$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa File: abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa (raw, json) Hash identifier: s/gXoK2B93Hatdh2Rj/3vSAzNFdDWw/mrqHD4CZ9U8o= Subject key identifier: 4C:DD:4A:9D:07:A2:AC:18:57:23:46:1A:49:BD:B8:8C:17:1A:4D:3B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841234CFE6AFF5FE5851E220 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.121.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:34:cf:e6:af:f5:fe:58:51:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=422b7b40-8448-4d25-9dd2-639399561561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:3e:03:62:b8:b8:25:ee:94:83:b6:4b:b0: 1b:4f:b4:44:92:d7:d6:a3:52:83:39:7a:95:9f:d2: 25:d4:e1:c6:93:70:c6:02:f8:c8:df:d1:29:65:fb: 2d:9f:12:47:14:4a:97:3f:44:2b:91:9e:df:7e:26: 4e:24:57:f6:38:5f:4e:42:ce:a5:06:11:c0:d4:ee: 43:98:b1:53:4d:d9:5c:47:94:7d:ee:5a:e0:2b:e0: cb:6e:7c:ca:95:ea:5d:71:0f:2e:8d:d6:ac:6a:8f: eb:2b:f2:4d:0d:3b:3c:40:cb:1c:41:16:1b:aa:e7: 45:ad:80:2c:c3:29:e8:11:f1:c0:4a:54:76:56:99: e6:a2:64:af:b1:f0:4b:29:01:70:60:1e:da:c6:cc: 07:e0:e5:20:34:83:49:64:df:ca:5c:9b:61:ea:34: c0:89:69:41:59:d1:56:7f:dc:8e:8e:b3:69:7e:bd: 15:da:ae:97:80:35:ca:c2:0d:b1:55:0c:cd:20:73: 0b:6e:9d:5b:30:03:f4:d9:e5:7a:69:98:87:66:75: bd:4e:4a:b4:13:38:75:21:91:5e:18:e3:5d:a3:be: 88:95:9e:c4:78:1f:ee:eb:5d:1f:5b:4b:e1:c2:bd: 39:c6:05:51:bc:a9:67:fd:9b:da:03:0d:9f:ed:fc: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DD:4A:9D:07:A2:AC:18:57:23:46:1A:49:BD:B8:8C:17:1A:4D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8c:07:a6:dd:26:f0:2a:d4:44:7c:cd:b5:46:74:0b:e6:46: a9:06:8e:22:6e:a0:6a:0f:1d:8a:a1:e9:4d:4d:28:a2:bf:ad: cc:8b:fb:eb:23:7a:7e:d6:dc:92:9c:dc:d5:06:3e:b6:2b:08: 3f:5a:11:22:0f:e2:6d:a2:6d:cc:63:83:fe:3e:9b:63:60:85: 82:49:2e:07:20:ea:d1:4a:a3:6b:38:70:bb:58:87:ff:79:69: 08:72:06:20:44:b2:a1:4a:f1:eb:cb:48:1f:5e:23:a2:62:2e: 41:57:c6:fd:6e:d3:6b:12:2e:80:f2:ea:39:0e:f8:9c:e9:1d: 0c:fb:6b:a7:e9:60:bb:06:8a:06:c7:25:eb:60:d3:ea:0a:16: 84:31:e2:85:ca:81:ef:96:be:73:88:a3:e7:ee:0c:46:8a:c1: 55:15:c9:58:2f:2e:81:68:c6:64:52:93:8c:ae:91:27:ed:1e: 96:48:4c:fb:87:4d:81:36:59:c9:ce:3b:b8:a9:fb:05:83:d7: 42:9e:f8:38:4b:64:8c:ad:fe:71:aa:dc:f3:0d:19:f4:d0:27: dd:fa:57:57:5b:43:3d:5c:af:27:b1:a3:b8:92:6c:0d:82:b2: bf:f6:9b:9a:1f:b6:80:0a:70:79:95:82:44:b3:6b:5e:19:ab: 69:9f:5a:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjTP5q/1/lhR4iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDIyYjdiNDAtODQ0OC00ZDI1LTlkZDItNjM5Mzk5NTYxNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBU+A2K4uCXulIO2S7AbT7REktfWo1KDOXqV n9Il1OHGk3DGAvjI39EpZfstnxJHFEqXP0QrkZ7ffiZOJFf2OF9OQs6lBhHA1O5D mLFTTdlcR5R97lrgK+DLbnzKlepdcQ8ujdasao/rK/JNDTs8QMscQRYbqudFrYAs wynoEfHASlR2VpnmomSvsfBLKQFwYB7axswH4OUgNINJZN/KXJth6jTAiWlBWdFW f9yOjrNpfr0V2q6XgDXKwg2xVQzNIHMLbp1bMAP02eV6aZiHZnW9Tkq0Ezh1IZFe GONdo76IlZ7EeB/u610fW0vhwr05xgVRvKln/ZvaAw2f7fwdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzdSp0HoqwYVyNGGkm9uIwXGk07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWJjOTM4YzMtMGYwNC0z YzFjLWIyYjUtZGI5YmVlN2Q1NjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuMB6bdJvAq1ER8zbVGdAvmRqkGjiJuoGoPHYqh6U1NKKK/rcyL++sj en7W3JKc3NUGPrYrCD9aESIP4m2ibcxjg/4+m2NghYJJLgcg6tFKo2s4cLtYh/95 aQhyBiBEsqFK8evLSB9eI6JiLkFXxv1u02sSLoDy6jkO+JzpHQz7a6fpYLsGigbH Jetg0+oKFoQx4oXKge+WvnOIo+fuDEaKwVUVyVgvLoFoxmRSk4yukSftHpZITPuH TYE2WcnOO7ip+wWD10Ke+DhLZIyt/nGq3PMNGfTQJ936V1dbQz1cryexo7iSbA2C sr/2m5oftoAKcHmVgkSza14Zq2mfWmU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:29:32 2025 by rpki-client