$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa File: fff97a92-f728-3096-aace-80e53e101e6a.roa (raw, json) Hash identifier: XlghJZYyVMPTQCZZ5oH6CuL5a3BvhgNAK1hY5ZTH4v4= Subject key identifier: DE:F8:79:6E:8D:FB:D2:BF:24:2D:5F:A4:69:B7:4F:5F:0B:B8:87:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8412377138CCABED3A864500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 139070 IP address blocks: 34.116.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:37:71:38:cc:ab:ed:3a:86:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e2e10960-612f-4e6c-947e-e682d88d192c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:0b:86:81:74:3f:27:cc:f0:cc:e7:53:e7: 52:2f:f6:45:8e:e8:d9:5c:17:ec:78:5f:3b:95:1e: da:a2:e2:e8:8e:4f:9f:a9:73:8e:82:ff:3b:f2:9a: fb:72:e5:96:2a:b3:84:fb:55:53:b9:47:91:5a:66: f1:a3:c1:2b:aa:4e:3c:2d:43:95:ae:e5:1e:a8:c0: d2:b4:c1:80:be:2e:fd:3e:c4:3f:38:90:d5:d1:28: b2:3b:0e:c7:9e:b8:63:c5:08:5d:fc:e3:f5:be:c0: 19:3e:c3:fd:48:ba:33:74:a3:96:6e:08:ec:ec:b3: 71:fc:75:67:99:5b:c9:d6:23:81:6b:1b:f7:2e:5d: 1c:eb:65:40:a7:01:9f:23:a1:04:5a:d0:03:83:a2: d9:fd:64:93:45:1a:9e:25:7a:e9:80:63:39:59:c7: df:f5:b9:78:fc:39:84:bc:53:c6:8d:d4:fa:58:49: 7f:44:8c:86:bf:21:a4:69:7b:1d:d3:90:23:f9:eb: 67:a8:7b:55:55:49:64:3e:2b:19:55:de:60:c2:66: 30:8c:5d:d8:5e:83:a2:60:ed:70:12:2f:21:0c:38: 90:fc:ca:22:61:e0:c5:68:5f:9a:8f:ca:1d:d3:3c: d5:d1:58:a8:5c:37:97:9b:7b:ca:ab:29:eb:14:65: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F8:79:6E:8D:FB:D2:BF:24:2D:5F:A4:69:B7:4F:5F:0B:B8:87:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.116.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9e:ea:e9:06:ff:4d:15:2f:fc:c8:23:de:78:d6:89:53:36: 33:25:a0:4f:33:f0:b0:48:f7:b6:78:c8:9a:0d:0c:db:92:ab: 97:77:cd:89:80:de:28:95:a8:ae:31:bc:ff:35:28:cf:4f:5f: 13:c1:45:17:53:a5:e3:80:2a:ec:b4:c9:21:2d:86:21:14:61: d8:e6:69:d0:6e:f1:f2:0d:7d:d3:a9:31:c2:89:58:73:0e:56: 8e:cb:d0:f3:7a:6e:35:bd:31:03:10:e8:b6:5c:82:56:a1:b7: 49:36:1c:a9:a2:c3:77:eb:cf:27:f3:ef:ea:2b:9d:9c:ba:1c: 5b:ad:25:73:89:5e:54:fa:82:6e:cc:d7:95:9b:e8:46:0e:8f: 26:5b:cf:14:4a:be:f5:22:2d:30:f5:c6:80:db:d9:76:ee:2d: 14:94:91:d7:ae:20:41:32:6b:06:43:a7:a0:c0:a0:3a:53:9a: 20:09:6d:3e:b4:37:87:ff:3f:c9:bc:37:f6:47:a3:59:b8:b9: 6f:e0:ad:96:78:dc:5a:ab:b1:80:8b:f5:54:6a:34:5d:36:d1: 47:a6:b1:08:90:9d:84:d0:9c:19:9b:43:8f:17:89:69:15:99: 71:48:16:ae:26:0d:c6:6d:b9:da:4c:b9:f2:37:2f:09:b6:0e: 40:c4:86:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjdxOMyr7TqGRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTJlMTA5NjAtNjEyZi00ZTZjLTk0N2UtZTY4MmQ4OGQxOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolkLhoF0PyfM8MznU+dSL/ZFjujZXBfseF87 lR7aouLojk+fqXOOgv878pr7cuWWKrOE+1VTuUeRWmbxo8Erqk48LUOVruUeqMDS tMGAvi79PsQ/OJDV0SiyOw7HnrhjxQhd/OP1vsAZPsP9SLozdKOWbgjs7LNx/HVn mVvJ1iOBaxv3Ll0c62VApwGfI6EEWtADg6LZ/WSTRRqeJXrpgGM5Wcff9bl4/DmE vFPGjdT6WEl/RIyGvyGkaXsd05Aj+etnqHtVVUlkPisZVd5gwmYwjF3YXoOiYO1w Ei8hDDiQ/MoiYeDFaF+aj8od0zzV0VioXDeXm3vKqynrFGXjyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN74eW6N+9K/JC1fpGm3T18LuIeQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmZmOTdhOTItZjcyOC0z MDk2LWFhY2UtODBlNTNlMTAxZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+e6ukG/00VL/zII9541olTNjMloE8z8LBI97Z4yJoNDNuSq5d3zYmA 3iiVqK4xvP81KM9PXxPBRRdTpeOAKuy0ySEthiEUYdjmadBu8fINfdOpMcKJWHMO Vo7L0PN6bjW9MQMQ6LZcglaht0k2HKmiw3frzyfz7+ornZy6HFutJXOJXlT6gm7M 15Wb6EYOjyZbzxRKvvUiLTD1xoDb2XbuLRSUkdeuIEEyawZDp6DAoDpTmiAJbT60 N4f/P8m8N/ZHo1m4uW/grZZ43FqrsYCL9VRqNF020UemsQiQnYTQnBmbQ48XiWkV mXFIFq4mDcZtudpMufI3Lwm2DkDEhmI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:35:33 2025 by rpki-client