$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4025787-ed90-31da-ba84-ef5a9728ea9d.roa File: b4025787-ed90-31da-ba84-ef5a9728ea9d.roa (raw, json) Hash identifier: dFBTENGUX2fZYgFHKqrF9xhTFyd/AUr3RPxw4QY0tEs= Subject key identifier: 6D:4C:68:1C:9C:9F:C7:AC:56:EE:B4:7A:5F:0E:A2:91:59:D4:89:A6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBDCBE335DFC016CF6E380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4025787-ed90-31da-ba84-ef5a9728ea9d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.84.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:dc:be:33:5d:fc:01:6c:f6:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=33336818-c074-4734-b0db-1ef837cf0633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:3b:a2:82:d4:d5:8f:5e:ef:48:62:5a:a5: 47:0c:e3:58:95:12:aa:e6:2b:70:79:2c:1a:92:69: 9a:65:4e:aa:af:ac:d6:9d:40:d3:81:b6:d8:f9:6c: d0:b8:f5:77:1a:78:74:91:cc:1f:b8:0f:06:3c:44: 02:3f:ba:eb:32:53:16:ba:bc:b7:41:e0:62:af:fc: 4d:c4:ca:8c:72:36:f9:88:c6:18:03:75:dc:29:6b: 1b:58:40:6a:a9:62:dd:9f:9a:49:1c:9d:28:76:be: 03:5e:01:9c:5f:34:2f:8e:22:f2:42:3e:59:82:8d: 1c:0b:de:4f:c0:d1:ba:00:f4:a5:a2:c2:20:58:af: 4c:9e:69:aa:b1:a5:70:0b:72:d4:cf:da:4f:b1:fe: ac:46:2c:17:76:67:5a:70:20:33:4b:37:5c:ff:db: e6:e4:38:72:f3:cd:f0:77:83:58:38:c3:6a:71:e1: 98:e0:18:af:ef:19:cb:58:76:c1:41:af:1a:fa:5c: e5:a6:9e:39:24:f6:0c:f1:62:0a:8a:cc:9a:32:d6: 8e:49:97:ac:4a:f9:d6:0a:c7:fe:02:38:73:db:82: f8:e6:8f:0d:83:0d:69:1c:27:59:2e:e6:01:ed:bb: 0e:e0:c0:b8:78:a5:8f:bd:3f:df:39:c4:d9:43:fb: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4C:68:1C:9C:9F:C7:AC:56:EE:B4:7A:5F:0E:A2:91:59:D4:89:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4025787-ed90-31da-ba84-ef5a9728ea9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:99:a5:51:20:f4:bb:b5:ac:49:77:03:64:0b:9d:77:92:ab: b7:7e:9b:bd:04:fa:4b:e9:27:35:f0:43:34:f2:74:27:13:08: bc:73:cc:b1:58:37:c3:ca:50:2e:fb:16:f9:38:9a:b6:b0:c1: 10:a1:90:2d:a9:c7:3b:ec:ac:ca:c8:da:19:c7:fa:80:e2:a0: 25:d5:b0:35:d0:14:be:19:6e:62:30:be:85:ea:66:9d:0a:26: 21:dd:a1:ff:7d:c5:9b:7f:d6:9e:32:5f:32:bc:e2:4a:66:26: ac:8e:fa:af:24:49:cf:fd:90:42:d1:b1:85:48:5d:2f:c8:a0: 62:a8:0f:99:17:b5:9f:a9:2e:47:36:da:6c:40:8c:eb:3e:07: 58:2a:0b:9c:3c:6f:41:ba:bc:06:8e:f2:02:15:17:17:fd:3c: a9:11:d9:38:83:bf:dd:b4:61:e3:48:0d:d5:30:9c:aa:91:fe: 6a:52:1e:e4:ba:86:1e:49:40:c9:d0:1b:64:3c:cf:b7:49:5b: 91:31:4d:ee:05:32:d1:3c:8e:02:fc:8e:68:f1:b7:72:73:88: 56:6f:76:eb:c8:5c:20:a8:69:db:f1:05:e7:b8:5b:fb:1c:c6: d3:9a:0d:07:17:50:5e:2d:e0:84:22:61:74:ed:38:70:6f:47: 90:02:b7:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29y+M138AWz244AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MzMzMzY4MTgtYzA3NC00NzM0LWIwZGItMWVmODM3Y2YwNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlY7ooLU1Y9e70hiWqVHDONYlRKq5itweSwa kmmaZU6qr6zWnUDTgbbY+WzQuPV3Gnh0kcwfuA8GPEQCP7rrMlMWury3QeBir/xN xMqMcjb5iMYYA3XcKWsbWEBqqWLdn5pJHJ0odr4DXgGcXzQvjiLyQj5Zgo0cC95P wNG6APSlosIgWK9MnmmqsaVwC3LUz9pPsf6sRiwXdmdacCAzSzdc/9vm5Dhy883w d4NYOMNqceGY4Biv7xnLWHbBQa8a+lzlpp45JPYM8WIKisyaMtaOSZesSvnWCsf+ Ajhz24L45o8Ngw1pHCdZLuYB7bsO4MC4eKWPvT/fOcTZQ/v4qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1MaBycn8esVu60el8OopFZ1ImmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjQwMjU3ODctZWQ5MC0z MWRhLWJhODQtZWY1YTk3MjhlYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2ZpVEg9Lu1rEl3A2QLnXeSq7d+m70E+kvpJzXwQzTydCcTCLxzzLFY N8PKUC77Fvk4mrawwRChkC2pxzvsrMrI2hnH+oDioCXVsDXQFL4ZbmIwvoXqZp0K JiHdof99xZt/1p4yXzK84kpmJqyO+q8kSc/9kELRsYVIXS/IoGKoD5kXtZ+pLkc2 2mxAjOs+B1gqC5w8b0G6vAaO8gIVFxf9PKkR2TiDv920YeNIDdUwnKqR/mpSHuS6 hh5JQMnQG2Q8z7dJW5ExTe4FMtE8jgL8jmjxt3JziFZvduvIXCCoadvxBee4W/sc xtOaDQcXUF4t4IQiYXTtOHBvR5ACt/0= -----END CERTIFICATE-----Generated at Tue Jul 22 11:56:55 2025 by rpki-client