$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac61364f-bc12-3367-b9b7-d343c7d78d3c.roa File: ac61364f-bc12-3367-b9b7-d343c7d78d3c.roa (raw, json) Hash identifier: 02bLM6KYYMRjppdDYU8tOnzjLxt68uSHtRbw2reabVw= Subject key identifier: 7A:5D:00:0A:5F:E5:77:1C:7D:E5:48:7E:FF:77:53:33:23:03:FD:AD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD99A3CCF0CB2D11DE200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac61364f-bc12-3367-b9b7-d343c7d78d3c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.86.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d9:9a:3c:cf:0c:b2:d1:1d:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=d7c613d6-e0e9-4466-9576-7af15f6609ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:69:5c:99:2d:b5:93:d8:37:d1:37:c1:14: f5:e0:53:ab:98:2a:d1:f4:d1:83:48:bc:cb:f4:65: 03:57:57:71:51:b3:80:17:3c:3e:cb:d1:e8:e7:d0: 88:51:36:82:3e:18:a2:ca:fd:fc:e8:76:81:ac:12: b6:a2:96:a9:d6:1f:0d:70:dd:94:ff:dc:bd:b4:03: 31:ae:de:a1:74:1e:98:2e:1d:5a:e7:6a:5d:b3:58: 74:3d:33:56:5a:9b:35:48:53:a2:cf:54:a9:59:73: 84:f2:2d:e1:ab:9d:cf:31:02:51:b2:48:e7:ed:e3: bf:98:7a:cb:ff:dd:56:79:ab:a6:de:78:0b:d5:37: f4:5c:48:de:44:20:f4:8c:ff:80:6f:40:ac:00:9d: 58:82:f5:fc:e6:a7:54:5e:30:be:c7:4c:cd:4f:4c: c3:a0:01:d0:6c:6e:eb:02:ba:2e:62:80:80:6c:d3: 72:b5:ea:e3:ed:ee:f5:3d:57:7a:fa:1b:a4:1b:b8: db:87:87:9c:77:ba:37:54:03:9a:34:58:5c:7a:55: 6e:b2:b1:ef:b6:c6:8f:b4:01:97:49:03:cc:6c:67: fb:f7:e4:2e:d7:ce:67:d7:13:56:c5:85:bc:e7:3a: 32:88:13:5e:f3:ed:96:32:72:d6:f4:4a:59:3c:75: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5D:00:0A:5F:E5:77:1C:7D:E5:48:7E:FF:77:53:33:23:03:FD:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac61364f-bc12-3367-b9b7-d343c7d78d3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7e:73:0b:ca:51:4c:e4:32:e6:d3:2d:91:1c:ae:6a:f9:8c: ee:27:f8:ec:6c:6e:a5:9c:b8:0a:05:3a:d7:e7:1a:86:f6:04: 30:31:ee:21:4b:cb:cc:86:ea:7e:45:48:4b:fe:4f:db:92:ad: 2e:75:f2:3c:e6:59:a3:c6:d4:e2:e6:99:12:53:23:17:e0:b4: d7:77:90:ea:03:c5:81:65:b1:be:25:3c:31:66:cf:84:fd:cc: 81:80:c1:98:2f:38:52:b0:e1:25:d1:14:de:91:6e:dd:06:b1: 78:46:e2:5b:4e:ba:a5:7b:35:16:7b:b1:68:7b:a2:d1:3a:a0: a6:57:da:5f:be:ff:57:b7:f8:4a:47:4c:9a:94:4a:e6:6b:22: 3e:8f:eb:3f:0d:0a:15:26:d3:82:22:a4:3c:e3:3b:75:f5:1d: 31:17:da:3f:07:f0:e1:8b:d9:6e:5a:73:d9:d5:c1:13:9b:64: 46:03:d6:c3:e8:7c:b1:8d:ba:ec:82:e4:2a:5e:71:9f:da:04: ba:c1:d8:d6:94:a9:a7:a7:ba:ef:ab:4e:18:b5:d2:48:a6:f8: 8e:3d:c4:f0:e8:37:f0:c9:71:bd:ec:e8:95:a5:b6:47:dc:12: 0b:52:97:9c:a5:87:fc:8c:cb:de:9c:ad:50:18:ae:7d:f5:09: 7b:b8:01:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29maPM8MstEd4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZDdjNjEzZDYtZTBlOS00NDY2LTk1NzYtN2FmMTVmNjYwOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEZpXJkttZPYN9E3wRT14FOrmCrR9NGDSLzL 9GUDV1dxUbOAFzw+y9Ho59CIUTaCPhiiyv386HaBrBK2opap1h8NcN2U/9y9tAMx rt6hdB6YLh1a52pds1h0PTNWWps1SFOiz1SpWXOE8i3hq53PMQJRskjn7eO/mHrL /91Weaum3ngL1Tf0XEjeRCD0jP+Ab0CsAJ1YgvX85qdUXjC+x0zNT0zDoAHQbG7r ArouYoCAbNNyterj7e71PVd6+hukG7jbh4ecd7o3VAOaNFhcelVusrHvtsaPtAGX SQPMbGf79+Qu185n1xNWxYW85zoyiBNe8+2WMnLW9EpZPHW2zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpdAApf5XccfeVIfv93UzMjA/2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWM2MTM2NGYtYmMxMi0z MzY3LWI5YjctZDM0M2M3ZDc4ZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl+cwvKUUzkMubTLZEcrmr5jO4n+OxsbqWcuAoFOtfnGob2BDAx7iFL y8yG6n5FSEv+T9uSrS518jzmWaPG1OLmmRJTIxfgtNd3kOoDxYFlsb4lPDFmz4T9 zIGAwZgvOFKw4SXRFN6Rbt0GsXhG4ltOuqV7NRZ7sWh7otE6oKZX2l++/1e3+EpH TJqUSuZrIj6P6z8NChUm04IipDzjO3X1HTEX2j8H8OGL2W5ac9nVwRObZEYD1sPo fLGNuuyC5CpecZ/aBLrB2NaUqaenuu+rThi10kim+I49xPDoN/DJcb3s6JWltkfc EgtSl5ylh/yMy96crVAYrn31CXu4AVc= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:17 2025 by rpki-client