$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87659ecb-cb7f-3140-a600-f402730776af.roa File: 87659ecb-cb7f-3140-a600-f402730776af.roa (raw, json) Hash identifier: TJJUEU29gbimn6SSeQvtZP0PZuBnfmtptHOLnjchqf4= Subject key identifier: BA:9F:C6:FA:A7:62:DD:BB:C8:C6:4C:6C:72:09:60:42:D2:0E:D8:F5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8412370D78233BD5EDEEE400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87659ecb-cb7f-3140-a600-f402730776af.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.108.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:37:0d:78:23:3b:d5:ed:ee:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=22572071-98d5-4e85-a9d7-971ea4a5459e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:95:26:20:c0:22:22:e5:c6:ca:c1:8f:59: 96:05:05:f5:80:dc:30:de:f0:e2:f5:bb:08:12:e2: 38:36:44:c4:09:d9:cb:a3:0d:66:19:41:3d:94:8d: e2:8b:81:a3:0a:d1:fe:e4:ee:66:5d:55:4d:87:08: f7:4c:35:4c:7f:56:b1:e1:bb:2f:53:b7:25:11:dc: 20:78:9f:95:41:a1:db:5d:a9:79:6f:ba:b1:ba:84: 29:ca:b5:b1:94:62:35:11:89:5a:92:83:04:c5:9d: e3:0d:27:2a:da:a7:77:9a:7c:53:2c:ec:ae:69:30: 6c:30:6d:c2:72:d6:0c:2a:b6:d4:76:de:df:cb:91: 86:03:ea:43:11:ea:b7:a7:a3:42:11:2c:63:30:38: 43:f6:b3:6b:d8:72:cc:c1:27:4b:11:f8:c5:56:af: fb:7b:0c:a7:01:ad:a1:70:75:cf:e4:95:d0:d3:2d: bb:3c:bf:e5:27:c6:2f:ac:66:28:3d:ea:d3:d4:95: a4:bc:42:78:ff:46:7f:59:40:2e:71:a5:85:fd:f4: ce:42:39:d2:c9:8b:1f:4b:21:10:de:fc:67:52:b0: 59:31:31:fd:19:da:ca:6a:18:3d:45:1d:f3:7b:50: 99:00:df:75:78:f8:1a:6e:37:f6:0f:c8:3a:b0:88: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9F:C6:FA:A7:62:DD:BB:C8:C6:4C:6C:72:09:60:42:D2:0E:D8:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87659ecb-cb7f-3140-a600-f402730776af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9f:79:67:1b:10:a7:df:f2:b3:2e:8d:95:46:37:2e:a6:83: b2:0c:a2:bd:7a:27:90:aa:94:5c:06:54:8e:76:ec:ca:f4:f7: 8e:32:45:15:f9:9d:7f:69:c9:d0:a5:e0:98:1f:67:20:8e:8a: d8:7a:a7:89:ce:18:03:19:6d:f1:4b:14:3a:bb:94:5e:be:f5: a8:2d:ba:30:d6:d7:94:cd:dc:7a:63:af:3a:27:1a:91:1d:62: 06:36:e4:dd:a6:41:42:58:79:5e:70:57:e4:3b:50:60:2b:77: 1d:05:a4:ad:41:f4:c8:1d:ec:3d:c1:2d:0c:4a:aa:cc:69:6a: 28:81:0a:96:f7:33:f3:e9:46:4e:a7:ed:fd:4f:fc:05:6f:53: 2f:5f:ad:5d:9a:6d:90:2a:4e:88:b7:c5:60:1a:48:ce:9a:2a: 76:41:b5:70:ac:43:d7:db:ce:6d:25:86:bc:b3:60:78:4d:26: 1a:53:49:5b:ce:e9:f8:21:ec:57:ba:9e:c3:f0:7e:e1:4c:b6: 76:0c:e4:0b:de:52:ba:c7:1d:82:6a:0f:7f:eb:bb:98:af:fa: 2b:03:f3:c1:bc:b5:48:7d:8a:41:12:a4:60:e1:3c:18:d2:c4: 8a:22:80:79:d7:fd:67:43:7b:a7:f2:1e:78:05:55:98:fd:30: dc:f7:2f:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjcNeCM71e3u5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjI1NzIwNzEtOThkNS00ZTg1LWE5ZDctOTcxZWE0YTU0NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/iVJiDAIiLlxsrBj1mWBQX1gNww3vDi9bsI EuI4NkTECdnLow1mGUE9lI3ii4GjCtH+5O5mXVVNhwj3TDVMf1ax4bsvU7clEdwg eJ+VQaHbXal5b7qxuoQpyrWxlGI1EYlakoMExZ3jDScq2qd3mnxTLOyuaTBsMG3C ctYMKrbUdt7fy5GGA+pDEeq3p6NCESxjMDhD9rNr2HLMwSdLEfjFVq/7ewynAa2h cHXP5JXQ0y27PL/lJ8YvrGYoPerT1JWkvEJ4/0Z/WUAucaWF/fTOQjnSyYsfSyEQ 3vxnUrBZMTH9GdrKahg9RR3ze1CZAN91ePgabjf2D8g6sIhqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqfxvqnYt27yMZMbHIJYELSDtj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODc2NTllY2ItY2I3Zi0z MTQwLWE2MDAtZjQwMjczMDc3NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICfeWcbEKff8rMujZVGNy6mg7IMor16J5CqlFwGVI527Mr0944yRRX5 nX9pydCl4JgfZyCOith6p4nOGAMZbfFLFDq7lF6+9agtujDW15TN3HpjrzonGpEd YgY25N2mQUJYeV5wV+Q7UGArdx0FpK1B9Mgd7D3BLQxKqsxpaiiBCpb3M/PpRk6n 7f1P/AVvUy9frV2abZAqToi3xWAaSM6aKnZBtXCsQ9fbzm0lhryzYHhNJhpTSVvO 6fgh7Fe6nsPwfuFMtnYM5AveUrrHHYJqD3/ru5iv+isD88G8tUh9ikESpGDhPBjS xIoigHnX/WdDe6fyHngFVZj9MNz3Lzo= -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:10 2025 by rpki-client