$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa File: 890641f9-0aae-3a09-b375-d5faed4942f2.roa (raw, json) Hash identifier: rxbPntEgTHTQt/iN3FPXZCCQYF3MJW7ZKHPdfr9OvSw= Subject key identifier: C8:26:D9:3F:10:D7:7D:07:79:96:08:0B:50:A6:27:1D:C2:C0:8E:2D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB82A5EED40C8F9E272570 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.64.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:82:a5:ee:d4:0c:8f:9e:27:25:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=63f0f12e-3d50-447b-afbc-26659f707063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:8d:01:d6:e0:cc:d0:4c:15:fb:88:d6:2b: 62:8b:4d:48:18:f1:a1:5d:c0:b4:4e:4a:9f:26:a2: ea:02:1a:a1:a9:a4:9e:9c:2c:06:89:f5:17:3c:d1: 58:0d:9f:10:a9:a5:f8:78:b1:03:e5:ba:f0:80:94: 23:b8:ec:d5:8d:fa:18:74:95:7a:4f:47:2e:5d:21: 8b:a5:7c:e5:a1:08:b7:33:4d:00:97:b8:a7:af:11: df:67:83:ac:3c:87:0b:f3:ed:e3:ba:41:0e:f3:e5: f7:91:b5:90:79:93:fb:6e:71:dc:4a:b0:cc:df:58: b6:a7:b3:04:ec:26:cd:93:04:9d:79:8f:45:99:3b: 3f:3b:42:df:97:9a:69:fa:9a:f3:ff:15:6b:f5:99: 94:33:0a:47:2c:20:78:28:17:ca:59:c1:3b:91:cc: eb:ee:38:da:40:d7:c3:1b:41:d9:d7:9e:dd:a3:87: bc:01:39:51:41:45:ce:e3:89:a2:f1:de:b6:08:78: 47:96:d5:2c:a4:3b:44:0a:ad:28:43:05:48:18:f2: d9:7c:8c:f4:78:cd:f1:2d:51:fe:6f:55:bf:f6:49: 76:41:29:5b:cb:c0:99:a7:f8:4f:28:09:ff:7b:ae: c8:2c:81:64:03:0e:03:c5:df:e9:30:3f:99:84:62: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:26:D9:3F:10:D7:7D:07:79:96:08:0B:50:A6:27:1D:C2:C0:8E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:07:55:4d:15:ab:09:7d:fe:48:92:87:21:76:cc:2b:10:93: 6c:42:68:8a:d3:04:52:a4:09:a3:db:07:05:d7:65:9a:bf:7e: 59:09:b1:e0:02:e8:d5:25:bf:8e:68:9d:08:66:ed:dd:93:59: 6d:93:99:5e:cc:12:14:87:58:0e:e8:21:a7:a0:c3:76:2a:83: 85:31:d8:39:0d:d7:a5:aa:c4:ad:e2:b6:57:14:70:b3:d8:da: e6:63:de:c4:d2:2a:d8:64:ef:28:88:00:2c:b8:08:72:9e:06: 9c:23:27:cc:8e:05:1c:d4:bf:85:eb:79:2b:a3:c8:ba:4e:46: b0:79:82:cf:4e:31:8a:cb:bd:09:f9:23:9c:d4:2e:ef:db:be: 75:f6:d6:0c:2e:0a:ab:3f:dd:bf:f6:df:19:2c:1c:5a:44:3a: 40:1f:ad:30:34:34:20:98:1d:db:8e:6f:0c:4e:cf:74:ab:16: f2:96:b6:a3:dd:d1:b5:88:e5:0c:6f:2f:e8:ec:ce:61:ad:33: c0:04:6f:8d:6a:9a:3f:6d:b9:9a:a6:fb:3c:39:6c:d5:05:c2: ca:4c:06:5f:44:27:f7:1d:8b:a1:0f:ad:77:96:32:00:d7:52: ce:9d:4b:bc:a5:20:cc:e7:c1:71:94:5c:37:c4:b6:28:f3:a4: 6c:03:22:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24Kl7tQMj54nJXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjNmMGYxMmUtM2Q1MC00NDdiLWFmYmMtMjY2NTlmNzA3MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ+NAdbgzNBMFfuI1itii01IGPGhXcC0Tkqf JqLqAhqhqaSenCwGifUXPNFYDZ8QqaX4eLED5brwgJQjuOzVjfoYdJV6T0cuXSGL pXzloQi3M00Al7inrxHfZ4OsPIcL8+3jukEO8+X3kbWQeZP7bnHcSrDM31i2p7ME 7CbNkwSdeY9FmTs/O0Lfl5pp+prz/xVr9ZmUMwpHLCB4KBfKWcE7kczr7jjaQNfD G0HZ157do4e8ATlRQUXO44mi8d62CHhHltUspDtECq0oQwVIGPLZfIz0eM3xLVH+ b1W/9kl2QSlby8CZp/hPKAn/e67ILIFkAw4Dxd/pMD+ZhGJ7gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgm2T8Q130HeZYIC1CmJx3CwI4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODkwNjQxZjktMGFhZS0z YTA5LWIzNzUtZDVmYWVkNDk0MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsHVU0Vqwl9/kiShyF2zCsQk2xCaIrTBFKkCaPbBwXXZZq/flkJseAC 6NUlv45onQhm7d2TWW2TmV7MEhSHWA7oIaegw3Yqg4Ux2DkN16WqxK3itlcUcLPY 2uZj3sTSKthk7yiIACy4CHKeBpwjJ8yOBRzUv4XreSujyLpORrB5gs9OMYrLvQn5 I5zULu/bvnX21gwuCqs/3b/23xksHFpEOkAfrTA0NCCYHduObwxOz3SrFvKWtqPd 0bWI5QxvL+jszmGtM8AEb41qmj9tuZqm+zw5bNUFwspMBl9EJ/cdi6EPrXeWMgDX Us6dS7ylIMznwXGUXDfEtijzpGwDIpY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:56 2025 by rpki-client