$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98d15c7a-6f3f-3c45-8d04-acc664e11cf9.roa File: 98d15c7a-6f3f-3c45-8d04-acc664e11cf9.roa (raw, json) Hash identifier: cQvTo/GWV2LENCwIQG2UOPC9v+RNMSQpOUzaqtfPpNk= Subject key identifier: 51:D6:2B:09:6E:C6:26:2E:49:96:15:01:B4:EA:9D:1E:6A:C5:6D:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEF202AE0197AB52D2280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98d15c7a-6f3f-3c45-8d04-acc664e11cf9.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.67.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ef:20:2a:e0:19:7a:b5:2d:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b0167272-6741-448b-a1ab-2092aa13b8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:23:38:f4:b4:67:26:dd:dc:08:52:a0:ac: 6a:c5:14:e9:99:a8:85:f4:e7:94:db:76:49:c8:6b: 55:b1:66:c6:78:a6:dc:00:8e:52:19:8f:ba:0b:4a: 37:e9:3a:af:37:60:b2:42:cd:57:aa:80:55:31:98: 72:a0:01:9e:68:74:56:1e:5b:16:4a:02:66:97:ea: 1d:55:77:0f:95:fd:30:53:e7:28:5f:94:eb:9e:78: 5a:ed:24:c8:8d:0f:68:07:86:8f:4b:e4:0d:30:a1: c1:4d:9f:16:31:bc:63:5e:a1:9b:37:b7:de:c6:10: 9e:46:8e:65:ef:98:1b:a6:e0:12:d3:d4:9d:68:ce: fc:85:66:c6:f0:cc:fb:d6:16:0e:5f:ff:0f:12:9c: 4e:79:8d:7d:ec:35:84:48:44:42:93:15:50:63:7c: d4:0a:54:39:78:15:c4:62:9a:3a:8f:1f:5d:b6:28: 9a:00:a2:cf:99:6c:ed:ea:5e:3c:0d:a2:6a:74:29: dd:14:f5:a1:2b:e2:9d:0a:de:c8:ae:79:36:ba:99: 52:d3:bd:3b:93:36:b4:b4:3a:51:a5:bd:11:c4:f2: bc:01:9e:fd:a1:9c:2c:b9:72:fb:16:cc:3f:57:bc: ac:1f:9d:88:1f:12:c4:16:9b:5d:54:bc:25:f6:45: 37:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D6:2B:09:6E:C6:26:2E:49:96:15:01:B4:EA:9D:1E:6A:C5:6D:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98d15c7a-6f3f-3c45-8d04-acc664e11cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:96:a5:c2:b1:d8:1e:c1:46:6d:3c:c1:25:f4:06:2d:2a:de: 3c:7a:d2:23:7e:8c:27:63:73:4e:49:e9:22:13:25:ce:b4:e9: 85:62:c3:c4:e4:f7:9a:c9:e3:29:3b:7d:fe:e4:78:3c:70:19: 93:3e:bf:11:9e:af:85:c5:bf:d7:07:e9:88:49:da:61:30:e6: 21:ef:83:aa:13:6d:2a:da:af:c4:67:50:8b:2a:61:a5:22:44: 44:1a:0e:a7:3f:3e:37:cf:56:f3:1e:84:54:22:4c:c9:1d:a4: a6:3b:cc:28:37:cc:e3:29:ba:b1:97:52:ac:27:53:53:e7:70: 9f:45:53:db:f8:f5:ee:3d:80:b0:2e:08:14:c7:f7:07:6e:c5: 1d:8f:64:a6:14:54:f7:89:f7:1a:ed:fb:05:22:bf:16:84:f9: 2e:4b:78:4a:23:b6:9f:0a:e1:5d:57:09:91:90:82:3f:ea:b3: bb:70:bc:47:b7:36:72:fd:86:f5:0b:63:14:0d:bd:7f:99:21: 18:c7:d5:f4:0c:99:81:6e:c9:47:6b:2b:e0:d4:57:55:91:05: 27:5e:3a:a6:15:49:21:c9:fa:08:46:14:7e:9f:c0:69:86:88: 92:61:fa:7e:0b:39:80:5b:02:d2:79:0a:27:07:d8:4d:7a:29: 37:c5:2a:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+8gKuAZerUtIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjAxNjcyNzItNjc0MS00NDhiLWExYWItMjA5MmFhMTNiOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfYjOPS0Zybd3AhSoKxqxRTpmaiF9OeU23ZJ yGtVsWbGeKbcAI5SGY+6C0o36TqvN2CyQs1XqoBVMZhyoAGeaHRWHlsWSgJml+od VXcPlf0wU+coX5Trnnha7STIjQ9oB4aPS+QNMKHBTZ8WMbxjXqGbN7fexhCeRo5l 75gbpuAS09SdaM78hWbG8Mz71hYOX/8PEpxOeY197DWESERCkxVQY3zUClQ5eBXE Ypo6jx9dtiiaAKLPmWzt6l48DaJqdCndFPWhK+KdCt7Irnk2uplS0707kza0tDpR pb0RxPK8AZ79oZwsuXL7Fsw/V7ysH52IHxLEFptdVLwl9kU3HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHWKwluxiYuSZYVAbTqnR5qxW3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOThkMTVjN2EtNmYzZi0z YzQ1LThkMDQtYWNjNjY0ZTExY2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqWpcKx2B7BRm08wSX0Bi0q3jx60iN+jCdjc05J6SITJc606YViw8Tk 95rJ4yk7ff7keDxwGZM+vxGer4XFv9cH6YhJ2mEw5iHvg6oTbSrar8RnUIsqYaUi REQaDqc/PjfPVvMehFQiTMkdpKY7zCg3zOMpurGXUqwnU1PncJ9FU9v49e49gLAu CBTH9wduxR2PZKYUVPeJ9xrt+wUivxaE+S5LeEojtp8K4V1XCZGQgj/qs7twvEe3 NnL9hvULYxQNvX+ZIRjH1fQMmYFuyUdrK+DUV1WRBSdeOqYVSSHJ+ghGFH6fwGmG iJJh+n4LOYBbAtJ5CicH2E16KTfFKoE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:27 2025 by rpki-client