$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa File: cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa (raw, json) Hash identifier: nK88JipBwAy9BfM1EJN3owHQ1JY0OYxM4VvYJ7Tt2A0= Subject key identifier: 88:52:FA:04:BF:D3:DC:39:89:6F:EE:3D:66:42:65:EC:9F:52:38:75 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF4E92EBAC69F67951280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.123.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f4:e9:2e:ba:c6:9f:67:95:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c76dd4cd-3e9e-4798-b198-9d4922aad249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:1a:ec:32:73:8a:1a:7c:46:7b:cf:47:f4: a4:fc:ec:16:af:26:3b:b9:58:3f:92:af:51:42:a7: 24:0b:0f:a1:4d:f0:32:c5:c0:6e:5f:4f:f5:ce:ab: a1:be:1b:27:90:23:03:6a:1d:c9:62:eb:0b:b0:ff: b3:8c:dd:b9:85:39:2e:4a:40:01:ce:77:92:f6:f3: cb:3b:aa:6a:6b:b3:b1:6b:32:2e:c9:13:28:a7:ed: b5:c3:f7:88:5a:c1:2e:68:6f:82:4c:4c:09:6d:d5: d8:09:3f:ce:c2:22:87:12:00:99:b6:a2:3a:81:50: ba:3a:6b:0b:03:67:f9:d5:0f:78:56:c5:6b:e4:43: 8d:4e:58:c8:b4:a7:39:66:62:ef:8b:58:e6:95:4c: 2f:0e:ce:ae:4c:4a:a9:b8:6f:9e:c8:6a:51:ca:21: 3f:70:41:47:94:e3:e2:38:21:f1:cf:73:4a:36:6b: e7:2e:6a:51:c6:10:1a:1e:1e:38:ba:37:30:3d:6a: 2c:23:b7:fc:00:aa:76:9e:57:25:ce:9a:0a:0a:93: 47:03:31:6a:c3:2a:c9:26:53:ca:84:8f:fd:c5:7b: a0:ae:d1:45:88:f7:d4:b8:e5:55:ca:21:14:3e:f6: 27:69:33:7e:d9:07:e3:b2:8e:e9:c7:13:a8:30:fa: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:52:FA:04:BF:D3:DC:39:89:6F:EE:3D:66:42:65:EC:9F:52:38:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:61:81:f4:3b:a0:f3:bc:d6:0e:11:e6:98:d6:29:98:d7:78: d7:e3:69:dc:49:60:84:63:42:86:5c:b4:21:df:6d:85:10:e2: 24:19:da:a1:f6:27:eb:06:a0:d0:19:e2:fd:8a:41:63:96:2a: b6:2c:d6:69:02:62:d7:a7:12:1a:77:1e:dc:07:92:cc:af:f0: d1:6f:d4:31:3c:42:08:43:3e:a6:ab:b4:f2:91:bd:2a:91:3b: ed:cf:13:f8:22:fe:7a:b4:4c:0d:59:7c:e9:44:a3:3b:4c:0b: 80:51:18:15:db:c5:85:df:15:c6:a9:2c:b1:e7:f6:c9:3b:b0: 81:f0:9c:b3:46:e5:fc:b0:35:b7:85:35:01:68:91:a1:3c:f2: 63:3e:ca:b5:aa:23:45:4c:06:75:c0:18:8d:0a:15:c8:45:4b: f8:9e:55:85:f8:e2:b0:99:51:4e:0a:e2:43:6f:17:fd:b9:ee: 95:1e:40:82:df:7a:29:29:b9:b7:19:03:b8:13:70:18:57:f1: 32:9e:e1:61:0e:2d:64:d3:0e:ec:7c:65:de:37:c0:34:c5:f4: 4f:0a:6e:76:a3:a6:55:2f:dc:c7:91:9d:27:45:1b:fd:47:1f: 02:c3:ec:f1:13:c5:5f:aa:8a:53:e4:da:6e:99:0b:24:7a:7e: 4b:e6:98:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/TpLrrGn2eVEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Yzc2ZGQ0Y2QtM2U5ZS00Nzk4LWIxOTgtOWQ0OTIyYWFkMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Aa7DJzihp8RnvPR/Sk/OwWryY7uVg/kq9R QqckCw+hTfAyxcBuX0/1zquhvhsnkCMDah3JYusLsP+zjN25hTkuSkABzneS9vPL O6pqa7OxazIuyRMop+21w/eIWsEuaG+CTEwJbdXYCT/OwiKHEgCZtqI6gVC6OmsL A2f51Q94VsVr5EONTljItKc5ZmLvi1jmlUwvDs6uTEqpuG+eyGpRyiE/cEFHlOPi OCHxz3NKNmvnLmpRxhAaHh44ujcwPWosI7f8AKp2nlclzpoKCpNHAzFqwyrJJlPK hI/9xXugrtFFiPfUuOVVyiEUPvYnaTN+2Qfjso7pxxOoMPrkLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhS+gS/09w5iW/uPWZCZeyfUjh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZmZGVhYjgtNGIxYi0z OTI4LTkxNmUtMWRlZGMxODlkZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIntwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJphgfQ7oPO81g4R5pjWKZjXeNfjadxJYIRjQoZctCHfbYUQ4iQZ2qH2 J+sGoNAZ4v2KQWOWKrYs1mkCYtenEhp3HtwHksyv8NFv1DE8QghDPqartPKRvSqR O+3PE/gi/nq0TA1ZfOlEoztMC4BRGBXbxYXfFcapLLHn9sk7sIHwnLNG5fywNbeF NQFokaE88mM+yrWqI0VMBnXAGI0KFchFS/ieVYX44rCZUU4K4kNvF/257pUeQILf eikpubcZA7gTcBhX8TKe4WEOLWTTDux8Zd43wDTF9E8KbnajplUv3MeRnSdFG/1H HwLD7PETxV+qilPk2m6ZCyR6fkvmmM0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:19:47 2025 by rpki-client