$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa File: ffd4d11b-7be4-3453-ad82-0b71adf00095.roa (raw, json) Hash identifier: NWVqfMf6gAYiuChb6avOHXYzgjyW6Mb6n3A0OwLdJeY= Subject key identifier: 9D:9E:D9:CB:F0:7D:AE:34:CA:FA:07:B7:EB:C3:A0:35:AA:EF:08:72 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE6D54CCE2391A93FD480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.94.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e6:d5:4c:ce:23:91:a9:3f:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0bbe9276-e965-40bd-997b-98f6c22dd85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:49:a3:d8:da:79:53:a5:93:36:94:e7:60: 3f:9a:25:49:c9:06:13:52:2e:b7:50:ef:13:13:13: 86:b9:81:93:29:79:69:df:1e:e0:c8:fa:c9:b7:ee: 29:02:6f:bf:50:98:47:4e:74:f5:5e:3e:98:35:b0: fe:b8:32:fe:3b:6f:50:a7:6e:5a:c8:a8:4b:ba:3e: 8f:7e:66:21:29:47:c6:b6:e9:b9:e8:b3:41:4d:4b: 72:ea:d8:71:36:a0:51:08:89:a9:2a:43:c6:46:e1: f1:f4:14:de:b5:24:8f:d8:05:98:f1:e3:ef:57:b2: 75:78:dc:36:e1:9d:79:78:1d:76:7b:99:9b:62:9f: 4f:73:85:9a:8c:07:5a:15:bb:07:77:01:14:c7:c0: 11:ec:02:58:5d:df:55:7b:34:73:8a:ea:f3:a9:fc: c4:e3:dc:e4:87:00:ce:a5:e0:77:73:2a:71:38:d8: b4:5f:27:7d:03:a2:f9:b8:92:aa:15:0c:64:96:dc: 91:21:ef:2e:4d:11:c7:e6:59:72:d2:bb:f4:ae:a4: ad:7b:6a:db:7c:3e:8c:e0:46:0b:b0:c2:71:7e:b7: 23:c3:15:27:40:2c:25:52:57:33:cb:b6:68:d5:1e: 4f:2e:4b:44:a0:5a:f6:11:63:04:43:17:e9:46:c6: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9E:D9:CB:F0:7D:AE:34:CA:FA:07:B7:EB:C3:A0:35:AA:EF:08:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:99:f7:d7:49:b5:2c:57:03:71:e6:bf:45:ae:23:97:15:01: fc:16:00:eb:09:0c:1f:65:82:9e:f1:0d:43:a1:2f:c5:1b:ce: 46:33:ac:42:60:32:1d:7b:c2:03:84:90:a2:b3:26:d2:95:79: 9c:22:f0:64:7b:4a:8d:1f:a7:73:b6:39:f8:17:f2:1d:c7:ef: 63:ed:b4:75:df:97:e6:88:f7:d0:54:75:46:d2:f9:e4:0a:aa: 85:1e:e6:17:90:e5:91:49:0e:66:bc:33:c9:d3:ad:9d:c5:70: 7f:31:d3:5e:73:f3:25:de:6d:3f:fe:af:4a:79:22:45:4f:a3: 06:d1:21:e7:6d:49:72:5a:b9:44:ee:8b:34:51:10:a2:99:d7: f5:38:9d:73:c9:03:da:de:34:7e:f6:aa:00:15:70:9f:41:15: c0:50:9f:a3:5f:11:64:c6:52:f1:7f:56:3f:8c:c2:a0:b9:5d: 6c:63:73:d9:f8:3b:17:a1:29:8c:05:c8:be:05:d9:95:d7:86: 6e:9b:0d:62:d3:3e:4c:50:83:79:67:eb:5e:99:e3:61:c5:62: 33:a9:e7:7b:dd:13:22:4a:6b:7e:c6:00:c9:3b:c3:34:e5:a4: e0:e2:10:d3:47:26:22:51:26:22:9c:ca:57:8c:a4:b2:2b:53: 6e:76:f9:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+bVTM4jkak/1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGJiZTkyNzYtZTk2NS00MGJkLTk5N2ItOThmNmMyMmRkODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtApJo9jaeVOlkzaU52A/miVJyQYTUi63UO8T ExOGuYGTKXlp3x7gyPrJt+4pAm+/UJhHTnT1Xj6YNbD+uDL+O29Qp25ayKhLuj6P fmYhKUfGtum56LNBTUty6thxNqBRCImpKkPGRuHx9BTetSSP2AWY8ePvV7J1eNw2 4Z15eB12e5mbYp9Pc4WajAdaFbsHdwEUx8AR7AJYXd9VezRziurzqfzE49zkhwDO peB3cypxONi0Xyd9A6L5uJKqFQxkltyRIe8uTRHH5lly0rv0rqSte2rbfD6M4EYL sMJxfrcjwxUnQCwlUlczy7Zo1R5PLktEoFr2EWMEQxfpRsZuOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2e2cvwfa40yvoHt+vDoDWq7whyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmZkNGQxMWItN2JlNC0z NDUzLWFkODItMGI3MWFkZjAwMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiZ99dJtSxXA3Hmv0WuI5cVAfwWAOsJDB9lgp7xDUOhL8UbzkYzrEJg Mh17wgOEkKKzJtKVeZwi8GR7So0fp3O2OfgX8h3H72PttHXfl+aI99BUdUbS+eQK qoUe5heQ5ZFJDma8M8nTrZ3FcH8x015z8yXebT/+r0p5IkVPowbRIedtSXJauUTu izRREKKZ1/U4nXPJA9reNH72qgAVcJ9BFcBQn6NfEWTGUvF/Vj+MwqC5XWxjc9n4 OxehKYwFyL4F2ZXXhm6bDWLTPkxQg3ln616Z42HFYjOp53vdEyJKa37GAMk7wzTl pODiENNHJiJRJiKcyleMpLIrU252+bk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:26 2025 by rpki-client