$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab1da17-7121-358f-a4af-219126da6697.roa File: dab1da17-7121-358f-a4af-219126da6697.roa (raw, json) Hash identifier: pZaGX6NnkEpowO//0iexB/YTKiIo12BSMELkmou3x3w= Subject key identifier: 18:C3:3A:53:34:36:ED:34:58:30:48:38:74:42:01:F1:9D:30:B6:DB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBAC809912C797AFFE5580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab1da17-7121-358f-a4af-219126da6697.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.138.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ac:80:99:12:c7:97:af:fe:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=868b57b9-cb87-4625-afe1-cf7421620314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:94:fd:43:0e:31:02:46:b0:fc:ef:61:cb: f8:89:4f:df:1d:fb:a4:27:a8:5f:31:14:9d:70:4d: 5d:4a:17:f3:a8:c1:e7:f1:ff:2f:83:0e:b2:62:18: 56:ff:f0:ad:70:98:02:14:60:b9:06:b8:4b:45:b2: 98:bc:77:65:29:80:36:41:58:1a:4d:1d:ba:dd:85: 0d:b1:60:05:9c:98:15:db:f8:1f:f5:52:42:c6:66: 7a:aa:8a:d5:e6:91:af:87:cc:40:32:df:ef:fc:4b: f0:ca:00:43:54:ad:94:90:5d:1f:01:14:14:81:82: 95:c1:60:9a:47:a8:61:2a:c1:49:69:c8:6d:54:13: d5:3f:e6:ff:55:6e:85:d7:60:09:73:5f:56:63:9a: df:aa:87:8f:c5:e6:1d:37:c9:07:6b:b9:22:11:94: 2d:cd:38:7b:50:7a:b5:3e:21:95:d9:e7:84:04:81: c2:06:7c:7b:22:8d:8f:39:56:31:f7:cf:d5:76:fc: 57:8b:38:a2:e3:2e:eb:26:49:b3:89:0e:90:30:00: ff:2c:bc:20:db:40:4a:bf:20:14:6d:87:a7:e8:6f: c3:3d:a9:25:ea:de:27:95:d2:9a:d0:c0:e3:84:b4: 28:02:6f:08:a6:83:d8:d6:ce:5e:50:9f:43:8a:56: e5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C3:3A:53:34:36:ED:34:58:30:48:38:74:42:01:F1:9D:30:B6:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab1da17-7121-358f-a4af-219126da6697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:85:d6:f6:ff:01:80:b9:fc:ed:cc:d4:85:6a:6b:cb:77:08: 23:90:38:2c:7b:30:c4:18:c0:27:20:0f:89:ba:a8:b6:e8:b8: 7b:71:a3:76:b4:ae:d7:04:1a:01:76:e4:51:69:de:2f:43:b8: 3d:e4:e1:19:1d:d8:97:72:1a:ad:97:78:78:f1:44:2d:24:dc: d8:af:e0:67:4b:32:91:72:d7:51:9b:a5:f4:36:eb:6b:82:b5: eb:94:35:00:0d:3f:03:4f:d4:1d:cd:c1:c9:d7:b3:8b:ce:3a: 8b:0a:c2:77:8c:fb:2d:fd:c4:a7:2a:11:fd:db:c6:39:4b:e8: 39:17:81:4f:03:70:ca:5c:70:0a:1c:95:0b:6e:f6:49:ba:e7: f0:fa:a6:18:cc:1f:54:fb:87:4d:0a:6c:8a:4a:21:fe:b8:b5: eb:71:c3:f3:00:99:7c:59:9a:22:cd:97:c2:ab:6a:5b:89:03: 3d:f4:be:bd:2d:59:e5:bb:54:19:b1:83:cd:c7:79:57:84:01: 3a:6d:d7:4a:64:0b:07:1c:50:05:2f:4a:96:5d:c5:33:7e:4d: 9b:88:aa:7a:3a:b8:e1:8a:a6:bd:c6:be:5c:b8:75:e4:fc:58: 89:74:01:95:52:09:e6:0c:c3:22:91:fe:d8:54:d7:f0:38:fd: 60:23:4f:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26yAmRLHl6/+VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODY4YjU3YjktY2I4Ny00NjI1LWFmZTEtY2Y3NDIxNjIwMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWCU/UMOMQJGsPzvYcv4iU/fHfukJ6hfMRSd cE1dShfzqMHn8f8vgw6yYhhW//CtcJgCFGC5BrhLRbKYvHdlKYA2QVgaTR263YUN sWAFnJgV2/gf9VJCxmZ6qorV5pGvh8xAMt/v/EvwygBDVK2UkF0fARQUgYKVwWCa R6hhKsFJachtVBPVP+b/VW6F12AJc19WY5rfqoePxeYdN8kHa7kiEZQtzTh7UHq1 PiGV2eeEBIHCBnx7Io2POVYx98/VdvxXizii4y7rJkmziQ6QMAD/LLwg20BKvyAU bYen6G/DPakl6t4nldKa0MDjhLQoAm8IpoPY1s5eUJ9DilblqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjDOlM0Nu00WDBIOHRCAfGdMLbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGFiMWRhMTctNzEyMS0z NThmLWE0YWYtMjE5MTI2ZGE2Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIooAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASF1vb/AYC5/O3M1IVqa8t3CCOQOCx7MMQYwCcgD4m6qLbouHtxo3a0 rtcEGgF25FFp3i9DuD3k4Rkd2JdyGq2XeHjxRC0k3Niv4GdLMpFy11GbpfQ262uC teuUNQANPwNP1B3NwcnXs4vOOosKwneM+y39xKcqEf3bxjlL6DkXgU8DcMpccAoc lQtu9km65/D6phjMH1T7h00KbIpKIf64tetxw/MAmXxZmiLNl8KraluJAz30vr0t WeW7VBmxg83HeVeEATpt10pkCwccUAUvSpZdxTN+TZuIqno6uOGKpr3Gvly4deT8 WIl0AZVSCeYMwyKR/thU1/A4/WAjT6o= -----END CERTIFICATE-----Generated at Wed Jul 23 02:11:06 2025 by rpki-client