$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d34fff41-9b1f-30a3-baab-7eddabca8e4e.roa File: d34fff41-9b1f-30a3-baab-7eddabca8e4e.roa (raw, json) Hash identifier: QWn/UsA6DCJ4TdlGdnpMlVesiPOTxhU3vCks9JGybB4= Subject key identifier: EB:2C:D1:B8:DE:73:81:3F:70:74:78:E1:76:D9:4E:3E:3E:AD:54:10 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB832D79C3B2AEB3144280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d34fff41-9b1f-30a3-baab-7eddabca8e4e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.123.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:83:2d:79:c3:b2:ae:b3:14:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a7d7f43d-2396-4d16-bc0e-e5e3f06c358e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e9:a3:af:8e:ee:3e:1a:5d:86:ea:9f:53:e3: ee:53:99:bc:d0:d0:06:43:69:b3:3d:97:a6:27:b7: 3b:5a:21:db:ed:e9:68:4e:12:2b:43:0b:da:a4:81: 3a:f5:2c:6e:e8:2d:e4:9b:6f:e4:7a:63:ad:5e:a2: c0:c0:13:b9:2d:b2:36:03:02:14:aa:d4:83:8b:b7: e3:94:44:85:d7:7e:61:6c:f4:0c:9f:ba:01:f5:2c: 38:f4:04:79:c6:53:fe:f3:ef:2e:33:e9:26:fe:35: 2f:0b:d8:b5:e5:1b:8f:fa:00:cf:5a:dd:c0:5f:4b: 68:e8:12:aa:a4:b0:09:1f:a8:61:ec:d8:08:0b:83: 61:f7:80:b0:34:b7:1b:80:c9:e1:5f:01:d7:28:90: b5:7f:bb:7e:f2:a1:e0:a7:4d:fb:bf:ce:34:c9:95: 2b:1b:a2:12:9c:a8:f0:17:e1:60:50:d6:38:8f:b1: cf:f2:6c:6f:2d:c6:c3:58:b3:96:1b:fc:70:86:e0: 9a:ce:b2:13:95:a0:38:70:34:0d:ca:7a:2e:ac:c8: b8:67:0b:47:8e:4f:db:19:e8:16:e6:af:99:8c:88: ba:14:a0:b1:b8:2b:20:e1:71:d6:22:c0:69:45:ad: 5c:60:02:ac:75:6e:e2:2e:c4:47:21:9a:31:6f:b0: c0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2C:D1:B8:DE:73:81:3F:70:74:78:E1:76:D9:4E:3E:3E:AD:54:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d34fff41-9b1f-30a3-baab-7eddabca8e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:20:70:3c:8f:a5:2a:f5:6e:07:b8:3b:cf:e2:ec:49:a9:d6: bf:f5:42:2c:37:52:9b:30:43:2e:d0:8f:92:b4:68:d2:a6:83: 0a:bb:f0:a2:eb:2c:f2:f2:0c:02:e5:c1:ad:54:43:b6:39:bc: 17:c7:7b:f4:18:0c:a7:04:4a:d2:67:d5:e3:bd:31:05:bf:ff: a4:c1:74:87:ee:3d:44:5a:5b:8f:6a:1c:fa:bf:b1:13:e4:a6: 5e:e0:6b:d2:24:4a:8c:18:fa:37:55:93:3a:c1:f9:de:4f:29: 1c:90:bd:75:66:55:af:9c:81:a7:2d:12:66:6f:50:8b:36:b6: 74:e0:36:3a:d6:e1:41:bc:ed:a8:a7:18:88:d0:09:fc:8f:da: 7b:6e:9a:98:b5:b7:ed:90:51:f3:5e:cc:8b:aa:a5:2a:1e:cc: 98:ac:89:db:9f:53:20:aa:03:6a:5e:ef:33:9e:45:0d:b8:57: 0c:16:7c:b0:ca:b4:c2:0f:05:14:b6:27:26:1c:31:72:c1:d5: 53:16:fa:e4:ac:71:83:b2:db:a9:c6:2e:c0:0e:3f:3f:29:d9: 22:dd:1b:6f:43:d2:d1:bf:ab:dd:ca:43:b6:30:5d:09:5f:59: d6:33:01:0c:ad:ce:ff:40:bd:10:29:76:2c:5b:71:c1:4d:80: 82:b1:d6:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24MtecOyrrMUQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YTdkN2Y0M2QtMjM5Ni00ZDE2LWJjMGUtZTVlM2YwNmMzNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzemjr47uPhpdhuqfU+PuU5m80NAGQ2mzPZem J7c7WiHb7eloThIrQwvapIE69Sxu6C3km2/kemOtXqLAwBO5LbI2AwIUqtSDi7fj lESF135hbPQMn7oB9Sw49AR5xlP+8+8uM+km/jUvC9i15RuP+gDPWt3AX0to6BKq pLAJH6hh7NgIC4Nh94CwNLcbgMnhXwHXKJC1f7t+8qHgp037v840yZUrG6ISnKjw F+FgUNY4j7HP8mxvLcbDWLOWG/xwhuCazrITlaA4cDQNynourMi4ZwtHjk/bGegW 5q+ZjIi6FKCxuCsg4XHWIsBpRa1cYAKsdW7iLsRHIZoxb7DAfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOss0bjec4E/cHR44XbZTj4+rVQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDM0ZmZmNDEtOWIxZi0z MGEzLWJhYWItN2VkZGFiY2E4ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIntQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQgcDyPpSr1bge4O8/i7Emp1r/1Qiw3UpswQy7Qj5K0aNKmgwq78KLr LPLyDALlwa1UQ7Y5vBfHe/QYDKcEStJn1eO9MQW//6TBdIfuPURaW49qHPq/sRPk pl7ga9IkSowY+jdVkzrB+d5PKRyQvXVmVa+cgactEmZvUIs2tnTgNjrW4UG87ain GIjQCfyP2ntumpi1t+2QUfNezIuqpSoezJisidufUyCqA2pe7zOeRQ24VwwWfLDK tMIPBRS2JyYcMXLB1VMW+uSscYOy26nGLsAOPz8p2SLdG29D0tG/q93KQ7YwXQlf WdYzAQytzv9AvRApdixbccFNgIKx1v4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:32 2025 by rpki-client