$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a44edf76-cbf0-3734-8e11-577e92d2d92e.roa File: a44edf76-cbf0-3734-8e11-577e92d2d92e.roa (raw, json) Hash identifier: KIQQIQEVmZljYjA/WsFtlCXZaBQ43bzL1bYT28POST0= Subject key identifier: 00:EF:7B:2D:DE:45:60:BE:27:14:57:87:9E:15:04:A4:A4:23:AC:04 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB3E9F4B9E656A2F03100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a44edf76-cbf0-3734-8e11-577e92d2d92e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.144.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b3:e9:f4:b9:e6:56:a2:f0:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0d9101f0-5c4b-489c-9a38-eaa6ef634f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:9a:e7:04:cc:27:15:90:02:d4:27:57:c2: 31:e1:a3:2f:a1:c8:77:68:9a:d5:f6:e8:d3:52:73: c5:95:2f:df:f6:24:fb:df:51:56:88:61:7d:e5:19: 15:da:74:a0:83:73:02:31:b2:e5:fe:1b:35:7f:7f: 1d:4c:db:dc:70:bb:da:23:5b:15:71:61:b0:61:1d: 33:2b:32:e8:4a:c1:0d:0a:c3:68:0f:0c:fb:80:05: 7b:83:5a:36:80:b0:4c:2b:cd:01:24:3c:f2:af:eb: dc:62:4d:09:25:07:c8:b5:bc:15:96:f9:63:97:f0: 21:38:a6:17:27:43:22:d3:98:76:84:6e:ec:c4:95: b4:34:38:10:da:74:c3:6c:9c:28:d5:f3:e3:3c:d7: da:f2:28:5b:17:81:94:b4:0b:51:84:00:08:91:9d: e9:27:51:1a:d9:77:36:29:b9:d3:c7:ba:ef:5b:fa: f0:a5:13:6d:89:28:e8:96:c2:a2:ca:e9:0e:96:c4: b4:db:92:c9:19:64:f3:52:7b:68:bd:37:fd:b2:35: b6:f8:26:87:24:9c:7c:fa:71:07:3f:49:86:45:51: e1:dc:ff:a3:6a:3c:a4:e7:82:f0:7e:41:5e:b8:6a: 4a:65:dc:ce:3f:02:53:9c:fd:10:64:e4:fc:08:b2: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EF:7B:2D:DE:45:60:BE:27:14:57:87:9E:15:04:A4:A4:23:AC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a44edf76-cbf0-3734-8e11-577e92d2d92e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:24:e7:7d:a7:d1:02:a6:3b:cb:46:49:ea:9d:b4:2b:21:01: cb:95:03:6c:d0:d2:fe:55:84:e7:93:ce:cf:e9:d8:80:99:bb: 94:60:96:9f:2d:0f:e9:e7:89:f7:99:80:f7:df:43:54:24:f1: c9:ba:48:32:b7:dd:3b:06:fb:78:e6:42:aa:f2:6e:1b:ec:f5: 5b:6a:b6:5b:3a:98:fd:77:f9:ba:ab:a5:ca:83:83:c4:c8:69: 7e:77:12:a9:ea:33:1d:5c:04:d3:65:c4:62:f1:92:6b:8c:f2: 8f:22:c6:66:e7:49:d4:fc:86:ba:b2:86:cf:b4:50:a1:ea:e9: b6:63:09:88:75:97:0c:4a:10:5d:44:3c:ae:d0:96:57:44:7f: e9:62:db:a6:e2:b9:f3:f4:f1:0f:c0:f6:b8:1e:14:ba:77:bb: af:77:1f:ed:84:00:3d:1c:9b:03:7e:e7:91:e9:04:53:b6:2f: d2:b7:2e:32:46:bd:96:ae:e2:a9:10:ec:54:ae:97:e8:4f:c7: 73:04:50:29:52:3b:03:01:af:9d:5f:96:44:67:b1:61:32:a0: ea:d6:4c:8b:9d:f6:b7:92:62:7d:a5:ba:fd:48:bd:b9:85:8b: e4:d1:04:d9:f2:c8:fa:77:8a:47:17:ae:da:6b:02:a6:aa:02: ac:eb:b6:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27Pp9LnmVqLwMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGQ5MTAxZjAtNWM0Yi00ODljLTlhMzgtZWFhNmVmNjM0ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2aa5wTMJxWQAtQnV8Ix4aMvoch3aJrV9ujT UnPFlS/f9iT731FWiGF95RkV2nSgg3MCMbLl/hs1f38dTNvccLvaI1sVcWGwYR0z KzLoSsENCsNoDwz7gAV7g1o2gLBMK80BJDzyr+vcYk0JJQfItbwVlvljl/AhOKYX J0Mi05h2hG7sxJW0NDgQ2nTDbJwo1fPjPNfa8ihbF4GUtAtRhAAIkZ3pJ1Ea2Xc2 KbnTx7rvW/rwpRNtiSjolsKiyukOlsS025LJGWTzUntovTf9sjW2+CaHJJx8+nEH P0mGRVHh3P+jajyk54LwfkFeuGpKZdzOPwJTnP0QZOT8CLLd4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADvey3eRWC+JxRXh54VBKSkI6wEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQ0ZWRmNzYtY2JmMC0z NzM0LThlMTEtNTc3ZTkyZDJkOTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkk532n0QKmO8tGSeqdtCshAcuVA2zQ0v5VhOeTzs/p2ICZu5Rglp8t D+nnifeZgPffQ1Qk8cm6SDK33TsG+3jmQqrybhvs9Vtqtls6mP13+bqrpcqDg8TI aX53EqnqMx1cBNNlxGLxkmuM8o8ixmbnSdT8hrqyhs+0UKHq6bZjCYh1lwxKEF1E PK7QlldEf+li26biufP08Q/A9rgeFLp3u693H+2EAD0cmwN+55HpBFO2L9K3LjJG vZau4qkQ7FSul+hPx3MEUClSOwMBr51flkRnsWEyoOrWTIud9reSYn2luv1IvbmF i+TRBNnyyPp3ikcXrtprAqaqAqzrtn4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:08 2025 by rpki-client