$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd5516a8-2126-3d90-abde-ee6b599139ab.roa File: cd5516a8-2126-3d90-abde-ee6b599139ab.roa (raw, json) Hash identifier: 1aagn9Ic90vYQA1RQiaMR6p+U7a8pWNQayv8Q170CF8= Subject key identifier: F0:9A:38:DB:65:3B:4B:0D:28:15:48:A4:7F:C3:93:1A:77:3F:D9:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE78EB00CF0282E9C3EC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd5516a8-2126-3d90-abde-ee6b599139ab.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.99.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e7:8e:b0:0c:f0:28:2e:9c:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=289f53f4-a6a7-488b-a064-434864030dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c3:5d:12:11:f5:cf:98:b2:d3:a5:21:78:6d: 27:e7:71:d7:58:d3:e0:b2:99:47:fd:e6:75:6c:3c: 7d:b7:8b:e4:65:4b:8e:65:48:d0:b4:8f:1d:99:6f: f6:44:90:e1:01:9e:a3:db:3f:a7:d6:43:cc:c2:54: b4:c2:c9:6a:95:de:e9:e3:44:b5:42:4f:d6:5d:c4: 7a:ed:7c:d0:00:2c:27:2e:a4:38:50:44:da:d0:71: 35:b1:00:44:fb:0b:ee:1c:b8:b0:10:64:6e:8e:fd: c1:39:60:3f:87:1d:e4:a4:8b:60:8f:47:6c:80:53: 57:29:15:e0:40:14:72:96:33:ff:a9:bd:90:0b:66: ae:ec:99:4d:78:bd:4a:88:2d:ba:42:84:31:f7:bb: 94:5e:99:78:67:ec:ae:0c:85:8b:4c:65:4f:16:1e: b5:01:d2:1a:38:0f:b9:07:d1:27:8f:fd:5e:29:8b: 7b:7b:ea:e3:e2:a8:24:ba:af:b3:5e:69:42:29:e7: 25:97:97:ff:57:ac:d4:e4:cb:ed:de:c1:25:cf:0f: b8:7b:76:93:6b:20:08:73:41:18:be:65:fd:9e:5e: d9:ce:6e:dd:d6:04:31:31:0a:46:03:3d:20:6c:f5: 8a:89:4c:24:be:63:d0:ee:b7:c9:c4:e8:4d:db:49: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9A:38:DB:65:3B:4B:0D:28:15:48:A4:7F:C3:93:1A:77:3F:D9:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd5516a8-2126-3d90-abde-ee6b599139ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f9:c0:9e:98:18:4d:5f:de:0e:33:ca:d0:5a:a5:61:16:51: 45:72:4a:32:78:99:c8:a8:ad:a6:4d:f2:af:02:da:33:4c:6b: 5c:bb:8e:ed:54:72:5f:9e:a8:38:4d:83:e1:63:04:d0:a0:31: a3:27:da:a8:d7:2c:13:ea:e8:f3:4e:da:14:cb:77:75:b3:d7: 9c:d1:f3:64:18:f5:a8:0c:ae:ea:61:48:df:0e:8b:64:da:30: 79:11:db:33:13:24:de:77:a1:23:98:ed:4c:ae:29:1b:56:95: c5:1f:ed:ab:30:c2:f7:5d:08:d6:e0:d3:a7:67:27:1d:ca:fd: 11:36:49:5a:5f:e8:e3:88:ab:55:a3:9f:29:0d:37:ed:09:16: 54:fd:36:ae:7a:23:c5:d0:59:87:c2:e3:f0:1c:12:8d:a2:3f: 0a:71:ed:ae:a9:28:37:ed:5c:6c:b1:ab:86:fd:46:d8:a9:ea: d2:d6:bd:29:85:5e:ff:41:fa:b0:d5:12:e5:31:ee:04:ad:64: 67:87:06:d7:40:25:43:12:18:2c:c2:64:99:77:8b:a0:66:bb: 34:6b:4d:56:c8:0a:84:f5:12:72:cc:14:60:4d:f5:8c:54:40: 42:0e:f8:63:a2:9f:45:93:e5:7d:06:2c:ae:81:bd:f9:13:03: 2f:3f:53:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+eOsAzwKC6cPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Mjg5ZjUzZjQtYTZhNy00ODhiLWEwNjQtNDM0ODY0MDMwZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18NdEhH1z5iy06UheG0n53HXWNPgsplH/eZ1 bDx9t4vkZUuOZUjQtI8dmW/2RJDhAZ6j2z+n1kPMwlS0wslqld7p40S1Qk/WXcR6 7XzQACwnLqQ4UETa0HE1sQBE+wvuHLiwEGRujv3BOWA/hx3kpItgj0dsgFNXKRXg QBRyljP/qb2QC2au7JlNeL1KiC26QoQx97uUXpl4Z+yuDIWLTGVPFh61AdIaOA+5 B9Enj/1eKYt7e+rj4qgkuq+zXmlCKecll5f/V6zU5Mvt3sElzw+4e3aTayAIc0EY vmX9nl7Zzm7d1gQxMQpGAz0gbPWKiUwkvmPQ7rfJxOhN20kRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCaONtlO0sNKBVIpH/Dkxp3P9mwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Q1NTE2YTgtMjEyNi0z ZDkwLWFiZGUtZWU2YjU5OTEzOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH35wJ6YGE1f3g4zytBapWEWUUVySjJ4mcioraZN8q8C2jNMa1y7ju1U cl+eqDhNg+FjBNCgMaMn2qjXLBPq6PNO2hTLd3Wz15zR82QY9agMruphSN8Oi2Ta MHkR2zMTJN53oSOY7UyuKRtWlcUf7aswwvddCNbg06dnJx3K/RE2SVpf6OOIq1Wj nykNN+0JFlT9Nq56I8XQWYfC4/AcEo2iPwpx7a6pKDftXGyxq4b9Rtip6tLWvSmF Xv9B+rDVEuUx7gStZGeHBtdAJUMSGCzCZJl3i6BmuzRrTVbICoT1EnLMFGBN9YxU QEIO+GOin0WT5X0GLK6BvfkTAy8/U9Q= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:59 2025 by rpki-client