$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04157f7a-92e8-315c-8836-ebb256f347b3.roa File: 04157f7a-92e8-315c-8836-ebb256f347b3.roa (raw, json) Hash identifier: DI/X6WScsKApj7bh2tpD8KTKvN7jsAdG548pbqadNng= Subject key identifier: 2A:5B:19:7B:D7:24:03:5A:36:A6:9A:E3:0D:A4:CC:B5:5F:50:AC:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679777CC8B4E93C876197000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04157f7a-92e8-315c-8836-ebb256f347b3.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.65.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:77:cc:8b:4e:93:c8:76:19:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=71d2da09-b501-4e74-b7d5-c764f6d7084b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:4b:a8:ef:49:66:65:12:cb:4e:6d:85:66: 5d:64:b2:6a:06:90:e7:dd:24:bd:f9:23:9f:08:fb: 07:c0:63:12:14:ec:35:87:9e:a0:fc:fb:90:86:f5: 30:8f:05:6d:ae:38:c9:c2:cd:21:0c:97:bc:3c:92: 8a:4b:f9:19:4a:ef:01:ad:f5:b5:7c:93:92:7c:5c: 2f:68:19:0a:27:67:c0:d7:59:5a:e6:dc:a5:4a:39: 89:92:1b:38:69:4c:a0:f3:90:7a:e8:00:d8:1b:ac: ca:37:a3:73:0c:ae:b2:2c:a1:3f:29:01:ab:fb:ea: 91:6d:ad:fb:b7:2f:af:6d:8a:3e:9c:d5:01:7c:25: bc:cb:d2:b6:c4:24:ae:da:55:e4:d5:d2:68:ae:3a: 96:98:b7:b8:6b:68:dc:fd:bf:82:8c:dd:c4:4a:6c: 71:8c:ec:fa:1e:f9:2e:26:e5:f7:a6:2c:a3:4d:a8: 57:7f:37:e6:3a:7f:ae:ea:14:a7:4f:8f:a3:73:2a: 16:6b:db:ef:3a:db:71:d0:04:d3:54:59:ab:a1:9c: 88:3c:6e:d9:ac:6e:c7:2d:8b:f8:d7:ac:7f:b2:1f: a1:22:b6:10:1e:46:75:1a:a7:dc:3b:54:58:c2:93: 14:0d:5c:58:e2:2c:40:72:10:c1:7a:f0:ef:a8:39: b5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5B:19:7B:D7:24:03:5A:36:A6:9A:E3:0D:A4:CC:B5:5F:50:AC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04157f7a-92e8-315c-8836-ebb256f347b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c4:4a:e5:7c:66:b4:80:4f:39:69:2a:d5:75:5c:fc:af:51: f8:8d:c0:2a:51:a3:95:29:b8:1e:f3:79:80:cf:69:9b:b7:8b: 14:53:83:66:5b:48:ed:fa:e2:3f:f3:1b:d6:52:f6:e8:bf:7d: d5:c5:04:15:76:ed:7d:f4:ff:6f:2f:26:6d:aa:43:df:37:bb: 83:fe:43:7b:90:a0:97:31:51:94:09:4d:95:bd:c1:0a:4d:50: b3:bb:2c:ab:ad:ef:cf:b4:38:73:7f:47:45:fa:b4:a6:1a:68: 0c:37:9d:30:e8:a1:a9:7d:66:e3:05:99:62:0e:6a:73:e9:a1: d8:1e:96:73:a4:6e:2b:f1:6a:7c:7f:b3:d1:9b:14:f4:42:bf: 27:55:f4:fa:1e:a5:b9:e5:8a:2f:f4:22:2b:7a:1a:7a:cb:8b: a4:00:bd:d5:ff:59:04:5b:e2:cb:13:0f:8c:6b:be:fe:27:52: 43:9b:c6:6d:05:c7:11:51:12:9f:22:e1:5e:51:4b:27:73:c6: 99:08:d0:95:a9:ad:95:f0:32:a2:72:4d:e4:2c:d5:f4:3c:82: 23:49:cb:dd:d3:13:17:ae:26:36:d6:5a:97:b6:81:0f:ec:3f: 07:64:b0:b9:89:50:82:dc:e7:da:82:c6:97:26:54:40:0f:a7: 12:43:a5:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3fMi06TyHYZcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzFkMmRhMDktYjUwMS00ZTc0LWI3ZDUtYzc2NGY2ZDcwODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHBLqO9JZmUSy05thWZdZLJqBpDn3SS9+SOf CPsHwGMSFOw1h56g/PuQhvUwjwVtrjjJws0hDJe8PJKKS/kZSu8BrfW1fJOSfFwv aBkKJ2fA11la5tylSjmJkhs4aUyg85B66ADYG6zKN6NzDK6yLKE/KQGr++qRba37 ty+vbYo+nNUBfCW8y9K2xCSu2lXk1dJorjqWmLe4a2jc/b+CjN3ESmxxjOz6Hvku JuX3piyjTahXfzfmOn+u6hSnT4+jcyoWa9vvOttx0ATTVFmroZyIPG7ZrG7HLYv4 16x/sh+hIrYQHkZ1GqfcO1RYwpMUDVxY4ixAchDBevDvqDm1eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpbGXvXJANaNqaa4w2kzLVfUKywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDQxNTdmN2EtOTJlOC0z MTVjLTg4MzYtZWJiMjU2ZjM0N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7ESuV8ZrSATzlpKtV1XPyvUfiNwCpRo5UpuB7zeYDPaZu3ixRTg2Zb SO364j/zG9ZS9ui/fdXFBBV27X30/28vJm2qQ983u4P+Q3uQoJcxUZQJTZW9wQpN ULO7LKut78+0OHN/R0X6tKYaaAw3nTDooal9ZuMFmWIOanPpodgelnOkbivxanx/ s9GbFPRCvydV9Poepbnlii/0Iit6GnrLi6QAvdX/WQRb4ssTD4xrvv4nUkObxm0F xxFREp8i4V5RSydzxpkI0JWprZXwMqJyTeQs1fQ8giNJy93TExeuJjbWWpe2gQ/s PwdksLmJUILc59qCxpcmVEAPpxJDpcA= -----END CERTIFICATE-----Generated at Mon Oct 20 05:20:45 2025 by rpki-client