$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a959411-f4f4-3ff7-af68-485ef8c1d984.roa File: 9a959411-f4f4-3ff7-af68-485ef8c1d984.roa (raw, json) Hash identifier: IAPlGW251bXDJnwe+ORFRhjZS0FtGq3SPShFRkE877Y= Subject key identifier: C8:7C:D0:77:3D:E6:4C:CD:16:4B:B5:70:48:61:33:63:26:55:19:BC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBAB7E8E8C4B981D064E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a959411-f4f4-3ff7-af68-485ef8c1d984.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.89.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ab:7e:8e:8c:4b:98:1d:06:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=4decd801-50cc-4d4f-8ddc-2f4bc4ea62b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:8a:09:89:67:f5:e0:0c:5a:1d:6c:07:c5: 62:3e:a3:db:a3:06:d8:68:70:bb:6f:c9:5d:a2:21: c4:3c:d5:91:87:87:f3:a1:9e:3b:d1:6f:42:64:b9: e6:cd:88:12:4d:8c:5b:b7:8b:51:6e:a2:4c:6c:94: fd:d1:63:88:6d:22:fe:fe:dc:4d:d6:79:65:95:a2: 1f:05:c9:c1:76:82:c9:23:47:d8:4b:7f:09:8e:67: 35:fd:c4:28:32:4d:61:f2:5a:15:90:6c:94:a7:93: 3d:75:04:c9:0c:e2:11:8a:92:25:b5:a6:45:49:53: 02:18:ed:03:81:f4:12:64:8b:06:8d:fb:a2:58:76: 03:f1:50:72:66:35:2c:3a:e9:0e:e7:68:e8:53:e7: b8:2e:90:f4:c6:c7:f8:2c:63:b4:b3:b4:e8:3c:79: fc:92:fb:49:79:3a:f9:29:d4:3f:2e:93:7d:93:ec: ae:9e:b1:35:0e:3b:d7:62:2c:f4:d0:15:88:60:33: 61:ab:1a:6b:00:c8:dd:33:d4:f6:26:25:dc:0e:57: 52:5a:61:8d:86:47:6d:d3:ce:a3:14:92:28:7b:1b: 0b:29:7c:5c:a6:27:ca:06:d3:75:36:f8:60:89:24: 57:78:81:9c:6b:fe:e6:8b:03:8c:58:67:57:b3:61: 29:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7C:D0:77:3D:E6:4C:CD:16:4B:B5:70:48:61:33:63:26:55:19:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a959411-f4f4-3ff7-af68-485ef8c1d984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f0:b0:cf:71:99:da:d7:c7:46:2c:a2:3d:2e:b3:0f:3c:ef: 83:1c:af:96:ef:c4:19:a7:b0:3f:79:f6:30:30:b2:78:2b:60: a2:b7:18:d9:a6:ac:81:18:82:a0:84:a8:34:82:50:82:07:13: fd:5c:e2:e0:dc:bc:50:47:07:f3:fa:4e:af:0f:ed:42:4b:24: 69:7e:45:44:37:de:44:b5:fe:a8:ec:bc:42:43:31:5b:49:19: 72:2f:84:84:4b:7c:1b:b8:37:73:07:f2:6c:a5:e0:f4:f0:52: 74:02:19:1f:6a:29:40:1f:e7:89:95:b0:3a:6d:c3:b1:03:65: c0:a2:e2:b0:c9:0f:dc:3e:d2:41:2a:5e:1f:4a:14:76:0c:97: 71:7d:d5:b4:6f:ef:b5:2b:ad:1d:c3:4a:ff:01:4c:2f:51:a4: ae:64:6c:93:89:66:69:f4:12:78:2f:93:76:d7:82:55:0e:b7: 07:b8:2e:c6:b0:1f:5d:a9:fe:a0:4c:03:8f:ee:22:79:e1:bc: 46:63:c1:2b:ac:59:15:cd:ee:c5:2c:73:23:92:04:61:d4:6b: 6a:10:9a:ab:83:d7:61:68:fd:c8:bb:df:ee:30:d0:8a:37:1b: 70:0e:11:5a:f2:ca:0c:7d:cd:cd:f7:9d:59:1d:b1:ab:32:6e: 38:14:22:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26t+joxLmB0GToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NGRlY2Q4MDEtNTBjYy00ZDRmLThkZGMtMmY0YmM0ZWE2MmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6eKCYln9eAMWh1sB8ViPqPbowbYaHC7b8ld oiHEPNWRh4fzoZ470W9CZLnmzYgSTYxbt4tRbqJMbJT90WOIbSL+/txN1nlllaIf BcnBdoLJI0fYS38Jjmc1/cQoMk1h8loVkGyUp5M9dQTJDOIRipIltaZFSVMCGO0D gfQSZIsGjfuiWHYD8VByZjUsOukO52joU+e4LpD0xsf4LGO0s7ToPHn8kvtJeTr5 KdQ/LpN9k+yunrE1DjvXYiz00BWIYDNhqxprAMjdM9T2JiXcDldSWmGNhkdt086j FJIoexsLKXxcpifKBtN1NvhgiSRXeIGca/7miwOMWGdXs2EpJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMh80Hc95kzNFku1cEhhM2MmVRm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWE5NTk0MTEtZjRmNC0z ZmY3LWFmNjgtNDg1ZWY4YzFkOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXwsM9xmdrXx0Ysoj0usw8874Mcr5bvxBmnsD959jAwsngrYKK3GNmm rIEYgqCEqDSCUIIHE/1c4uDcvFBHB/P6Tq8P7UJLJGl+RUQ33kS1/qjsvEJDMVtJ GXIvhIRLfBu4N3MH8myl4PTwUnQCGR9qKUAf54mVsDptw7EDZcCi4rDJD9w+0kEq Xh9KFHYMl3F91bRv77UrrR3DSv8BTC9RpK5kbJOJZmn0Engvk3bXglUOtwe4Lsaw H12p/qBMA4/uInnhvEZjwSusWRXN7sUscyOSBGHUa2oQmquD12Fo/ci73+4w0Io3 G3AOEVryygx9zc33nVkdsasybjgUIlk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:44 2025 by rpki-client