$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888661dc-967b-3e38-886f-5fadc6157a2b.roa File: 888661dc-967b-3e38-886f-5fadc6157a2b.roa (raw, json) Hash identifier: dm50I5Oaw6/GVN0hm7q11P8rsBlloelNDeWJLCQBHGM= Subject key identifier: B2:A6:35:86:40:4C:1B:A8:CB:D7:90:74:99:5F:14:B6:8C:F7:7D:F3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AA590E7F0688DC96D5B50F100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888661dc-967b-3e38-886f-5fadc6157a2b.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 19527 IP address blocks: 34.190.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:e7:f0:68:8d:c9:6d:5b:50:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=c7990ba7-44d7-400f-b8b3-fc4aac7eab16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:a0:72:06:2e:c0:92:b2:89:7e:f1:c1:40: fc:c5:4f:30:65:03:70:27:b1:86:67:2b:9f:a9:16: 57:eb:3b:fb:d9:66:48:1a:33:b3:bb:48:1e:f2:cc: 33:df:44:5f:fc:56:5a:af:54:17:de:09:e9:e5:dc: e3:74:1c:26:17:81:ca:f4:cd:b3:2d:04:aa:5f:a5: 84:9d:e5:22:79:92:28:6e:f1:22:f1:a2:1d:2b:2c: c5:4d:61:59:5e:79:64:07:d7:8a:7a:78:26:00:d6: 39:80:5a:70:ef:c5:00:29:0b:d6:26:e2:0f:c1:00: b7:1c:93:a6:ac:d3:13:e4:85:47:9e:ff:95:62:bc: 7d:f4:61:b0:fd:e5:50:53:c8:8b:87:0a:26:aa:b5: 2a:4e:1b:6d:fb:ea:0f:0c:6f:bf:6f:e3:8b:4a:a8: 8c:d3:1f:40:2b:f0:28:fb:16:3c:02:67:2d:48:a4: 84:e6:02:be:bf:46:e9:f6:a3:65:36:c0:f6:93:14: 5a:3f:7f:b7:b4:70:bf:ec:80:08:72:aa:95:6a:cd: 0f:c4:de:f5:38:bc:1b:34:53:e6:67:33:f7:83:6e: 9c:fb:30:d8:f1:c2:9a:b1:a4:e2:dd:6e:37:59:4c: b1:54:b7:01:a7:f5:a6:01:7d:72:57:f6:87:32:47: a2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A6:35:86:40:4C:1B:A8:CB:D7:90:74:99:5F:14:B6:8C:F7:7D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888661dc-967b-3e38-886f-5fadc6157a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a3:42:98:47:f5:24:45:da:6a:e2:2a:32:08:b8:94:e5:c9: 95:82:a6:1b:b2:96:d6:ed:bc:2b:7b:ff:eb:3d:4e:fe:69:a4: 83:11:16:10:be:27:44:60:4d:4c:49:d4:39:07:8e:71:0c:cd: 3d:01:50:36:dd:4b:1e:dd:b3:31:04:e0:11:35:a3:49:78:0a: 9d:c5:f9:72:b0:eb:88:c7:af:21:21:72:c2:f5:ea:ba:5b:dd: 61:8c:8d:e0:29:99:a7:3f:e1:3e:64:d8:39:96:44:38:83:3e: 31:b7:85:16:89:06:58:89:db:e0:25:58:69:9c:16:1a:ff:b8: 19:39:62:34:55:04:7d:e3:5e:bf:b0:6a:4b:19:58:78:3f:3c: f9:56:4e:1d:01:16:4a:75:78:d8:16:ff:7f:8a:b7:37:4d:fc: 07:3e:91:66:f3:7f:2e:39:c2:ae:9a:93:1b:b4:81:79:ea:99: 71:54:9b:a2:f5:3e:45:34:16:1e:1e:c6:85:d4:0a:41:26:d1: f4:7f:c6:d2:57:36:a8:76:d9:e7:76:6c:7a:c8:ec:46:6a:31: 14:5c:59:9e:cf:71:5c:aa:be:48:f7:b1:6b:a3:70:bf:ea:b8: 0b:5f:60:50:16:62:7d:9a:fd:44:5b:2c:69:6f:67:93:74:a6: 39:c5:17:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkOfwaI3JbVtQ8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk Yzc5OTBiYTctNDRkNy00MDBmLWI4YjMtZmM0YWFjN2VhYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/qgcgYuwJKyiX7xwUD8xU8wZQNwJ7GGZyuf qRZX6zv72WZIGjOzu0ge8swz30Rf/FZar1QX3gnp5dzjdBwmF4HK9M2zLQSqX6WE neUieZIobvEi8aIdKyzFTWFZXnlkB9eKengmANY5gFpw78UAKQvWJuIPwQC3HJOm rNMT5IVHnv+VYrx99GGw/eVQU8iLhwomqrUqThtt++oPDG+/b+OLSqiM0x9AK/Ao +xY8AmctSKSE5gK+v0bp9qNlNsD2kxRaP3+3tHC/7IAIcqqVas0PxN71OLwbNFPm ZzP3g26c+zDY8cKasaTi3W43WUyxVLcBp/WmAX1yV/aHMkeijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKmNYZATBuoy9eQdJlfFLaM933zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODg4NjYxZGMtOTY3Yi0z ZTM4LTg4NmYtNWZhZGM2MTU3YTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABajQphH9SRF2mriKjIIuJTlyZWCphuyltbtvCt7/+s9Tv5ppIMRFhC+ J0RgTUxJ1DkHjnEMzT0BUDbdSx7dszEE4BE1o0l4Cp3F+XKw64jHryEhcsL16rpb 3WGMjeApmac/4T5k2DmWRDiDPjG3hRaJBliJ2+AlWGmcFhr/uBk5YjRVBH3jXr+w aksZWHg/PPlWTh0BFkp1eNgW/3+KtzdN/Ac+kWbzfy45wq6akxu0gXnqmXFUm6L1 PkU0Fh4exoXUCkEm0fR/xtJXNqh22ed2bHrI7EZqMRRcWZ7PcVyqvkj3sWujcL/q uAtfYFAWYn2a/URbLGlvZ5N0pjnFF5E= -----END CERTIFICATE-----Generated at Wed Aug 6 11:02:00 2025 by rpki-client