$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffbdb0c8-cb20-385b-8c70-e37a55a0bf97.roa File: ffbdb0c8-cb20-385b-8c70-e37a55a0bf97.roa (raw, json) Hash identifier: LHTHmFOcDwg4nW/AmFkSdOIirRxtg2gBpPF+xQ+WY4s= Subject key identifier: E5:D1:B5:0B:CF:99:B5:96:AC:C4:10:16:13:F0:2A:BA:C4:21:87:DD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBAAB116EF8E7AAE4EA740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffbdb0c8-cb20-385b-8c70-e37a55a0bf97.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.84.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:aa:b1:16:ef:8e:7a:ae:4e:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=994b259a-eb6c-4d65-a57c-370dbf11ab00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:05:94:dc:aa:ba:5b:76:66:dd:7f:eb:67:43: ee:b2:86:1e:8e:38:f8:51:b9:96:20:9e:34:56:6b: 90:ec:57:37:7e:49:93:0a:07:d4:69:de:95:50:e6: 17:cf:3f:47:a2:55:df:62:d3:8d:f9:e3:d9:58:88: b8:8d:29:d9:49:51:93:a4:b6:a6:13:2d:45:d6:dd: ec:d4:68:21:77:72:3e:64:9b:04:5f:a1:64:e7:28: 69:3d:54:e8:3b:b7:9e:57:27:58:b3:54:50:11:a7: 8a:bd:72:6d:37:a9:f5:0a:07:6e:57:7e:0a:a5:5e: fc:2b:5d:30:51:eb:2a:72:5a:04:e2:91:da:60:c2: c4:80:44:07:87:56:41:a5:55:d8:2c:67:bd:b5:be: 92:b1:e8:b1:6a:28:a4:13:e1:a3:56:7f:d5:03:f8: a5:70:0f:9f:4b:bf:be:49:43:55:3b:18:02:29:fe: c0:56:12:6a:58:3c:5b:72:9d:63:0e:b1:27:b9:e9: 3a:90:be:38:67:44:d9:b4:b7:36:0d:23:43:c6:6d: 21:57:2e:ee:bf:01:51:5a:db:df:7d:7a:20:ec:6e: c7:4d:a2:61:46:f6:16:58:22:49:69:99:fd:64:ec: 8e:8a:df:74:0e:ef:7f:12:d8:22:ce:a7:68:9b:eb: fb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D1:B5:0B:CF:99:B5:96:AC:C4:10:16:13:F0:2A:BA:C4:21:87:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffbdb0c8-cb20-385b-8c70-e37a55a0bf97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:20:34:1d:e6:6f:21:d7:24:a0:a4:ee:a4:f1:a9:92:c6:19: d5:7a:21:a1:37:14:fb:b7:be:58:0f:cf:ad:7a:2a:bf:bd:ad: 76:64:03:e7:8b:2f:e8:57:3a:d9:cb:d9:dc:d8:a5:36:e0:46: 74:08:1d:86:5d:bd:cb:3c:a6:66:b2:64:54:24:8f:a8:68:e3: a3:20:e5:d0:ba:4f:a5:cd:27:69:ee:2b:51:3a:5b:0e:d3:c4: 7a:c0:09:da:d2:0f:83:d7:6a:66:7d:e0:bf:2c:d9:01:d0:16: a3:13:22:11:7a:a6:36:c3:ca:c7:e0:04:c2:0b:b9:90:24:01: 0d:dc:c2:1a:0e:ea:e0:57:a0:ca:4d:71:d0:a8:c6:26:f1:88: 06:19:95:7b:94:c1:23:fa:20:72:e1:9a:e7:8d:11:f8:16:6b: 63:fa:40:71:7d:32:7d:82:c3:52:ab:fb:d6:24:3f:2f:96:19: c1:b9:af:f4:45:ea:3f:e1:5c:49:cb:d3:f6:af:e2:f2:63:51: 52:63:0a:a4:ea:43:62:1f:53:d6:0d:11:46:f0:6d:ad:c2:a7: 6b:04:1e:4c:54:93:7a:c5:68:7a:64:47:ec:35:d4:44:1f:b5: 01:7a:c3:53:8a:86:98:28:eb:ab:63:52:91:19:3b:50:05:3a: b9:5b:e6:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26qxFu+Oeq5Op0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OTk0YjI1OWEtZWI2Yy00ZDY1LWE1N2MtMzcwZGJmMTFhYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwWU3Kq6W3Zm3X/rZ0PusoYejjj4UbmWIJ40 VmuQ7Fc3fkmTCgfUad6VUOYXzz9HolXfYtON+ePZWIi4jSnZSVGTpLamEy1F1t3s 1Gghd3I+ZJsEX6Fk5yhpPVToO7eeVydYs1RQEaeKvXJtN6n1CgduV34KpV78K10w UesqcloE4pHaYMLEgEQHh1ZBpVXYLGe9tb6SseixaiikE+GjVn/VA/ilcA+fS7++ SUNVOxgCKf7AVhJqWDxbcp1jDrEnuek6kL44Z0TZtLc2DSNDxm0hVy7uvwFRWtvf fXog7G7HTaJhRvYWWCJJaZn9ZOyOit90Du9/Etgizqdom+v7jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXRtQvPmbWWrMQQFhPwKrrEIYfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmZiZGIwYzgtY2IyMC0z ODViLThjNzAtZTM3YTU1YTBiZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0gNB3mbyHXJKCk7qTxqZLGGdV6IaE3FPu3vlgPz616Kr+9rXZkA+eL L+hXOtnL2dzYpTbgRnQIHYZdvcs8pmayZFQkj6ho46Mg5dC6T6XNJ2nuK1E6Ww7T xHrACdrSD4PXamZ94L8s2QHQFqMTIhF6pjbDysfgBMILuZAkAQ3cwhoO6uBXoMpN cdCoxibxiAYZlXuUwSP6IHLhmueNEfgWa2P6QHF9Mn2Cw1Kr+9YkPy+WGcG5r/RF 6j/hXEnL0/av4vJjUVJjCqTqQ2IfU9YNEUbwba3Cp2sEHkxUk3rFaHpkR+w11EQf tQF6w1OKhpgo66tjUpEZO1AFOrlb5kE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:56 2025 by rpki-client