$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/120e2c94-e561-3ace-aec1-dd04636e8749.roa File: 120e2c94-e561-3ace-aec1-dd04636e8749.roa (raw, json) Hash identifier: cOzWdkiqwLnoQg3bg6+E++l3B0bl13lXNGWXfmgP5DY= Subject key identifier: 38:03:97:A4:F9:3C:37:8B:1F:54:C7:8C:F4:B6:06:CA:DB:C2:09:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AA590EC4F45D3477797CCDCC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/120e2c94-e561-3ace-aec1-dd04636e8749.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 19527 IP address blocks: 34.190.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:ec:4f:45:d3:47:77:97:cc:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=14eee400-874e-4079-b412-a080fb95e92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:60:2f:c9:58:67:bf:e4:5b:e1:06:41:f9: dc:f3:cf:32:71:9b:c3:b4:b4:f9:86:f8:34:9f:f5: d4:18:1a:7d:b5:0e:e7:e8:fe:2a:a0:12:b6:cd:f9: d9:43:85:88:6d:78:9a:f7:e8:3b:2f:c1:ef:fd:a2: 4f:1c:d0:66:0f:f3:ad:cf:63:7f:65:02:47:d4:cc: 34:34:c2:d4:e3:d0:59:dc:e6:8b:f1:52:ed:c2:57: 4d:1a:38:dc:83:d7:61:db:7c:11:46:2b:cc:de:f3: d1:6e:a0:93:93:9e:de:be:fb:60:fe:78:ba:eb:a4: a6:68:94:34:e8:cb:39:ea:6d:03:7c:a9:7b:c6:a4: fd:0f:76:24:d5:02:c3:e4:60:a0:5b:86:a3:ec:27: 28:09:2e:03:ae:8f:4a:97:17:34:27:40:07:0d:0c: 2e:1f:50:e1:25:8d:6b:4a:04:cb:f1:6e:61:3b:d7: aa:23:70:e3:9e:b4:2e:05:12:30:ed:2c:98:7a:ea: 85:9d:d2:f0:3a:5c:d7:36:1a:cc:7f:f4:4d:a1:51: 43:b8:ec:55:74:fa:77:09:9f:55:41:d1:92:fd:ef: 2f:ba:dc:cd:a7:13:6f:01:42:cf:2c:b7:3e:27:84: b8:18:48:71:6c:fd:04:c8:1d:36:44:85:df:63:4f: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:03:97:A4:F9:3C:37:8B:1F:54:C7:8C:F4:B6:06:CA:DB:C2:09:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/120e2c94-e561-3ace-aec1-dd04636e8749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:95:38:44:b1:4b:16:c2:f4:a9:87:ef:bb:0c:38:59:6b:a5: f4:8f:eb:2b:af:80:c0:0d:22:b6:fe:5d:d3:5a:fd:5d:e5:c9: 9e:d4:f5:62:0e:42:65:e1:c1:99:82:56:81:8e:dd:7b:69:e1: 9d:cf:8e:66:e6:55:ec:f5:7e:95:f0:b5:d8:cd:5e:8d:47:be: 61:8c:ef:06:03:65:c3:7f:ae:30:0a:ee:ee:f4:77:60:59:07: 2e:d9:e5:78:30:7c:15:2f:56:c9:53:39:7c:9c:31:cd:8a:f0: 68:10:af:0c:16:b4:1a:19:72:52:d7:c1:e9:5c:c2:20:f2:de: 43:a5:b2:cc:82:78:b9:c8:75:ab:d7:7d:04:a4:68:25:f2:ae: e4:64:17:da:24:98:55:85:4b:51:48:45:f7:fc:19:40:16:c0: 90:36:ed:6d:ce:48:96:5c:49:8f:01:a0:27:57:ff:bd:6a:6c: 2e:79:91:05:bd:5f:9a:d5:9f:15:02:0a:fa:03:a4:a0:69:32: 23:4d:4b:ae:2f:5f:09:01:ac:b8:e8:de:0c:d4:63:59:83:6e: 43:d8:03:42:21:3a:9f:89:86:b1:1a:e5:ac:fa:25:02:f0:9c: 03:1f:41:7f:2e:f0:ca:3a:59:56:87:cc:53:1e:53:20:0a:4f: 25:f8:bc:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkOxPRdNHd5fM3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk MTRlZWU0MDAtODc0ZS00MDc5LWI0MTItYTA4MGZiOTVlOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV5gL8lYZ7/kW+EGQfnc888ycZvDtLT5hvg0 n/XUGBp9tQ7n6P4qoBK2zfnZQ4WIbXia9+g7L8Hv/aJPHNBmD/Otz2N/ZQJH1Mw0 NMLU49BZ3OaL8VLtwldNGjjcg9dh23wRRivM3vPRbqCTk57evvtg/ni666SmaJQ0 6Ms56m0DfKl7xqT9D3Yk1QLD5GCgW4aj7CcoCS4Dro9Klxc0J0AHDQwuH1DhJY1r SgTL8W5hO9eqI3DjnrQuBRIw7SyYeuqFndLwOlzXNhrMf/RNoVFDuOxVdPp3CZ9V QdGS/e8vutzNpxNvAULPLLc+J4S4GEhxbP0EyB02RIXfY0/zZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgDl6T5PDeLH1THjPS2BsrbwgmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTIwZTJjOTQtZTU2MS0z YWNlLWFlYzEtZGQwNDYzNmU4NzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOVOESxSxbC9KmH77sMOFlrpfSP6yuvgMANIrb+XdNa/V3lyZ7U9WIO QmXhwZmCVoGO3Xtp4Z3PjmbmVez1fpXwtdjNXo1HvmGM7wYDZcN/rjAK7u70d2BZ By7Z5XgwfBUvVslTOXycMc2K8GgQrwwWtBoZclLXwelcwiDy3kOlssyCeLnIdavX fQSkaCXyruRkF9okmFWFS1FIRff8GUAWwJA27W3OSJZcSY8BoCdX/71qbC55kQW9 X5rVnxUCCvoDpKBpMiNNS64vXwkBrLjo3gzUY1mDbkPYA0IhOp+JhrEa5az6JQLw nAMfQX8u8Mo6WVaHzFMeUyAKTyX4vLo= -----END CERTIFICATE-----Generated at Wed Aug 6 11:17:11 2025 by rpki-client