$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98fa5287-41f0-3399-b87f-3e4f2b0950f2.roa File: 98fa5287-41f0-3399-b87f-3e4f2b0950f2.roa (raw, json) Hash identifier: SWPsiKKCgVHJRR5ufOPw/MWvQVjMzF9e9i4yOXRJGEo= Subject key identifier: A3:9D:C1:2B:69:3E:06:67:E8:9D:5F:6F:04:CF:A6:23:72:B7:53:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84122F5C044007E37983B700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98fa5287-41f0-3399-b87f-3e4f2b0950f2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 19527 IP address blocks: 34.0.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2f:5c:04:40:07:e3:79:83:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d4a9a75f-a6d5-4eef-adc4-c0a76b23d672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:70:ae:36:d5:8b:b2:50:1e:e0:64:5b:c1: 5d:25:94:d0:58:66:f5:30:11:d5:a2:93:25:77:ad: 54:b2:3e:c7:43:6d:da:94:01:59:6b:82:1b:9d:19: b6:db:7c:26:da:f1:07:ef:db:55:6f:bd:a9:7d:c5: a2:76:a2:94:8a:85:40:12:56:06:ad:17:82:64:ae: e8:3d:f2:f1:bf:24:fc:20:7a:4a:f2:22:bb:16:b8: a8:50:3a:72:65:10:f0:78:ff:19:97:3f:bd:88:4a: 24:1b:c1:2c:e2:1c:a8:7b:27:02:02:63:85:4d:7e: 3f:37:e6:53:a9:8a:c3:70:be:73:e0:1f:d4:61:dd: 28:98:3a:92:3b:36:6d:d5:3a:d1:02:00:1c:fc:2d: e7:68:eb:18:cd:78:6a:92:22:4a:c1:aa:fc:fd:de: 2e:a2:01:8c:4b:1e:bf:73:5d:13:b1:1d:2e:21:05: a3:65:0b:bd:a2:58:02:d1:73:6c:84:b9:ca:23:aa: 63:68:af:1b:77:d9:b7:0b:ae:26:62:24:63:56:7f: cc:a5:b5:92:0b:31:b0:b7:10:a0:fa:ca:dc:c4:15: e9:b9:00:f8:4e:ca:8f:81:f1:23:db:72:44:f0:67: 29:da:78:17:db:46:0d:fd:06:6e:f7:d7:2d:bb:8e: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9D:C1:2B:69:3E:06:67:E8:9D:5F:6F:04:CF:A6:23:72:B7:53:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98fa5287-41f0-3399-b87f-3e4f2b0950f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:01:e9:d7:2c:79:eb:9a:2c:a4:3c:32:a0:8b:0a:dc:8a:8d: 2f:f0:0d:55:78:22:05:6a:17:32:c1:26:0a:00:69:57:b6:02: 57:55:6b:0d:0f:4c:13:5c:cd:1f:ac:0d:c3:a8:26:74:fe:8d: 48:cb:6b:02:d2:53:24:95:0b:c6:5d:48:bf:84:81:31:7e:3d: 97:6c:97:58:dc:e8:9b:bb:96:6f:b4:6d:34:65:29:d1:65:93: 7e:50:6b:a8:b9:0d:05:f2:dc:98:a7:56:db:9f:39:32:a2:aa: 43:03:dd:9d:77:77:65:8b:0a:1c:40:e2:c6:5f:6d:60:d0:b3: dc:4f:b7:0a:63:81:10:ed:6e:5c:0f:67:23:90:bb:57:0c:6e: 5a:3d:e4:dd:71:73:70:f2:55:e9:36:0d:74:12:87:23:35:6d: d9:9b:d5:b8:6e:43:ff:1d:76:dc:61:e3:a3:a5:16:c7:c2:69: 38:18:21:84:6a:96:e3:02:c6:9f:b8:ed:98:66:f0:1f:c8:86: 03:dc:ee:09:df:1a:ea:32:47:78:8b:fc:fa:11:47:73:8e:f3: d1:6a:5d:06:4b:3c:56:0d:fc:2d:ca:78:1e:b4:b6:8f:c1:c0: 10:d0:f2:0e:e2:f4:7a:b0:ce:67:7d:a5:e9:31:c1:03:53:c4: 76:d3:e1:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEi9cBEAH43mDtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDRhOWE3NWYtYTZkNS00ZWVmLWFkYzQtYzBhNzZiMjNkNjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41BwrjbVi7JQHuBkW8FdJZTQWGb1MBHVopMl d61Usj7HQ23alAFZa4IbnRm223wm2vEH79tVb72pfcWidqKUioVAElYGrReCZK7o PfLxvyT8IHpK8iK7FrioUDpyZRDweP8Zlz+9iEokG8Es4hyoeycCAmOFTX4/N+ZT qYrDcL5z4B/UYd0omDqSOzZt1TrRAgAc/C3naOsYzXhqkiJKwar8/d4uogGMSx6/ c10TsR0uIQWjZQu9olgC0XNshLnKI6pjaK8bd9m3C64mYiRjVn/MpbWSCzGwtxCg +srcxBXpuQD4TsqPgfEj23JE8Gcp2ngX20YN/QZu99ctu45RvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOdwStpPgZn6J1fbwTPpiNyt1MjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOThmYTUyODctNDFmMC0z Mzk5LWI4N2YtM2U0ZjJiMDk1MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8B6dcseeuaLKQ8MqCLCtyKjS/wDVV4IgVqFzLBJgoAaVe2AldVaw0P TBNczR+sDcOoJnT+jUjLawLSUySVC8ZdSL+EgTF+PZdsl1jc6Ju7lm+0bTRlKdFl k35Qa6i5DQXy3JinVtufOTKiqkMD3Z13d2WLChxA4sZfbWDQs9xPtwpjgRDtblwP ZyOQu1cMblo95N1xc3DyVek2DXQShyM1bdmb1bhuQ/8ddtxh46OlFsfCaTgYIYRq luMCxp+47Zhm8B/IhgPc7gnfGuoyR3iL/PoRR3OO89FqXQZLPFYN/C3KeB60to/B wBDQ8g7i9Hqwzmd9pekxwQNTxHbT4Sg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:38:03 2025 by rpki-client