$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa File: b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa (raw, json) Hash identifier: AaNIv2LqeA8FfEyz6JZu4nn3iRw3bJOgRH1HTzpUNmo= Subject key identifier: 67:4D:49:7C:68:DF:75:A2:39:17:7A:6A:7F:83:A4:4A:AE:50:9B:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841183CAF4A9D58FC33F3420 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.106.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:83:ca:f4:a9:d5:8f:c3:3f:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2e5ffc4e-a04c-4658-9ca4-c7eac3898d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:b9:0d:3b:48:e9:8c:91:d0:99:24:80:07: fa:1c:66:57:f2:4b:2a:f3:b0:76:93:40:f4:a0:72: 5c:08:86:e1:47:86:51:f4:39:04:2f:7c:2d:f0:dd: 71:6d:55:00:2d:24:29:1b:c5:6c:a9:b7:75:7b:9c: ba:19:7b:11:63:f0:8a:03:c6:e2:bb:cb:9f:32:6e: ea:95:72:5c:6f:22:a3:0f:c3:cf:13:77:29:52:35: c7:d0:8b:ac:d5:3c:65:0a:89:d6:88:b2:77:e4:89: 2b:7e:21:da:f7:51:5a:2a:23:9e:89:66:92:c0:2d: 33:a9:5d:0c:86:e3:d5:3f:fc:3b:42:0c:2e:e2:36: f7:c1:24:68:cc:3b:17:71:9b:16:9b:9e:08:69:d9: f1:8f:9b:f9:a3:c7:e9:51:5e:5b:a7:e9:d7:30:d6: 58:c5:4b:03:0c:2b:dc:84:9d:93:e5:d9:13:62:da: 64:58:b2:07:7c:25:50:27:d2:25:72:9d:71:02:a3: a5:df:8e:97:c6:87:eb:7b:d8:94:b1:75:b0:f4:56: 99:19:b4:ad:13:ec:40:a3:97:e4:21:03:0c:2c:08: b8:05:b1:37:28:fd:ad:02:e7:2a:8b:ef:5b:6d:af: 82:49:bc:f2:4b:84:15:18:2f:af:d4:40:36:70:10: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4D:49:7C:68:DF:75:A2:39:17:7A:6A:7F:83:A4:4A:AE:50:9B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.106.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:8e:1f:73:49:f9:e0:95:04:44:f0:97:5f:74:e6:dd:0d:cf: a4:b3:5f:b9:24:75:d1:64:c5:05:da:f4:09:06:d2:1e:a9:b1: 36:20:e8:0e:37:df:6c:dc:5d:e9:a8:29:59:4d:f1:9e:43:68: 8a:12:78:7a:d5:66:dc:51:32:7a:c0:e0:57:bb:50:97:ef:40: 45:30:61:df:6b:c3:fc:57:23:25:8c:c5:d2:0c:d6:1d:86:b0: 99:6d:4a:67:87:8a:9b:3e:bc:24:85:ab:c5:c3:c6:e7:ea:49: d1:c7:c8:87:68:9a:35:33:7d:99:b4:0a:95:0c:ea:11:59:44: aa:a9:3f:8e:39:ad:72:99:74:85:17:ff:36:4f:94:dd:62:e8: 83:6d:cf:da:7a:8f:43:3d:b3:ae:9e:58:fd:63:09:1d:83:26: 13:62:09:d2:a7:01:ad:f2:4b:0d:c7:b1:e2:85:81:46:63:be: 21:0e:cb:82:7a:8c:b5:9d:9d:7d:25:d8:f7:3a:b9:33:c7:df: 1a:f2:b9:99:2e:13:de:ec:dd:98:7f:5c:87:a6:b7:1b:41:ed: 83:4c:d1:a5:be:9c:0e:60:ae:2f:48:9f:07:33:c7:43:7f:bd: 83:6c:3c:7f:1a:f8:3e:d2:f9:ee:87:09:bd:68:21:99:0b:b1: 13:95:93:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYPK9KnVj8M/NCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmU1ZmZjNGUtYTA0Yy00NjU4LTljYTQtYzdlYWMzODk4ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw+5DTtI6YyR0JkkgAf6HGZX8ksq87B2k0D0 oHJcCIbhR4ZR9DkEL3wt8N1xbVUALSQpG8Vsqbd1e5y6GXsRY/CKA8biu8ufMm7q lXJcbyKjD8PPE3cpUjXH0Ius1TxlConWiLJ35IkrfiHa91FaKiOeiWaSwC0zqV0M huPVP/w7Qgwu4jb3wSRozDsXcZsWm54Iadnxj5v5o8fpUV5bp+nXMNZYxUsDDCvc hJ2T5dkTYtpkWLIHfCVQJ9Ilcp1xAqOl346Xxofre9iUsXWw9FaZGbStE+xAo5fk IQMMLAi4BbE3KP2tAucqi+9bba+CSbzyS4QVGC+v1EA2cBCzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdNSXxo33WiORd6an+DpEquUJs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjNiYzNhMDAtYzdhNy0z OWJjLWI0NDAtNjNiOTJhMTVkMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2OH3NJ+eCVBETwl1905t0Nz6SzX7kkddFkxQXa9AkG0h6psTYg6A43 32zcXemoKVlN8Z5DaIoSeHrVZtxRMnrA4Fe7UJfvQEUwYd9rw/xXIyWMxdIM1h2G sJltSmeHips+vCSFq8XDxufqSdHHyIdomjUzfZm0CpUM6hFZRKqpP445rXKZdIUX /zZPlN1i6INtz9p6j0M9s66eWP1jCR2DJhNiCdKnAa3ySw3HseKFgUZjviEOy4J6 jLWdnX0l2Pc6uTPH3xryuZkuE97s3Zh/XIemtxtB7YNM0aW+nA5gri9Inwczx0N/ vYNsPH8a+D7S+e6HCb1oIZkLsROVk8Y= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:51 2025 by rpki-client