$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef3bb416-b6b0-300f-af7f-7e66af803399.roa File: ef3bb416-b6b0-300f-af7f-7e66af803399.roa (raw, json) Hash identifier: vM93WgC+Q+Kn5dHG1COArfaR3FR3ol4i5XJzbSaeJCM= Subject key identifier: 0C:B4:99:09:AD:2E:39:73:15:29:6A:F7:75:F6:8E:BC:06:AE:FD:42 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBDB8B5941BBE569AD4200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef3bb416-b6b0-300f-af7f-7e66af803399.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:db:8b:59:41:bb:e5:69:ad:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=8edc2b8a-722e-4e02-98c9-d32198a1f0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:b3:10:f1:30:e4:05:50:b6:3e:49:4e:c1: 96:3d:6c:ae:dc:90:33:ee:ae:c7:cb:44:c3:25:24: 84:09:50:f7:ff:37:09:b1:03:d1:87:9a:ff:1e:a1: e5:67:b4:09:87:5d:75:eb:2a:6b:95:23:98:ec:93: 77:e2:04:aa:45:b1:24:44:5e:4f:c1:1b:f0:ea:da: 10:8a:99:49:e2:3b:47:5b:f3:29:a7:e1:dd:76:fd: 9a:b9:82:0e:fb:4a:2e:44:8a:37:c7:2e:c6:79:cd: b9:fe:30:5b:35:4f:17:c8:37:df:50:94:c0:57:c4: ed:12:6b:5d:a4:d9:81:96:14:a5:9d:72:31:60:08: ef:15:38:e8:2d:21:7a:4e:5c:be:32:7c:07:8b:b2: b6:6f:cb:f6:be:eb:37:45:7a:44:f7:e9:e1:c5:b9: 55:bf:85:50:26:ac:7f:7a:db:38:fc:36:d3:7a:12: 86:bc:6a:52:4d:9a:cf:cc:08:99:1a:d3:87:6e:24: 72:53:06:ff:de:37:46:1a:14:ae:35:69:db:dc:e5: 4c:46:a2:97:ce:fc:ad:db:c9:54:ac:90:00:0a:bb: 00:58:39:a5:16:ab:16:97:35:6b:1a:21:24:ef:86: a8:11:11:d9:33:84:fc:72:2b:36:9c:5a:bd:80:e0: df:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B4:99:09:AD:2E:39:73:15:29:6A:F7:75:F6:8E:BC:06:AE:FD:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef3bb416-b6b0-300f-af7f-7e66af803399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:87:75:83:f0:f1:d1:63:7a:a8:e9:28:df:5a:ba:e4:58:ce: 6b:07:81:8e:e0:46:10:20:5f:67:5c:34:2b:2f:10:88:6f:d2: 30:d1:74:b7:fb:64:3b:a2:4a:86:95:0b:e9:7b:28:83:ab:6f: 2a:2a:be:83:4a:40:36:25:b1:ec:c2:e1:4e:7c:11:d0:c3:10: 42:32:b9:ab:57:51:4a:d0:f5:21:6d:80:e1:7d:05:98:5e:73: 1e:0e:09:6e:19:1d:9f:93:08:42:3f:3f:1b:3f:80:d9:fd:ea: db:6a:40:e2:86:0e:bc:1c:bb:a2:07:74:67:58:f3:ca:e2:78: 0e:cd:af:c7:8b:9f:5a:d0:22:18:78:0e:5d:27:b2:f3:15:d2: 6f:a0:42:be:b6:6b:81:cf:cd:71:81:3f:88:8c:f9:2b:0c:f4: 44:dd:fc:06:39:d8:88:e9:c2:40:51:9e:3f:fa:9e:d9:1d:78: 63:7b:4e:9a:1c:32:16:17:3a:9c:34:2a:2b:82:8a:e9:74:64: b5:c3:24:3a:02:25:63:97:4a:0c:c0:e6:cf:c3:0b:b9:f9:b9: 86:59:51:ad:e5:fd:25:55:ee:3f:bf:56:7d:84:a4:44:a5:4d: bf:3e:8d:54:48:65:fc:55:c4:b9:17:05:7d:0b:e2:09:c1:69: 1d:5a:be:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29uLWUG75WmtQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OGVkYzJiOGEtNzIyZS00ZTAyLTk4YzktZDMyMTk4YTFmMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMCzEPEw5AVQtj5JTsGWPWyu3JAz7q7Hy0TD JSSECVD3/zcJsQPRh5r/HqHlZ7QJh1116yprlSOY7JN34gSqRbEkRF5PwRvw6toQ iplJ4jtHW/Mpp+Hddv2auYIO+0ouRIo3xy7Gec25/jBbNU8XyDffUJTAV8TtEmtd pNmBlhSlnXIxYAjvFTjoLSF6Tly+MnwHi7K2b8v2vus3RXpE9+nhxblVv4VQJqx/ ets4/DbTehKGvGpSTZrPzAiZGtOHbiRyUwb/3jdGGhSuNWnb3OVMRqKXzvyt28lU rJAACrsAWDmlFqsWlzVrGiEk74aoERHZM4T8cis2nFq9gODfcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAy0mQmtLjlzFSlq93X2jrwGrv1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWYzYmI0MTYtYjZiMC0z MDBmLWFmN2YtN2U2NmFmODAzMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiHdYPw8dFjeqjpKN9auuRYzmsHgY7gRhAgX2dcNCsvEIhv0jDRdLf7 ZDuiSoaVC+l7KIOrbyoqvoNKQDYlsezC4U58EdDDEEIyuatXUUrQ9SFtgOF9BZhe cx4OCW4ZHZ+TCEI/Pxs/gNn96ttqQOKGDrwcu6IHdGdY88rieA7Nr8eLn1rQIhh4 Dl0nsvMV0m+gQr62a4HPzXGBP4iM+SsM9ETd/AY52IjpwkBRnj/6ntkdeGN7Tpoc MhYXOpw0KiuCiul0ZLXDJDoCJWOXSgzA5s/DC7n5uYZZUa3l/SVV7j+/Vn2EpESl Tb8+jVRIZfxVxLkXBX0L4gnBaR1avsc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:12 2025 by rpki-client