz+BnteKZGuhJl1hn4WwP5VgTxFuKjSmqzAQul8t/F9xsxL0gZS9GL 5zoXUYpjRWFTEkiXxngffdz2ZLkcZjZa6quHx2baTsLo0OGYvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOxLf6e5ERiKwXZsXk5EOL89aSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWU1ODZlMjctMzY2Zi0z MTE0LTkxNmItNjkxZTYwNWIxNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMKKMxwpwOsljZU6PuiPM3GKDyZrata3Kfdiu2/s2tyL4fZfLlxjSzL ksLk7sYrGjjT08edEaYQ/2GC0Wkl8iHIG0gVx85LvL1H6qmYZut6d08bLefVnG1m Q63jUyMIOaLQSA+SKn4v2jUbnOPNH3ewtzeCBlET5mEv6eXnl/SwsiiZK30bwaPp 2ymmV+Mj0vNY2So/oQDNA5Q1hV/bDocTZEVu8ubngVRCv6EhqmkFXitDwHO1q/LD DpBgwCEBcBIHVRpyAS170af+9kbanwfDzFVvD78Q3CcEHKdKvC02+soPF1mruV4R vzcjmoMLc4qGO8urY/xv7VEdp9dYyBI= -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:40 2025 by rpki-client