$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e49e4f63-ff69-37e5-8c3e-6a0d3d5a6014.roa File: e49e4f63-ff69-37e5-8c3e-6a0d3d5a6014.roa (raw, json) Hash identifier: tCRIKeiqAqCSbdN6L4OGw7mVHN9/kBBVxt/G8Ne7Cfo= Subject key identifier: 1E:38:E3:B1:E0:56:07:B5:1B:AE:3D:FB:CC:B1:17:4B:42:85:56:BE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC2B735B9F76810A81920 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e49e4f63-ff69-37e5-8c3e-6a0d3d5a6014.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.87.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c2:b7:35:b9:f7:68:10:a8:19:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c0788bcf-15f8-4a8d-9fd9-5c0759156250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:b4:3b:25:03:0a:8b:bf:66:d7:cf:01:20: 39:14:26:1a:9d:06:c3:37:35:02:7a:de:55:34:76: 0f:cd:2c:7e:a1:79:4d:cd:c5:40:c4:7f:b7:ec:39: 79:76:ae:63:e7:f6:ee:1a:cf:89:20:d0:83:b8:9e: 24:b1:3e:54:54:54:20:bb:4d:72:32:a9:0d:39:f4: a5:d1:78:c4:d9:9c:81:0b:40:a7:58:83:77:65:b7: b9:9b:8f:e3:6b:d3:71:72:55:4a:bc:35:dc:c9:2d: 26:cc:06:7d:5a:89:ed:d3:20:27:2e:76:d8:4a:ad: 9e:7d:fe:0e:1b:4e:89:e2:0b:4d:7e:b5:b5:bc:6b: 93:50:5c:c2:ce:b4:2e:7f:7c:23:7e:08:31:ed:21: a3:04:d5:bf:f1:01:86:b5:3f:ae:a7:8f:09:25:ae: 5a:c6:48:5d:45:0f:7a:1d:de:50:11:bf:94:86:b0: 6f:95:b8:44:af:d4:a1:e1:ac:51:a1:28:0e:7b:6d: 84:69:ec:95:fe:29:24:08:8b:97:16:35:e8:22:25: 15:fb:dd:6e:e3:8b:27:2a:18:ef:aa:7f:a4:b4:6e: d2:7f:8d:a3:bd:89:ad:90:35:9b:ed:70:73:1e:27: 7b:06:72:3e:62:48:2a:a2:79:49:7f:e1:4d:76:af: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:38:E3:B1:E0:56:07:B5:1B:AE:3D:FB:CC:B1:17:4B:42:85:56:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e49e4f63-ff69-37e5-8c3e-6a0d3d5a6014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1c:3f:a4:61:4e:ee:cf:a0:32:58:55:c5:3c:ad:2d:ed:38: 1a:55:8e:fc:84:20:ec:f5:67:a8:18:04:7e:4c:f8:89:07:a9: 10:20:d7:a3:49:ab:4c:ac:27:1a:84:4b:5a:c6:21:00:80:11: 53:cc:a7:68:5d:01:6b:c0:85:a5:5d:1d:1d:a8:86:55:b2:c0: 83:74:9f:54:62:63:bc:6c:de:e7:12:2b:18:2f:32:b8:03:ca: 20:41:95:b1:1f:a3:1c:08:4f:5c:70:33:da:ff:6f:65:e6:bf: 86:af:80:dd:d8:c3:4c:f5:fb:80:cb:ed:3f:f0:b0:7e:73:b7: 13:97:da:65:e7:75:5d:c1:04:4d:49:17:5d:11:2b:52:0b:87: 37:a1:cd:6c:ec:80:77:9b:ee:74:52:71:3c:86:c3:ac:26:4c: 24:cd:78:2d:62:8d:eb:54:b9:0f:b5:92:d2:26:ba:eb:3c:50: 3c:e7:f6:59:4a:74:a4:48:77:06:e1:73:4e:73:41:4e:09:4a: c9:16:5b:cb:f4:5a:61:41:25:28:be:bc:8f:1a:41:ac:65:76: 03:f1:95:74:16:af:93:bf:55:6f:3a:b1:a6:0e:55:26:7c:bf: 7b:09:40:72:e0:c1:14:f9:3a:29:37:0b:5e:96:8e:22:7e:06: d1:f7:dc:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28K3Nbn3aBCoGSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzA3ODhiY2YtMTVmOC00YThkLTlmZDktNWMwNzU5MTU2MjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDG0OyUDCou/ZtfPASA5FCYanQbDNzUCet5V NHYPzSx+oXlNzcVAxH+37Dl5dq5j5/buGs+JINCDuJ4ksT5UVFQgu01yMqkNOfSl 0XjE2ZyBC0CnWIN3Zbe5m4/ja9NxclVKvDXcyS0mzAZ9Wont0yAnLnbYSq2eff4O G06J4gtNfrW1vGuTUFzCzrQuf3wjfggx7SGjBNW/8QGGtT+up48JJa5axkhdRQ96 Hd5QEb+UhrBvlbhEr9Sh4axRoSgOe22EaeyV/ikkCIuXFjXoIiUV+91u44snKhjv qn+ktG7Sf42jvYmtkDWb7XBzHid7BnI+YkgqonlJf+FNdq+TfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4447HgVge1G649+8yxF0tChVa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTQ5ZTRmNjMtZmY2OS0z N2U1LThjM2UtNmEwZDNkNWE2MDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQcP6RhTu7PoDJYVcU8rS3tOBpVjvyEIOz1Z6gYBH5M+IkHqRAg16NJ q0ysJxqES1rGIQCAEVPMp2hdAWvAhaVdHR2ohlWywIN0n1RiY7xs3ucSKxgvMrgD yiBBlbEfoxwIT1xwM9r/b2Xmv4avgN3Yw0z1+4DL7T/wsH5ztxOX2mXndV3BBE1J F10RK1ILhzehzWzsgHeb7nRScTyGw6wmTCTNeC1ijetUuQ+1ktImuus8UDzn9llK dKRIdwbhc05zQU4JSskWW8v0WmFBJSi+vI8aQaxldgPxlXQWr5O/VW86saYOVSZ8 v3sJQHLgwRT5Oik3C16WjiJ+BtH33GE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:54 2025 by rpki-client