$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895758ff-98df-3f0a-9f17-e3b4d581afae.roa File: 895758ff-98df-3f0a-9f17-e3b4d581afae.roa (raw, json) Hash identifier: c/x24Uy21AA4/suCpazFjlkRTqGJCe7r1uXrDqcJyS4= Subject key identifier: F6:40:07:80:55:EA:45:33:2E:C5:D0:32:9F:55:FD:28:AB:31:D2:80 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8412332BC25BCE6DEF11C928 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895758ff-98df-3f0a-9f17-e3b4d581afae.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.101.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:33:2b:c2:5b:ce:6d:ef:11:c9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=06a4b3ec-a14a-4e96-a5f9-b25858461dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:e5:19:ad:f1:b1:10:0f:d8:3c:aa:6b:04: 40:c1:5b:c2:f7:f0:32:73:2d:44:cf:67:9e:0e:ad: c6:2a:86:7a:d7:ad:da:34:94:d7:bc:6f:75:41:f5: 25:be:53:98:fc:43:a9:52:5a:0e:42:06:08:c2:98: b3:a2:85:c0:a2:d2:6f:d3:b6:e4:bd:fd:e9:51:42: 31:16:29:64:cf:b4:34:19:87:ab:8b:d3:a6:84:f7: 18:21:e0:c6:40:80:69:67:d9:a2:8e:a9:fa:99:42: 75:95:2d:a0:2c:b3:1f:45:12:3a:70:c0:6c:fc:6c: 17:f2:13:4e:14:74:72:90:23:4c:5e:c8:5d:d8:05: 0c:92:fa:f9:63:8a:fd:23:d4:c4:ee:f4:da:71:dd: 82:ed:89:d6:48:70:16:a4:05:13:bc:8d:26:97:45: 7a:c6:c1:c9:01:e0:21:10:06:bc:02:2f:da:88:c1: ea:20:9a:1a:ea:27:93:f7:13:76:6a:f2:c0:bd:0b: 83:1d:f4:1d:57:b8:9b:1c:45:d0:78:aa:ba:25:a5: 91:40:86:e1:e6:72:0b:5a:a2:ab:8a:b8:e6:3b:ee: f2:01:23:2b:ae:75:7f:94:22:77:a9:59:3d:c7:44: e8:81:a0:5f:55:be:3e:35:04:40:d2:8b:1b:8a:2b: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:40:07:80:55:EA:45:33:2E:C5:D0:32:9F:55:FD:28:AB:31:D2:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895758ff-98df-3f0a-9f17-e3b4d581afae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.101.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b2:bb:5b:7f:50:02:bb:fa:a7:46:5a:e1:28:b1:8b:35:52: 60:5b:1c:ec:e0:13:6b:15:8b:0e:e0:34:71:97:68:ef:b9:3e: ec:98:32:f8:de:31:f5:8a:f3:5f:ec:c1:61:cc:34:44:d0:15: 15:09:62:5f:b3:7c:fb:a8:af:19:3e:e0:e5:68:68:a9:85:3d: 30:d2:50:bb:67:fd:15:a6:a9:37:9b:6b:41:c0:fe:8b:49:d8: e7:ab:02:fe:e5:22:ba:72:13:4d:b1:9e:08:01:8f:49:45:5a: cb:f4:9d:c9:17:97:41:c7:a6:28:ef:a6:db:b4:36:a4:e2:7b: f0:07:2f:4e:04:7c:69:7a:8a:1c:9f:09:4a:e1:aa:05:22:62: 53:6a:37:9a:4f:be:74:b1:2f:ea:b0:d3:9d:ae:d9:8c:16:e9: 76:e8:70:54:05:b8:f1:93:78:de:95:06:6b:71:8f:c2:de:f4: b9:c6:bb:ea:e8:df:65:7d:ae:5a:80:da:cb:6a:cd:51:f0:39: cb:d2:a6:75:ab:65:0c:e7:2d:4d:8b:28:b9:9b:0b:a7:ac:98: 1d:27:1d:56:c9:0a:36:5d:40:f4:b0:0f:8f:94:19:e5:65:f0: a9:52:42:c2:20:e3:1a:98:2a:cb:b3:ae:f7:90:d4:91:c3:ba: ae:5a:82:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjMrwlvObe8RySgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDZhNGIzZWMtYTE0YS00ZTk2LWE1ZjktYjI1ODU4NDYxZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzPlGa3xsRAP2DyqawRAwVvC9/Aycy1Ez2ee Dq3GKoZ6163aNJTXvG91QfUlvlOY/EOpUloOQgYIwpizooXAotJv07bkvf3pUUIx Filkz7Q0GYeri9OmhPcYIeDGQIBpZ9mijqn6mUJ1lS2gLLMfRRI6cMBs/GwX8hNO FHRykCNMXshd2AUMkvr5Y4r9I9TE7vTacd2C7YnWSHAWpAUTvI0ml0V6xsHJAeAh EAa8Ai/aiMHqIJoa6ieT9xN2avLAvQuDHfQdV7ibHEXQeKq6JaWRQIbh5nILWqKr irjmO+7yASMrrnV/lCJ3qVk9x0TogaBfVb4+NQRA0osbiivFNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZAB4BV6kUzLsXQMp9V/SirMdKAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk1NzU4ZmYtOThkZi0z ZjBhLTlmMTctZTNiNGQ1ODFhZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmyu1t/UAK7+qdGWuEosYs1UmBbHOzgE2sViw7gNHGXaO+5PuyYMvje MfWK81/swWHMNETQFRUJYl+zfPuorxk+4OVoaKmFPTDSULtn/RWmqTeba0HA/otJ 2OerAv7lIrpyE02xnggBj0lFWsv0nckXl0HHpijvptu0NqTie/AHL04EfGl6ihyf CUrhqgUiYlNqN5pPvnSxL+qw052u2YwW6XbocFQFuPGTeN6VBmtxj8Le9LnGu+ro 32V9rlqA2stqzVHwOcvSpnWrZQznLU2LKLmbC6esmB0nHVbJCjZdQPSwD4+UGeVl 8KlSQsIg4xqYKsuzrveQ1JHDuq5agnQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:55 2025 by rpki-client