$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7997e49-b1f4-31a5-8048-575661a9acfe.roa File: f7997e49-b1f4-31a5-8048-575661a9acfe.roa (raw, json) Hash identifier: L1Qp2t4K1UgdjqLBBKw8uJqvFyvJKXc+u4RZRXpnM0o= Subject key identifier: F3:B7:AA:FF:39:D9:B3:97:47:A7:6F:B4:3F:CD:92:B9:70:83:F3:EC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A878787D1B48F2627FC32FEC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7997e49-b1f4-31a5-8048-575661a9acfe.roa Signing time: Tue 15 Jul 2025 18:47:58 +0000 ROA not before: Tue 15 Jul 2025 18:47:58 +0000 ROA not after: Mon 13 Oct 2025 18:47:58 +0000 asID: 396982 IP address blocks: 34.13.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:87:87:d1:b4:8f:26:27:fc:32:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 18:47:58 2025 GMT Not After : Oct 13 18:47:58 2025 GMT Subject: CN=a061f8fa-8f81-41ad-b316-94f2dceec2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:d8:8a:d0:84:91:1c:a8:75:fb:9f:e8:ec: a8:d7:97:5b:1d:36:6d:76:0d:d7:b5:99:82:13:98: 4a:98:07:f9:d6:37:7b:31:96:35:f7:ad:c3:ea:37: dc:3e:89:90:ab:12:6b:6a:95:58:8b:25:a1:0d:15: f0:fa:e7:c8:71:d1:97:bb:32:f7:b9:38:2b:b3:4b: df:61:b0:f3:4d:99:e3:40:da:17:76:19:c8:b0:8c: a3:0b:3c:de:54:40:14:fe:32:af:d6:fe:88:70:11: 5a:5c:e1:f0:f0:18:5c:92:6e:5e:31:9b:c6:15:f2: 39:bb:cf:34:e6:ae:8e:a4:6c:e4:32:ec:e4:dd:1e: c6:89:11:b5:a1:6e:7b:b0:5f:ff:0e:ad:24:83:51: 06:f5:12:5e:03:e6:bd:3d:36:b6:73:c7:dd:37:cc: d7:fc:23:54:df:95:fa:40:70:a1:b6:b9:1f:3d:a3: 79:c1:e1:12:ca:ee:0b:92:08:32:1b:44:0e:9b:d9: 8e:6d:67:3f:57:a3:40:e1:54:26:75:46:f7:6e:db: fe:1c:42:63:6d:3c:b1:89:ff:e3:fc:da:a9:f1:d1: 0d:62:19:47:e6:7e:0d:e0:21:f9:49:c3:b0:7a:87: 13:60:1c:25:49:63:67:78:1f:22:2f:b8:42:66:39: d6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B7:AA:FF:39:D9:B3:97:47:A7:6F:B4:3F:CD:92:B9:70:83:F3:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7997e49-b1f4-31a5-8048-575661a9acfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5a:9e:23:eb:42:9d:fa:2d:6a:9b:47:2c:f5:da:4f:5a:5b: 23:ac:c3:2e:06:8a:cc:40:ce:f7:f8:38:f9:cb:ce:4a:54:40: 1f:32:08:0e:8c:5e:83:c0:5d:4e:ad:1a:78:08:43:cf:a7:47: 64:a0:cb:fd:ab:12:f3:8e:79:64:61:68:ce:8a:31:bf:b8:07: 69:34:a0:c5:7b:ad:23:4e:44:f6:4f:1f:23:46:59:60:a2:83: 22:29:db:9d:56:88:81:db:b5:13:58:41:ff:3e:4a:6d:c2:e1: 32:77:2a:69:cd:84:34:1c:a0:76:1a:30:0e:81:08:02:56:c8: 83:eb:2d:26:e6:26:e1:34:ea:9b:bd:5f:f3:7a:6c:b1:6e:f4: 00:3c:ee:6a:40:e4:b8:de:2d:8b:5f:9f:ee:13:19:a7:3b:0f: 33:e7:57:90:9c:30:bf:72:a5:db:74:9b:2f:60:cd:85:aa:c0: 41:ef:10:52:6b:5d:98:3d:74:bf:85:40:1c:2e:8a:26:68:ae: 30:13:43:50:e9:ef:33:a6:9e:2d:4f:64:62:3c:01:df:a6:f2: 31:77:30:63:89:5b:e6:b2:9b:81:9a:fa:fd:c8:87:9b:0f:ac: c2:50:6e:0c:a1:60:8b:92:74:65:9c:29:c4:27:3a:0d:c0:86: a0:da:53:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHh4fRtI8mJ/wy/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTE4NDc1OFoXDTI1MTAxMzE4NDc1OFowLzEtMCsGA1UEAxMk YTA2MWY4ZmEtOGY4MS00MWFkLWIzMTYtOTRmMmRjZWVjMmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HHYitCEkRyodfuf6Oyo15dbHTZtdg3XtZmC E5hKmAf51jd7MZY1963D6jfcPomQqxJrapVYiyWhDRXw+ufIcdGXuzL3uTgrs0vf YbDzTZnjQNoXdhnIsIyjCzzeVEAU/jKv1v6IcBFaXOHw8Bhckm5eMZvGFfI5u880 5q6OpGzkMuzk3R7GiRG1oW57sF//Dq0kg1EG9RJeA+a9PTa2c8fdN8zX/CNU35X6 QHChtrkfPaN5weESyu4LkggyG0QOm9mObWc/V6NA4VQmdUb3btv+HEJjbTyxif/j /Nqp8dENYhlH5n4N4CH5ScOweocTYBwlSWNneB8iL7hCZjnWBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO3qv852bOXR6dvtD/Nkrlwg/PsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjc5OTdlNDktYjFmNC0z MWE1LTgwNDgtNTc1NjYxYTlhY2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIg1kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNaniPrQp36LWqbRyz12k9aWyOswy4GisxAzvf4OPnLzkpUQB8yCA6M XoPAXU6tGngIQ8+nR2Sgy/2rEvOOeWRhaM6KMb+4B2k0oMV7rSNORPZPHyNGWWCi gyIp251WiIHbtRNYQf8+Sm3C4TJ3KmnNhDQcoHYaMA6BCAJWyIPrLSbmJuE06pu9 X/N6bLFu9AA87mpA5LjeLYtfn+4TGac7DzPnV5CcML9ypdt0my9gzYWqwEHvEFJr XZg9dL+FQBwuiiZorjATQ1Dp7zOmni1PZGI8Ad+m8jF3MGOJW+aym4Ga+v3Ih5sP rMJQbgyhYIuSdGWcKcQnOg3AhqDaU4Q= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:14 2025 by rpki-client