$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ef65cb1-c300-3dd0-a1db-e8bc2e47eaed.roa File: 5ef65cb1-c300-3dd0-a1db-e8bc2e47eaed.roa (raw, json) Hash identifier: IhKwsN+5pnWuY7ZZTRCgvBiTrD7u2PMLTgYPFOKXATQ= Subject key identifier: 5C:9B:58:01:40:9B:F9:44:7D:2A:23:89:26:1E:DE:1C:3E:9C:25:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC68E9A4F33C92FBCF480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ef65cb1-c300-3dd0-a1db-e8bc2e47eaed.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.135.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c6:8e:9a:4f:33:c9:2f:bc:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=9bae0b17-43dc-4dd7-a522-162b170c4290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:05:a1:f7:62:59:ee:2e:d6:90:3a:2a:b8: 5d:ff:8e:18:0d:28:3f:0a:67:27:cc:c6:c8:95:7d: 3a:64:01:af:85:08:88:4d:91:d5:10:97:8a:ae:76: 48:bf:07:c6:bb:02:fc:80:a6:2b:24:30:43:7b:e0: 22:9f:cd:b0:1e:c2:b0:18:10:9f:e0:82:9e:7c:59: 6e:98:ff:31:9e:1f:42:e0:15:e3:8e:f7:b6:c4:54: 7a:d0:12:31:2c:a9:a9:61:a0:5d:9c:66:5d:18:30: 3a:60:d0:97:71:10:23:f0:7c:f4:f5:c3:9f:cc:b0: f5:b8:57:48:e1:4d:b2:bb:51:49:29:93:0c:43:bb: c5:6b:30:aa:9f:e9:d2:93:2b:7c:d4:e7:db:d9:36: d4:10:c0:a1:3b:d6:dc:dd:1b:79:c1:57:ca:1c:21: bc:fe:14:10:f3:75:e2:f1:22:76:96:bb:84:e2:a6: 31:e8:39:51:fe:f0:53:34:d1:3f:27:7e:b8:b0:62: 2f:e2:55:d1:68:4d:9d:8d:12:5a:7f:e7:74:61:94: 52:c8:c5:54:cb:d7:e3:88:a7:05:09:53:e1:f8:5c: d3:93:96:47:b7:ba:44:ae:3f:42:fe:4b:7d:1e:ff: 3d:60:06:bf:c1:54:32:42:18:3e:41:97:4a:85:1a: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9B:58:01:40:9B:F9:44:7D:2A:23:89:26:1E:DE:1C:3E:9C:25:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ef65cb1-c300-3dd0-a1db-e8bc2e47eaed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f9:a3:6c:8a:3f:40:f2:0d:e1:dc:21:a1:17:aa:8a:6b:ba: e2:93:1d:a9:cd:5d:14:dd:55:5a:e4:22:67:99:94:df:bb:73: 67:a7:ec:64:ef:8e:ba:51:e1:e2:c6:83:52:1a:1d:8a:19:d5: 3c:50:b6:ba:80:24:de:bb:5c:49:04:f1:64:7e:bc:7c:30:af: 27:eb:3c:64:7c:4a:2f:1d:17:52:15:b9:58:15:a9:96:b3:35: 5b:3f:45:e9:22:d7:7b:55:1e:b0:9c:0a:70:b7:82:5f:53:61: cf:19:f9:cf:b4:3d:c6:0a:fa:ad:b3:f0:e5:89:17:6d:98:2a: 4c:de:ed:ec:69:7e:1a:5b:25:1a:5b:fb:c4:28:dd:8a:01:f4: 5b:26:6e:eb:00:eb:35:08:7c:1d:8d:53:8c:2b:06:c1:ea:d8: 4c:0e:ae:60:35:af:4b:c8:d0:cc:38:d5:77:03:6e:7b:1a:8c: e9:50:93:49:4f:de:74:7e:08:00:b8:a4:9f:96:e0:bc:c5:7b: 45:38:97:15:f6:45:84:45:6a:4e:c6:39:dc:cf:be:09:de:f5: 42:dc:65:07:2c:bc:2a:33:5d:76:4d:c3:ca:57:f9:75:4f:7a: 95:a9:82:94:f8:76:50:d3:11:9c:55:8d:9b:3c:18:78:f7:c0: b5:78:5c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28aOmk8zyS+89IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OWJhZTBiMTctNDNkYy00ZGQ3LWE1MjItMTYyYjE3MGM0MjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOsFofdiWe4u1pA6Krhd/44YDSg/CmcnzMbI lX06ZAGvhQiITZHVEJeKrnZIvwfGuwL8gKYrJDBDe+Ain82wHsKwGBCf4IKefFlu mP8xnh9C4BXjjve2xFR60BIxLKmpYaBdnGZdGDA6YNCXcRAj8Hz09cOfzLD1uFdI 4U2yu1FJKZMMQ7vFazCqn+nSkyt81Ofb2TbUEMChO9bc3Rt5wVfKHCG8/hQQ83Xi 8SJ2lruE4qYx6DlR/vBTNNE/J364sGIv4lXRaE2djRJaf+d0YZRSyMVUy9fjiKcF CVPh+FzTk5ZHt7pErj9C/kt9Hv89YAa/wVQyQhg+QZdKhRotvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFybWAFAm/lEfSojiSYe3hw+nCVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWVmNjVjYjEtYzMwMC0z ZGQwLWExZGItZThiYzJlNDdlYWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIocQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG35o2yKP0DyDeHcIaEXqopruuKTHanNXRTdVVrkImeZlN+7c2en7GTv jrpR4eLGg1IaHYoZ1TxQtrqAJN67XEkE8WR+vHwwryfrPGR8Si8dF1IVuVgVqZaz NVs/Reki13tVHrCcCnC3gl9TYc8Z+c+0PcYK+q2z8OWJF22YKkze7expfhpbJRpb +8Qo3YoB9FsmbusA6zUIfB2NU4wrBsHq2EwOrmA1r0vI0Mw41XcDbnsajOlQk0lP 3nR+CAC4pJ+W4LzFe0U4lxX2RYRFak7GOdzPvgne9ULcZQcsvCozXXZNw8pX+XVP epWpgpT4dlDTEZxVjZs8GHj3wLV4XDA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:14:47 2025 by rpki-client