$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa File: da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa (raw, json) Hash identifier: IfFFGsnB7OBD2T8RqLwqEmfLyy0cnC+1S1DG6200K28= Subject key identifier: CA:2A:07:16:F6:54:54:6E:FF:F8:B4:4A:05:1C:47:AD:20:DC:C1:D3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEE79C528528DEDBCF480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.67.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ee:79:c5:28:52:8d:ed:bc:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=afe6d60e-5930-47a6-b0d9-feb39fbdad88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:00:2a:d8:d3:3e:8f:8b:5e:d8:77:a8:13: 03:df:88:3d:f5:bf:00:9d:2e:dd:f8:b7:af:62:34: d8:ee:87:94:5d:10:22:2f:ec:2c:f1:a7:2b:06:44: 6f:34:b1:97:d8:f2:73:3b:66:83:15:28:09:98:23: 81:ef:7d:59:18:5b:92:7e:37:b9:39:91:23:d9:5e: b6:16:07:a7:f2:1d:8e:5d:f6:c4:b0:dc:99:b1:5c: 7c:d5:b8:8f:60:28:77:f3:4f:33:bf:a2:e9:ef:e2: 8c:06:60:32:9c:f8:58:fe:b4:a7:ea:fe:ee:30:80: 88:e7:4a:8d:56:79:f3:9e:a6:e8:90:23:ce:8e:06: 3f:e9:21:71:31:ca:24:9e:a8:b9:80:15:36:e8:b2: 16:eb:72:4c:57:d5:1e:30:94:b9:91:2c:2c:8a:df: 18:8a:92:ee:10:3e:25:3b:98:77:a5:5b:a9:9b:97: 55:ab:4e:f3:01:1e:99:20:8e:1e:c1:62:6b:29:8a: 67:5c:6a:93:1b:c5:4b:3d:e7:f6:8f:9d:8c:fd:50: d3:34:07:58:af:30:e9:da:35:1b:8b:01:e4:76:c7: ed:64:1a:35:1a:4c:46:a2:f2:51:0e:12:73:a1:f6: e3:18:cf:49:85:b8:ef:01:70:a8:d9:b4:96:7b:e3: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2A:07:16:F6:54:54:6E:FF:F8:B4:4A:05:1C:47:AD:20:DC:C1:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:2f:c7:be:e2:08:06:c2:73:f4:50:47:7f:02:5f:6a:d0:f7: 61:83:28:85:d4:95:4d:f2:44:b7:8b:4b:80:c3:93:f7:ce:45: ed:bb:02:4a:50:3c:20:f0:a1:2f:c8:44:6f:99:9b:95:05:be: be:88:68:cc:13:d7:1a:7c:c7:64:97:0a:cb:f9:94:b2:b2:94: cc:aa:d4:73:2a:e2:b0:1c:2a:b0:46:20:ab:89:64:48:f3:b7: ab:70:09:0f:3c:5d:1d:0d:8b:ad:cc:18:4d:a7:bf:bf:38:f8: 0e:b4:37:30:bd:7d:f5:fc:06:d5:3a:54:66:65:28:66:31:6c: 6f:5a:8e:a6:fe:49:6c:bd:72:51:a4:3f:bd:a3:63:42:41:ec: fa:8f:5c:ae:86:c9:57:74:3b:c0:d0:2d:73:7f:32:d1:7e:de: 36:8e:0e:ae:2c:64:ea:27:e6:69:58:24:7f:15:fe:cc:5e:ca: 47:87:a9:d1:af:c0:15:6c:01:b8:0b:87:22:38:03:3f:61:6d: bc:19:9a:13:12:01:fb:a1:ea:a3:18:55:fa:c7:7a:6f:f7:9c: 36:a5:5a:62:70:93:c4:dd:8d:d2:19:9c:89:b8:49:87:a6:cd: e5:1c:6c:f3:4c:71:9d:57:1f:62:0d:cd:09:c1:07:52:9c:10: a5:7e:a7:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+55xShSje289IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YWZlNmQ2MGUtNTkzMC00N2E2LWIwZDktZmViMzlmYmRhZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWMAKtjTPo+LXth3qBMD34g99b8AnS7d+Lev YjTY7oeUXRAiL+ws8acrBkRvNLGX2PJzO2aDFSgJmCOB731ZGFuSfje5OZEj2V62 Fgen8h2OXfbEsNyZsVx81biPYCh3808zv6Lp7+KMBmAynPhY/rSn6v7uMICI50qN VnnznqbokCPOjgY/6SFxMcoknqi5gBU26LIW63JMV9UeMJS5kSwsit8YipLuED4l O5h3pVupm5dVq07zAR6ZII4ewWJrKYpnXGqTG8VLPef2j52M/VDTNAdYrzDp2jUb iwHkdsftZBo1GkxGovJRDhJzofbjGM9JhbjvAXCo2bSWe+O0qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoqBxb2VFRu//i0SgUcR60g3MHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGEyNWY2ZDktNmM5Mi0z ZDNjLTg4YmMtN2I2MzQ5MDYyZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUvx77iCAbCc/RQR38CX2rQ92GDKIXUlU3yRLeLS4DDk/fORe27AkpQ PCDwoS/IRG+Zm5UFvr6IaMwT1xp8x2SXCsv5lLKylMyq1HMq4rAcKrBGIKuJZEjz t6twCQ88XR0Ni63MGE2nv784+A60NzC9ffX8BtU6VGZlKGYxbG9ajqb+SWy9clGk P72jY0JB7PqPXK6GyVd0O8DQLXN/MtF+3jaODq4sZOon5mlYJH8V/sxeykeHqdGv wBVsAbgLhyI4Az9hbbwZmhMSAfuh6qMYVfrHem/3nDalWmJwk8TdjdIZnIm4SYem zeUcbPNMcZ1XH2INzQnBB1KcEKV+p5o= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:45 2025 by rpki-client