$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf97bb79-94d7-3e77-b111-f81decbabf74.roa File: cf97bb79-94d7-3e77-b111-f81decbabf74.roa (raw, json) Hash identifier: smPgD/ZESsx/tdzZYdKBFlTT5oq1VQtyO4iZIgxC6A8= Subject key identifier: A2:3A:95:F7:F3:2B:AE:79:A3:DD:3E:DE:2D:06:47:56:0E:E1:46:CC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD1C8D65F9AD4C2C4B680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf97bb79-94d7-3e77-b111-f81decbabf74.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.34.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d1:c8:d6:5f:9a:d4:c2:c4:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2f574162-02b4-42b7-aeb8-564483134dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:06:58:b2:ae:d3:0f:e4:59:87:75:0a:14: 63:68:d1:6f:da:54:dd:03:df:3f:98:52:06:a4:96: 3a:8c:84:2b:7e:69:bc:aa:5f:f8:65:cd:e2:44:9a: b8:24:2d:ea:29:d5:f1:ef:f6:55:66:1e:2b:d3:0b: 23:36:bb:b7:92:54:6a:88:2c:46:89:a9:a3:20:17: 79:99:4b:cf:31:86:df:2d:42:49:c6:62:a2:a2:95: d2:93:98:b0:a8:3a:7a:66:e9:9f:6a:24:20:9b:4c: c7:49:b6:e9:06:31:83:2b:4b:09:20:23:35:a7:67: 4f:62:27:6f:dd:b2:18:ed:b0:6a:fd:83:b1:21:88: 4a:35:c5:21:e1:62:16:29:d3:6a:55:95:8e:c6:03: c8:d9:88:81:34:40:d6:aa:e6:33:17:7e:b0:a4:b6: f2:46:36:7a:c5:67:d6:a1:55:69:31:0b:08:67:89: b7:30:14:e1:d9:db:10:33:12:11:3b:6b:5c:a7:05: a2:4b:ee:16:55:32:fd:08:11:e1:d8:55:82:46:88: 2e:e5:f3:09:5e:28:13:36:d5:cd:18:ea:27:a8:95: 60:14:f2:b9:d0:22:02:fc:f1:44:fc:02:23:56:e9: f7:79:fb:a6:99:26:2e:04:f9:72:cc:56:d1:87:d9: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3A:95:F7:F3:2B:AE:79:A3:DD:3E:DE:2D:06:47:56:0E:E1:46:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf97bb79-94d7-3e77-b111-f81decbabf74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.34.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:60:13:85:5b:eb:b7:17:79:ae:8f:7b:11:d6:4f:00:78:36: 4f:22:d1:df:52:a3:93:20:84:47:1f:08:2e:aa:6d:8e:60:b0: a8:16:68:de:f4:d9:36:e4:96:8f:fd:0c:ad:aa:f4:bf:71:f0: ec:c4:21:33:e3:a7:fc:52:d6:bc:20:2b:f2:93:f9:8f:e8:b2: 32:f4:98:33:88:ec:18:e2:24:64:0c:22:42:00:87:61:a9:34: 1a:2f:7b:84:67:10:80:82:d4:8e:1f:62:dd:54:8f:7d:23:37: 1d:7e:74:b8:98:0f:3c:cd:f1:cd:a3:69:35:48:01:af:e3:2c: b7:27:4a:b2:33:76:2a:35:37:45:27:a8:5e:ee:6f:3d:ff:19: c7:b8:07:bc:1c:af:bc:4d:85:9b:43:10:49:45:91:21:6b:0f: 9a:39:86:ce:06:71:a8:6a:6b:53:2c:d7:b5:4c:16:4b:91:a3: 25:89:53:f9:0e:9c:58:6e:c6:02:b8:48:64:19:98:1b:87:1e: 5e:da:22:9b:28:d7:79:6b:9d:1c:24:cf:fd:6c:71:50:53:f0: f9:ad:4b:ae:e5:84:74:24:c0:61:5a:6d:b4:3d:69:83:d7:77: 95:a3:48:7e:3c:6a:18:a9:44:91:00:a2:4b:4c:c1:37:81:ca: 1b:c6:45:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29HI1l+a1MLEtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MmY1NzQxNjItMDJiNC00MmI3LWFlYjgtNTY0NDgzMTM0ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2EGWLKu0w/kWYd1ChRjaNFv2lTdA98/mFIG pJY6jIQrfmm8ql/4Zc3iRJq4JC3qKdXx7/ZVZh4r0wsjNru3klRqiCxGiamjIBd5 mUvPMYbfLUJJxmKiopXSk5iwqDp6ZumfaiQgm0zHSbbpBjGDK0sJICM1p2dPYidv 3bIY7bBq/YOxIYhKNcUh4WIWKdNqVZWOxgPI2YiBNEDWquYzF36wpLbyRjZ6xWfW oVVpMQsIZ4m3MBTh2dsQMxIRO2tcpwWiS+4WVTL9CBHh2FWCRogu5fMJXigTNtXN GOonqJVgFPK50CIC/PFE/AIjVun3efummSYuBPlyzFbRh9lbcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKI6lffzK655o90+3i0GR1YO4UbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y5N2JiNzktOTRkNy0z ZTc3LWIxMTEtZjgxZGVjYmFiZjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIiKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpgE4Vb67cXea6PexHWTwB4Nk8i0d9So5MghEcfCC6qbY5gsKgWaN70 2Tbklo/9DK2q9L9x8OzEITPjp/xS1rwgK/KT+Y/osjL0mDOI7BjiJGQMIkIAh2Gp NBove4RnEICC1I4fYt1Uj30jNx1+dLiYDzzN8c2jaTVIAa/jLLcnSrIzdio1N0Un qF7ubz3/Gce4B7wcr7xNhZtDEElFkSFrD5o5hs4Gcahqa1Ms17VMFkuRoyWJU/kO nFhuxgK4SGQZmBuHHl7aIpso13lrnRwkz/1scVBT8PmtS67lhHQkwGFabbQ9aYPX d5WjSH48ahipRJEAoktMwTeByhvGRY4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:27 2025 by rpki-client