$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e70d3e86-5a95-3948-a7fb-252e09afe03c.roa File: e70d3e86-5a95-3948-a7fb-252e09afe03c.roa (raw, json) Hash identifier: Zo9PFEFBLznTC9Psn0ftUjuKSXVxrodCpu+gQSh7Z3Y= Subject key identifier: D3:46:E1:21:0D:A3:71:9B:BD:93:B3:09:19:37:09:4C:65:EF:E9:B1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A92062FF24F074B1B1AD8E900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e70d3e86-5a95-3948-a7fb-252e09afe03c.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.174.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:2f:f2:4f:07:4b:1b:1a:d8:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=5fc73715-62b3-4763-9b75-a3f0965d9575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:79:bc:1f:0f:c2:0e:8c:bf:b8:6c:d7:06:79: f1:d1:e5:63:c8:1e:21:36:8b:b0:27:e8:54:c8:46: bc:01:df:b9:68:e6:39:5b:bc:56:15:e4:b8:af:ed: 2b:7e:20:e9:d2:6f:b9:d7:76:09:3f:d9:32:93:6a: fe:ce:04:7d:2e:fb:88:42:cb:98:e1:5b:21:92:ea: 27:20:fa:6f:25:f7:53:98:a4:b3:48:6a:ec:8a:c8: f2:90:fb:a1:07:78:3f:05:83:11:96:c5:7f:85:f3: f1:5a:fb:b8:38:af:74:98:12:7c:3a:8b:4d:d3:ba: 61:43:d2:62:22:eb:d8:4b:37:2a:f0:62:74:b3:cd: ba:95:57:6b:bd:cf:c4:d7:f8:f4:7b:e4:c8:40:d3: ea:a3:8c:38:68:e2:53:c0:d7:ad:87:35:5f:90:c8: e6:1b:e8:f8:42:98:73:80:87:6d:1c:5c:0d:a3:d9: 9e:ca:8c:aa:06:3e:7b:70:8e:1f:ce:eb:67:0b:d1: 78:b4:91:3f:57:a7:37:07:2b:09:de:40:0c:f1:e8: 04:73:02:52:b0:22:57:3c:f9:1b:ce:60:cc:84:6f: df:8b:93:f3:0e:70:bd:b8:af:1c:14:e8:0f:64:20: 38:00:54:9c:89:ad:9b:e4:0b:37:ba:29:15:93:ca: df:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:46:E1:21:0D:A3:71:9B:BD:93:B3:09:19:37:09:4C:65:EF:E9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e70d3e86-5a95-3948-a7fb-252e09afe03c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.174.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:97:7f:10:a7:2e:32:1f:0a:d3:98:cb:14:e6:a7:c4:48:c5: 54:bc:bc:f8:e8:ff:4e:a0:b4:32:b5:2a:d3:b5:2b:3b:8d:71: 47:d2:e9:ae:e7:57:45:5f:ed:5e:b5:b4:eb:aa:58:e9:72:35: 61:11:30:fc:1a:77:d8:7b:39:8b:e4:e8:ea:fe:0e:d2:f0:b1: 06:f8:00:f5:8e:15:c1:eb:6b:bc:39:4b:45:4a:2b:e0:a2:ac: ce:89:ff:aa:36:a6:c1:ad:79:6a:87:71:00:9e:a0:74:d1:f7: ac:87:49:ac:e7:3f:5f:6d:d5:7d:c5:0e:3b:74:7e:b0:b3:4b: 00:b4:00:73:2b:03:f4:07:cb:4c:8a:f3:7c:5a:5f:f4:81:16: d7:7b:41:d5:9b:e3:2b:c0:be:6e:8a:9a:0f:11:6e:f2:96:86: ef:ee:bd:cc:3f:c9:1d:f3:ae:b3:79:bd:e1:51:79:68:6b:70: a4:0e:9a:0c:2b:26:7e:df:7a:5e:7f:e1:1a:63:0a:5c:20:90: 26:32:99:f4:ce:cb:46:29:1b:dd:0f:84:8b:88:80:0a:9a:a3: 2f:9a:85:26:c9:05:b5:62:cf:fc:8b:85:2a:08:31:77:f1:57: 7d:c7:e5:da:f5:5b:a7:85:8e:83:a2:a2:d2:cb:77:93:d0:75: 5e:29:a1:6d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqSBi/yTwdLGxrY6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk NWZjNzM3MTUtNjJiMy00NzYzLTliNzUtYTNmMDk2NWQ5NTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnm8Hw/CDoy/uGzXBnnx0eVjyB4hNouwJ+hU yEa8Ad+5aOY5W7xWFeS4r+0rfiDp0m+513YJP9kyk2r+zgR9LvuIQsuY4Vshkuon IPpvJfdTmKSzSGrsisjykPuhB3g/BYMRlsV/hfPxWvu4OK90mBJ8OotN07phQ9Ji IuvYSzcq8GJ0s826lVdrvc/E1/j0e+TIQNPqo4w4aOJTwNethzVfkMjmG+j4Qphz gIdtHFwNo9meyoyqBj57cI4fzutnC9F4tJE/V6c3BysJ3kAM8egEcwJSsCJXPPkb zmDMhG/fi5PzDnC9uK8cFOgPZCA4AFScia2b5As3uikVk8rfFQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNNG4SENo3GbvZOzCRk3CUxl7+mxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTcwZDNlODYtNWE5NS0z OTQ4LWE3ZmItMjUyZTA5YWZlMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIq4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUpd/EKcuMh8K05jLFOanxEjFVLy8+Oj/TqC0MrUq07UrO41xR9LprudX RV/tXrW066pY6XI1YREw/Bp32Hs5i+To6v4O0vCxBvgA9Y4VwetrvDlLRUor4KKs zon/qjamwa15aodxAJ6gdNH3rIdJrOc/X23VfcUOO3R+sLNLALQAcysD9AfLTIrz fFpf9IEW13tB1ZvjK8C+boqaDxFu8paG7+69zD/JHfOus3m94VF5aGtwpA6aDCsm ft96Xn/hGmMKXCCQJjKZ9M7LRikb3Q+Ei4iACpqjL5qFJskFtWLP/IuFKggxd/FX fcfl2vVbp4WOg6Ki0st3k9B1XimhbQ== -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:26 2025 by rpki-client