$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2e85e8c-7a74-3a11-93ce-8129452bde22.roa File: d2e85e8c-7a74-3a11-93ce-8129452bde22.roa (raw, json) Hash identifier: W3BVhjHNfygmdoXMiJxfVrFndMEj0E1yTOxd41ewLB4= Subject key identifier: FD:59:2B:0F:C8:DE:96:99:16:BA:A5:B8:04:72:D8:0C:64:9A:42:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB86FDE49F9A3132D2900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2e85e8c-7a74-3a11-93ce-8129452bde22.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.131.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b8:6f:de:49:f9:a3:13:2d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=7d02b0f0-6694-4bee-9562-5a84ae276fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ad:a0:74:bd:0f:18:c7:6c:36:54:82:b6:3c: 2e:67:8a:ad:a5:51:e3:96:65:11:f5:ad:4b:1c:b4: 81:26:0a:77:07:fa:46:e4:f3:5f:a7:4b:88:3b:1b: 87:6e:7d:e6:c3:7f:3b:e4:6a:0f:b3:56:fd:24:ca: 39:3a:4f:2f:13:a4:13:7a:7c:43:32:4b:53:9d:71: d2:67:36:c4:f2:60:3b:8a:1e:46:eb:cb:fb:19:22: 15:92:93:b5:7d:c5:a1:bb:90:54:69:ec:e4:29:a3: cb:8c:ef:5a:c1:b5:e3:5c:16:80:9f:52:32:48:e0: ea:1b:28:10:80:2c:36:3a:2d:3f:71:06:87:47:a3: 40:46:c0:44:26:5c:46:f3:10:62:7b:ae:9f:ed:c5: 26:ad:ee:96:06:f0:f2:c5:92:da:8e:8f:bf:a8:67: 56:ba:4e:dc:5b:78:95:a2:9a:3c:54:0a:76:94:29: a9:7f:7c:99:ee:aa:a1:ad:92:53:6b:54:06:ba:68: c4:51:4f:2f:7e:f6:d3:4b:38:5c:1e:ee:a8:f6:71: e3:7c:df:58:c5:dc:e3:01:45:dc:3e:40:66:b9:32: 16:2c:95:94:0b:2d:62:0a:47:e7:5f:ac:8b:e1:06: e6:5c:ee:55:17:64:90:e8:8e:b3:ac:fa:2f:57:12: 05:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:59:2B:0F:C8:DE:96:99:16:BA:A5:B8:04:72:D8:0C:64:9A:42:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2e85e8c-7a74-3a11-93ce-8129452bde22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c9:c7:be:78:7a:6d:c9:a1:3b:b5:c7:50:69:75:e9:aa:e8: de:50:29:77:80:af:62:16:e0:fc:c9:49:3f:68:d6:41:e5:86: 4b:04:f3:82:1d:08:12:fc:b8:23:4a:38:83:fc:a7:dc:b5:9c: bb:b4:8f:e2:b2:74:82:a9:72:25:a7:0f:a9:50:be:ad:bb:a2: 65:38:ff:5c:0a:1b:49:5a:cb:a0:9b:e2:52:f6:35:16:d3:45: ef:f3:3b:fa:f5:c4:36:ec:82:93:d0:95:ab:98:c5:89:d6:40: 29:2e:c5:01:6f:50:01:f8:1e:72:ab:d6:d9:5e:1a:fa:ff:3f: 50:56:c7:10:ee:c1:1d:06:2b:d2:cd:40:87:4f:e1:5c:f2:b9: d7:ce:cf:9f:b9:f8:46:b8:aa:7b:ef:4d:e5:d0:22:ad:48:94: 25:e0:ea:72:85:c7:56:c3:b1:2a:cb:09:01:f7:37:0b:d7:37: 71:80:90:9c:13:9f:75:f4:cd:54:ef:c4:d5:0b:3a:1d:a9:a1: 0d:fa:1f:3a:c0:c3:83:03:f0:37:86:51:54:ce:f2:7f:38:58: 6b:a5:84:ef:04:59:d5:e6:a3:1d:c7:c5:fe:60:5f:7b:5f:ba: 71:96:f1:60:be:93:fa:34:eb:2e:80:00:64:5f:d1:80:46:d3: e0:b1:3a:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27hv3kn5oxMtKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk N2QwMmIwZjAtNjY5NC00YmVlLTk1NjItNWE4NGFlMjc2ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK2gdL0PGMdsNlSCtjwuZ4qtpVHjlmUR9a1L HLSBJgp3B/pG5PNfp0uIOxuHbn3mw3875GoPs1b9JMo5Ok8vE6QTenxDMktTnXHS ZzbE8mA7ih5G68v7GSIVkpO1fcWhu5BUaezkKaPLjO9awbXjXBaAn1IySODqGygQ gCw2Oi0/cQaHR6NARsBEJlxG8xBie66f7cUmre6WBvDyxZLajo+/qGdWuk7cW3iV opo8VAp2lCmpf3yZ7qqhrZJTa1QGumjEUU8vfvbTSzhcHu6o9nHjfN9YxdzjAUXc PkBmuTIWLJWUCy1iCkfnX6yL4QbmXO5VF2SQ6I6zrPovVxIFmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1ZKw/I3paZFrqluARy2AxkmkJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJlODVlOGMtN2E3NC0z YTExLTkzY2UtODEyOTQ1MmJkZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLJx754em3JoTu1x1Bpdemq6N5QKXeAr2IW4PzJST9o1kHlhksE84Id CBL8uCNKOIP8p9y1nLu0j+KydIKpciWnD6lQvq27omU4/1wKG0lay6Cb4lL2NRbT Re/zO/r1xDbsgpPQlauYxYnWQCkuxQFvUAH4HnKr1tleGvr/P1BWxxDuwR0GK9LN QIdP4VzyudfOz5+5+Ea4qnvvTeXQIq1IlCXg6nKFx1bDsSrLCQH3NwvXN3GAkJwT n3X0zVTvxNULOh2poQ36HzrAw4MD8DeGUVTO8n84WGulhO8EWdXmox3Hxf5gX3tf unGW8WC+k/o06y6AAGRf0YBG0+CxOuc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:11 2025 by rpki-client