$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3adbdcc-db51-3cd5-b11e-c6f96c8063b7.roa File: f3adbdcc-db51-3cd5-b11e-c6f96c8063b7.roa (raw, json) Hash identifier: brzxyV8bDDfAVpqeYEU1mfjkpaJOedvJmNQhJv7qujk= Subject key identifier: 27:32:AE:AD:C2:D2:5C:A4:36:29:D4:50:1B:76:D2:9D:71:A9:FE:10 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9FCFC453AC14A8A9E640 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3adbdcc-db51-3cd5-b11e-c6f96c8063b7.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.64.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9f:cf:c4:53:ac:14:a8:a9:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=cb844d3d-66d9-4c79-b515-d35da017a571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e8:5c:81:b1:aa:bb:31:92:02:0c:03:d0:53: f3:01:1f:3b:66:00:1d:ac:85:f6:b9:fc:8e:a0:0d: d4:75:6c:76:e5:82:e2:4e:db:d3:8d:9e:c7:5d:fd: 58:63:a9:fa:5b:d4:6e:03:93:43:b2:66:d8:aa:01: 25:4e:08:dc:ec:f8:8f:63:72:d8:0e:f2:31:f7:79: e8:20:29:7b:d3:b9:59:b3:2c:25:85:2e:4d:e3:08: 4d:75:4a:3e:f4:d5:bb:5e:27:81:47:18:9e:39:7a: 0a:c5:a9:8a:34:db:6b:42:63:50:bd:a2:bd:e0:ca: 29:ba:57:68:33:d8:52:e6:eb:19:0e:3f:4b:11:11: 4f:18:2f:72:86:95:5d:b1:6a:0b:f8:93:38:fe:e8: d5:14:bf:9d:20:94:26:0e:19:7b:69:76:98:7b:16: a6:d0:54:11:9d:77:2d:cf:b7:5d:85:6d:5c:82:c7: e0:72:76:35:0f:21:0e:e0:8d:15:cb:a5:9f:76:d2: 93:35:9a:c9:2f:b9:b2:d0:b6:5a:a0:7c:90:55:c5: a3:66:19:3f:71:c9:e4:5c:3d:de:6d:50:10:44:30: 6d:6c:57:b9:47:e0:47:93:8d:5e:ff:e7:4f:dc:43: 2b:61:53:4b:4b:16:ef:f2:67:23:1e:44:8c:16:06: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:32:AE:AD:C2:D2:5C:A4:36:29:D4:50:1B:76:D2:9D:71:A9:FE:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3adbdcc-db51-3cd5-b11e-c6f96c8063b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:1d:02:c5:d5:a9:bc:f9:40:ad:9d:7f:ac:0a:92:e6:5b:ba: f5:be:95:07:99:19:1c:f4:bb:f4:6d:2f:8e:d1:7a:05:dd:bd: de:17:8f:32:57:da:54:b1:96:6c:bf:cc:b4:e7:01:75:e2:c2: 29:f2:94:f3:5f:24:48:28:bd:e3:fc:7a:b9:6d:8e:b4:bd:a3: 99:8b:42:ae:1a:3b:4e:78:ab:d4:72:7c:2c:15:29:6b:38:90: 07:7d:2a:f9:c0:0e:7e:8a:90:5d:af:e6:e1:3b:1c:e3:93:00: ef:9e:b4:57:15:c8:ba:75:44:92:ad:78:23:d8:61:c9:cf:b4: 5b:2c:37:39:3a:ce:35:7a:2c:fe:3a:23:38:68:b7:cd:6c:8e: ce:4a:a4:9f:84:c5:7a:f9:10:c3:18:10:cb:08:05:ea:ab:09: 50:6a:fe:36:70:03:2d:84:17:8f:25:3f:15:9a:e1:a4:af:41: a4:bc:5b:c4:9c:60:5e:f6:fa:67:1c:0c:12:30:11:f6:4c:26: a4:59:b8:f6:ac:b0:6f:73:b4:8f:fd:57:17:43:4d:cb:b8:4a: bb:ed:80:ab:bb:3d:43:e2:4b:78:83:fd:46:66:50:54:8d:73: d3:ed:1b:c8:f5:c1:62:ce:9b:38:35:ae:c1:14:f5:c8:e4:e1: 7b:29:15:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25/PxFOsFKip5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2I4NDRkM2QtNjZkOS00Yzc5LWI1MTUtZDM1ZGEwMTdhNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+hcgbGquzGSAgwD0FPzAR87ZgAdrIX2ufyO oA3UdWx25YLiTtvTjZ7HXf1YY6n6W9RuA5NDsmbYqgElTgjc7PiPY3LYDvIx93no ICl707lZsywlhS5N4whNdUo+9NW7XieBRxieOXoKxamKNNtrQmNQvaK94Mopuldo M9hS5usZDj9LERFPGC9yhpVdsWoL+JM4/ujVFL+dIJQmDhl7aXaYexam0FQRnXct z7ddhW1cgsfgcnY1DyEO4I0Vy6WfdtKTNZrJL7my0LZaoHyQVcWjZhk/ccnkXD3e bVAQRDBtbFe5R+BHk41e/+dP3EMrYVNLSxbv8mcjHkSMFgbGzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcyrq3C0lykNinUUBt20p1xqf4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjNhZGJkY2MtZGI1MS0z Y2Q1LWIxMWUtYzZmOTZjODA2M2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIkBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8dAsXVqbz5QK2df6wKkuZbuvW+lQeZGRz0u/RtL47RegXdvd4XjzJX 2lSxlmy/zLTnAXXiwinylPNfJEgoveP8erltjrS9o5mLQq4aO054q9RyfCwVKWs4 kAd9KvnADn6KkF2v5uE7HOOTAO+etFcVyLp1RJKteCPYYcnPtFssNzk6zjV6LP46 Izhot81sjs5KpJ+ExXr5EMMYEMsIBeqrCVBq/jZwAy2EF48lPxWa4aSvQaS8W8Sc YF72+mccDBIwEfZMJqRZuPassG9ztI/9VxdDTcu4SrvtgKu7PUPiS3iD/UZmUFSN c9PtG8j1wWLOmzg1rsEU9cjk4XspFVo= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:07 2025 by rpki-client