$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db2da034-1959-398c-97ed-ff47b60a9995.roa File: db2da034-1959-398c-97ed-ff47b60a9995.roa (raw, json) Hash identifier: NwUNGUTf7YgpsG9O/rnB17QMasRzQuC+LWF97OB4yNk= Subject key identifier: AD:2D:6E:67:5B:7B:22:FE:25:DD:F6:D9:E8:78:74:AB:AB:AF:70:FF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB8AFDD2DD1B36256E0F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db2da034-1959-398c-97ed-ff47b60a9995.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:8a:fd:d2:dd:1b:36:25:6e:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=fcacf4e6-3513-49b7-b472-0374157def0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:91:8c:dc:0a:52:f0:50:bc:d9:0e:8d:a4: 50:2a:49:06:1e:b3:bb:d2:b8:8b:74:28:cc:b0:75: 9f:da:40:98:48:a1:87:bb:f8:ce:aa:ff:93:30:ee: eb:6b:95:73:c8:18:ed:4d:88:db:07:b8:96:69:e3: b2:c8:30:db:8f:5c:7f:14:44:37:ea:1a:48:1b:08: 94:80:36:05:f7:f5:54:5b:36:a2:ee:d5:61:0b:28: e2:0b:7a:ce:6d:ad:57:bf:1b:53:c5:48:1b:88:60: 9b:f0:8f:d5:56:cc:e4:16:e7:38:3b:07:72:11:7a: d7:fd:b0:9e:4a:57:a2:11:83:a4:d9:ae:4f:9c:5a: a3:36:d3:b1:45:76:51:21:b7:b7:89:42:eb:f2:04: 22:c6:b7:b6:7c:1d:a9:f4:76:8f:29:be:0c:cf:8a: 0b:0f:5e:f5:45:45:cc:47:b9:d5:9d:32:58:af:27: bf:5d:2e:80:4b:eb:30:7b:97:ff:db:2b:61:9d:02: e3:17:c9:ba:84:67:c4:00:36:ba:bc:51:5b:85:b9: aa:c9:e3:4c:34:80:a8:22:c2:7f:8a:6c:bd:1d:2d: b0:19:4c:27:2c:3e:f2:37:de:72:e7:10:65:41:89: 12:b8:60:41:1b:54:68:e0:d0:2d:4e:0f:59:21:54: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2D:6E:67:5B:7B:22:FE:25:DD:F6:D9:E8:78:74:AB:AB:AF:70:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db2da034-1959-398c-97ed-ff47b60a9995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9f:9f:df:02:f6:bf:52:58:f5:36:ec:7e:77:a5:7d:b5:73: e7:63:d9:a8:7a:ae:06:8e:57:31:33:9a:e7:6b:21:ab:d5:25: 0f:3f:f7:b9:5a:72:16:d9:0f:39:10:03:29:d1:e0:48:1b:ea: 13:c3:c8:42:ba:fe:ac:27:d5:66:e2:1a:19:f7:10:36:d8:bd: 1d:01:1a:2d:93:9b:78:6d:37:1a:49:0d:a1:43:19:e7:9a:f6: cc:4d:a9:de:ed:ba:21:88:e3:73:2a:92:ef:80:33:86:c0:6a: 10:35:e0:fb:13:9e:d8:0c:03:5d:89:81:36:24:43:ca:f3:90: 31:5e:cd:35:ef:d9:56:70:85:1c:09:6d:de:1f:79:dd:2c:9a: f9:4e:68:6f:32:9f:bd:8b:4a:f0:b6:38:f4:f0:08:34:90:d6: 34:06:17:a5:e2:e6:6a:64:40:a2:c3:68:0d:fb:43:ac:10:61: eb:9d:03:b0:2d:4d:72:ab:fc:24:d3:33:2a:76:04:75:e8:3c: 70:a0:60:e2:1d:5f:d2:71:f7:e0:53:28:84:8b:c4:02:40:10: 6f:f4:0e:65:e0:ab:aa:79:17:d5:97:01:04:c6:60:d4:c7:90: 08:20:06:9f:5f:80:fa:f0:ec:7a:bd:63:92:da:fb:2b:08:19: 6e:08:8d:53 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqG24r90t0bNiVuD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZmNhY2Y0ZTYtMzUxMy00OWI3LWI0NzItMDM3NDE1N2RlZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2GRjNwKUvBQvNkOjaRQKkkGHrO70riLdCjM sHWf2kCYSKGHu/jOqv+TMO7ra5VzyBjtTYjbB7iWaeOyyDDbj1x/FEQ36hpIGwiU gDYF9/VUWzai7tVhCyjiC3rOba1XvxtTxUgbiGCb8I/VVszkFuc4OwdyEXrX/bCe SleiEYOk2a5PnFqjNtOxRXZRIbe3iULr8gQixre2fB2p9HaPKb4Mz4oLD171RUXM R7nVnTJYrye/XS6AS+swe5f/2ythnQLjF8m6hGfEADa6vFFbhbmqyeNMNICoIsJ/ imy9HS2wGUwnLD7yN95y5xBlQYkSuGBBG1Ro4NAtTg9ZIVSB3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFK0tbmdbeyL+Jd322eh4dKurr3D/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIyZGEwMzQtMTk1OS0z OThjLTk3ZWQtZmY0N2I2MGE5OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIhwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkZ+f3wL2v1JY9TbsfnelfbVz52PZqHquBo5XMTOa52shq9UlDz/3uVpy FtkPORADKdHgSBvqE8PIQrr+rCfVZuIaGfcQNti9HQEaLZObeG03GkkNoUMZ55r2 zE2p3u26IYjjcyqS74AzhsBqEDXg+xOe2AwDXYmBNiRDyvOQMV7NNe/ZVnCFHAlt 3h953Sya+U5obzKfvYtK8LY49PAINJDWNAYXpeLmamRAosNoDftDrBBh650DsC1N cqv8JNMzKnYEdeg8cKBg4h1f0nH34FMohIvEAkAQb/QOZeCrqnkX1ZcBBMZg1MeQ CCAGn1+A+vDser1jktr7KwgZbgiNUw== -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:43 2025 by rpki-client