$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f95e1d5-dcf9-3343-849e-5601317aa93b.roa File: 3f95e1d5-dcf9-3343-849e-5601317aa93b.roa (raw, json) Hash identifier: rHSE2N0iHdcwf7TYhYor3dVmTReLJqhGwqpKYE0YOt8= Subject key identifier: EB:3C:36:62:8A:5A:DF:56:13:86:2C:19:AC:03:7A:D3:36:2A:BC:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AA590EFC1CF43926906002F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f95e1d5-dcf9-3343-849e-5601317aa93b.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 19527 IP address blocks: 34.190.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:ef:c1:cf:43:92:69:06:00:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=253bc6cd-56e0-4166-af87-1b3e6e3e544e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:c0:f7:92:0f:d9:9f:23:b6:6e:43:d3:68: e9:bf:ba:e8:6b:ee:9f:b6:1a:f4:a6:af:4d:ce:79: 0c:86:0e:21:3c:c6:cb:1a:92:fc:dc:d8:48:44:4b: 65:fe:38:2a:50:26:dd:15:c4:f9:ba:0a:22:cb:a5: 97:ce:0d:19:fb:63:48:fb:1e:23:73:f1:43:ad:79: 9f:91:19:41:09:43:e4:cb:24:a9:bf:43:15:bf:40: 21:2d:77:ca:82:93:ea:0d:68:14:4e:69:38:90:f0: 3a:59:2b:fa:c5:bc:eb:03:2d:2e:f4:9c:1d:f4:16: eb:bb:b6:bd:5d:fd:a5:aa:c1:94:bd:4a:f2:3b:c6: 98:38:ed:26:e0:9e:b7:13:ad:cb:f6:6c:a3:8e:5c: 24:c4:41:6c:4b:64:7a:da:b4:e9:e8:6c:4b:63:1d: aa:76:76:3d:2a:d7:97:38:b0:80:0c:f6:82:4e:c3: a3:83:9d:9b:40:d3:b8:c2:b3:47:37:67:0c:d3:80: f2:55:35:6a:cf:43:46:ae:6d:a9:41:6f:5f:09:93: 3c:73:8c:c0:d3:2a:7d:c1:68:f7:d5:f6:62:5f:95: cb:24:0c:f2:e5:97:be:ee:09:d0:a8:56:8f:e3:a8: 6c:48:39:4d:b6:81:90:77:f6:dd:c5:a1:d2:f8:de: f5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3C:36:62:8A:5A:DF:56:13:86:2C:19:AC:03:7A:D3:36:2A:BC:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f95e1d5-dcf9-3343-849e-5601317aa93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:54:50:27:4b:9f:dd:cc:46:37:c7:02:07:05:29:7c:bd:7a: 21:9d:33:14:28:96:1a:2e:c5:5f:6e:3b:67:6a:a0:15:12:d7: 69:b4:b8:75:34:c9:a4:50:e2:7f:0e:c7:fb:24:f1:4a:4c:67: 57:1e:6e:56:34:bc:1a:05:eb:56:ab:e1:b3:ff:64:4b:6a:e7: e4:52:c4:1f:03:2f:3e:46:70:e8:f1:27:86:51:34:df:4a:e0: e0:40:e1:81:8c:08:64:c4:b7:9b:fa:cf:e8:14:23:32:da:2c: ca:81:50:25:8b:03:be:f0:05:2e:bc:24:2f:da:f2:6a:f4:84: 1c:1a:b2:4c:23:70:d3:79:1f:54:0f:45:4f:d8:7e:82:63:e2: b2:bf:65:00:41:78:e8:a5:11:1e:d8:a3:be:fb:fb:13:c1:c9: 0f:66:57:60:a2:87:72:03:7f:c5:e3:07:b7:fd:d1:eb:f3:2b: 6c:ac:f9:a4:ef:81:a6:b6:43:8f:73:9a:68:55:b6:a9:57:43: b2:dd:09:26:6e:5e:b7:09:04:86:83:1c:8f:99:b1:21:04:fa: 20:f4:94:9b:d9:6d:a6:51:0d:11:33:d3:90:3a:10:63:34:d3: 11:61:2e:c4:d9:9f:94:96:ff:ed:71:14:6e:58:ee:39:d9:e4: c2:1e:dc:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkO/Bz0OSaQYAL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk MjUzYmM2Y2QtNTZlMC00MTY2LWFmODctMWIzZTZlM2U1NDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYHA95IP2Z8jtm5D02jpv7roa+6fthr0pq9N znkMhg4hPMbLGpL83NhIREtl/jgqUCbdFcT5ugoiy6WXzg0Z+2NI+x4jc/FDrXmf kRlBCUPkyySpv0MVv0AhLXfKgpPqDWgUTmk4kPA6WSv6xbzrAy0u9Jwd9Bbru7a9 Xf2lqsGUvUryO8aYOO0m4J63E63L9myjjlwkxEFsS2R62rTp6GxLYx2qdnY9KteX OLCADPaCTsOjg52bQNO4wrNHN2cM04DyVTVqz0NGrm2pQW9fCZM8c4zA0yp9wWj3 1fZiX5XLJAzy5Ze+7gnQqFaP46hsSDlNtoGQd/bdxaHS+N71qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs8NmKKWt9WE4YsGawDetM2KrzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Y5NWUxZDUtZGNmOS0z MzQzLTg0OWUtNTYwMTMxN2FhOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr44MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZUUCdLn93MRjfHAgcFKXy9eiGdMxQolhouxV9uO2dqoBUS12m0uHU0 yaRQ4n8Ox/sk8UpMZ1ceblY0vBoF61ar4bP/ZEtq5+RSxB8DLz5GcOjxJ4ZRNN9K 4OBA4YGMCGTEt5v6z+gUIzLaLMqBUCWLA77wBS68JC/a8mr0hBwaskwjcNN5H1QP RU/YfoJj4rK/ZQBBeOilER7Yo777+xPByQ9mV2Cih3IDf8XjB7f90evzK2ys+aTv gaa2Q49zmmhVtqlXQ7LdCSZuXrcJBIaDHI+ZsSEE+iD0lJvZbaZRDREz05A6EGM0 0xFhLsTZn5SW/+1xFG5Y7jnZ5MIe3Kc= -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:42 2025 by rpki-client