$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da02f04d-6276-3c55-9254-aeab9fa77ae0.roa File: da02f04d-6276-3c55-9254-aeab9fa77ae0.roa (raw, json) Hash identifier: 95bphBlavb8E/8F41TRRJJNX/B7yrIlR59cADai0gOM= Subject key identifier: DF:D5:AC:78:D7:64:2C:5F:88:E7:51:D8:60:D9:9E:17:F7:8A:11:D2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF835CBEBD6F4F2B91D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da02f04d-6276-3c55-9254-aeab9fa77ae0.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.67.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f8:35:cb:eb:d6:f4:f2:b9:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=abe81d1f-fb4d-484f-9829-9a35ed79879b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:25:96:6e:5d:9f:ab:53:cd:89:40:4d:7a:be: b7:ac:99:f0:1d:8f:96:e0:57:06:c7:c0:cf:a5:be: 87:ec:8f:29:53:ce:62:40:53:8e:28:06:0f:15:f2: e9:fb:2d:43:fb:45:37:7c:0d:f9:90:08:e0:a5:f3: 4b:78:14:e5:5f:96:15:69:c7:af:41:c2:b3:f8:ca: 45:55:c0:d8:cd:b3:c4:a7:47:30:9c:15:4c:1d:1f: f6:1f:12:49:c6:c9:02:e7:5f:e3:97:8d:48:59:e6: 29:fe:2d:f8:d4:9e:5b:96:c1:a1:78:08:f6:f2:fa: 82:24:9d:5d:25:b2:3c:b3:c9:5d:a4:e3:d4:57:d4: a2:e6:14:b8:7a:e7:c4:9d:ea:f3:51:ff:2c:cb:bc: fe:8e:c2:24:d3:b8:11:89:c6:04:e0:16:db:29:41: 27:bf:27:bc:7b:32:d6:45:eb:e1:d9:2e:5e:89:f4: a9:d2:6d:36:41:64:f5:a5:5f:b2:e6:14:fa:87:84: 50:d2:e1:66:4c:0e:a7:38:fa:70:57:00:53:e0:e7: 27:01:d1:cb:92:e7:8e:86:89:f6:af:cd:82:71:f5: bc:b2:64:9d:bc:12:30:3e:10:0c:0d:35:2b:6c:d1: 9f:5c:82:03:b8:7b:4e:1f:cf:ba:02:52:fa:0b:86: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D5:AC:78:D7:64:2C:5F:88:E7:51:D8:60:D9:9E:17:F7:8A:11:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da02f04d-6276-3c55-9254-aeab9fa77ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a7:69:01:b3:12:20:29:4e:24:ea:cb:ff:04:fe:e7:23:07: e5:78:4b:93:69:36:ab:18:c0:08:03:52:14:11:77:87:bf:f7: b2:63:3c:93:08:d5:ea:4f:58:3b:0b:c1:9a:b2:91:e8:41:1b: 13:66:e6:7c:14:0c:cb:e1:e0:67:28:df:6b:20:46:b6:07:61: bd:ad:09:46:42:2e:87:ab:86:96:44:b9:0b:48:8c:29:a6:72: 06:c5:18:ea:3c:23:e5:8f:8b:3a:91:6d:26:55:fd:64:60:31: dc:a2:bb:0e:ff:67:cb:b1:bd:be:44:03:62:a9:99:d5:4d:af: da:64:f2:63:8c:9e:e5:3a:66:b2:ec:73:a0:0b:92:20:4d:69: e7:73:64:4b:a2:f4:28:e4:b4:ce:d6:18:54:3b:1c:3e:f6:cf: 64:a5:57:ab:3a:6d:97:72:ae:62:2d:3b:ec:b4:29:ee:a8:7d: f7:6a:1b:1a:40:d0:ce:86:9f:41:7f:6d:e5:da:56:13:5b:50: b5:34:c5:37:ce:35:36:29:23:34:94:90:1e:52:ee:e2:8a:fa: 57:50:79:63:fb:5a:da:de:12:81:b2:e9:95:f0:c6:ac:7c:07: 6d:83:7f:eb:a9:57:ea:8f:a9:6c:42:e7:27:1e:4e:a7:30:4f: 62:52:82:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/g1y+vW9PK5HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YWJlODFkMWYtZmI0ZC00ODRmLTk4MjktOWEzNWVkNzk4NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyWWbl2fq1PNiUBNer63rJnwHY+W4FcGx8DP pb6H7I8pU85iQFOOKAYPFfLp+y1D+0U3fA35kAjgpfNLeBTlX5YVacevQcKz+MpF VcDYzbPEp0cwnBVMHR/2HxJJxskC51/jl41IWeYp/i341J5blsGheAj28vqCJJ1d JbI8s8ldpOPUV9Si5hS4eufEnerzUf8sy7z+jsIk07gRicYE4BbbKUEnvye8ezLW Revh2S5eifSp0m02QWT1pV+y5hT6h4RQ0uFmTA6nOPpwVwBT4OcnAdHLkueOhon2 r82CcfW8smSdvBIwPhAMDTUrbNGfXIIDuHtOH8+6AlL6C4a/OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/VrHjXZCxfiOdR2GDZnhf3ihHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGEwMmYwNGQtNjI3Ni0z YzU1LTkyNTQtYWVhYjlmYTc3YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFinaQGzEiApTiTqy/8E/ucjB+V4S5NpNqsYwAgDUhQRd4e/97JjPJMI 1epPWDsLwZqykehBGxNm5nwUDMvh4Gco32sgRrYHYb2tCUZCLoerhpZEuQtIjCmm cgbFGOo8I+WPizqRbSZV/WRgMdyiuw7/Z8uxvb5EA2KpmdVNr9pk8mOMnuU6ZrLs c6ALkiBNaedzZEui9CjktM7WGFQ7HD72z2SlV6s6bZdyrmItO+y0Ke6offdqGxpA 0M6Gn0F/beXaVhNbULU0xTfONTYpIzSUkB5S7uKK+ldQeWP7WtreEoGy6ZXwxqx8 B22Df+upV+qPqWxC5yceTqcwT2JSgqU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:30:27 2025 by rpki-client