$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08d42530-3ae4-3105-b155-8c79b76dd782.roa File: 08d42530-3ae4-3105-b155-8c79b76dd782.roa (raw, json) Hash identifier: 3urVm5wPT6lX5pJK3Ds+EF14JxRGD6GxDq5QDPFAGMA= Subject key identifier: BF:DE:8C:A2:8A:B7:19:7C:7F:C1:A7:E5:86:A1:AA:C1:F3:2B:CD:73 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B636750F65C292C48B3642B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08d42530-3ae4-3105-b155-8c79b76dd782.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 19527 IP address blocks: 34.3.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:50:f6:5c:29:2c:48:b3:64:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=b22dce3e-a517-40b1-a0b6-ce3d629f19fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:b4:9e:7f:44:e2:ac:6d:a3:9b:64:32:5a: 07:1d:19:32:d7:7e:e9:82:c6:e4:d5:57:70:ad:4b: 7a:0a:96:96:43:20:1c:fc:3d:72:53:a6:93:aa:72: 43:bb:42:57:5d:26:fd:bd:ba:dc:c8:2d:4f:e7:20: 16:8c:da:de:a5:cf:3a:13:23:cc:c1:40:fd:12:1b: 73:dc:dd:75:8d:03:cf:c5:45:33:ff:83:27:ad:78: c3:a8:ba:21:df:70:63:0a:2c:06:63:ab:82:b5:91: 6a:dd:9e:a7:93:38:23:66:ed:19:4a:a5:3b:3e:00: f1:f9:2b:92:36:71:b0:86:cb:18:8e:e7:e9:be:9d: 34:ac:d0:19:0f:f8:26:09:60:19:fb:fd:5e:bb:21: b6:3a:07:77:a8:bb:21:e0:69:e4:75:94:9d:60:87: 31:67:fd:10:bc:b8:9e:b5:f7:c3:77:17:95:79:5d: dc:fb:2a:f0:25:3b:85:1a:49:6a:c5:3a:a3:25:ee: 75:4d:53:1f:00:f5:43:e9:11:23:c0:b6:fc:84:47: 90:79:c0:3a:16:ed:73:b8:3c:91:12:a0:67:eb:3b: 85:7a:1a:f1:5b:7f:c2:7f:5d:47:f6:cb:57:2f:f6: 12:40:33:39:50:c8:ef:63:c6:71:3c:2b:a9:c8:6b: 73:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DE:8C:A2:8A:B7:19:7C:7F:C1:A7:E5:86:A1:AA:C1:F3:2B:CD:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08d42530-3ae4-3105-b155-8c79b76dd782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:70:fb:45:23:67:2c:8e:e4:79:1b:33:46:50:d6:ed:d3:c2: f2:44:c8:62:ba:66:77:e5:3a:61:9b:5e:c8:bd:d0:82:c0:79: 3d:ae:dc:2b:65:e6:72:0c:fe:3c:0b:f8:12:2c:28:8e:33:64: fc:33:d8:ad:ee:5e:0f:1e:0a:b6:0e:fb:37:91:6e:34:43:9e: 7c:d2:b7:55:43:f6:8e:6f:b3:1b:97:47:32:c4:43:43:a3:27: ea:e0:bc:fe:64:24:af:02:e8:5a:bd:4e:aa:07:85:8c:83:6e: fc:88:f3:b4:43:42:3b:e5:e9:7c:4f:b8:c8:ec:42:e6:5a:c0: f3:ac:aa:f1:99:b8:63:07:d2:6f:c3:c0:52:42:b0:a7:15:a0: 9d:69:57:37:e5:06:e0:66:76:09:25:d0:36:d6:71:c2:31:58: 6a:63:58:66:ce:1b:54:32:16:68:60:c4:3b:48:80:20:1d:ed: 9a:5d:b3:fd:4a:de:2f:e0:ba:80:d1:11:3a:b4:d6:25:51:17: 9b:3e:22:4c:bc:4c:72:2f:f2:4e:3a:f6:3f:01:14:59:a9:f6: 6c:f4:93:56:a7:68:91:7f:dd:5a:44:36:e0:05:26:76:a0:12: db:c3:b4:ba:09:e7:33:06:d2:74:8d:40:e8:a0:51:60:94:bf: 36:e1:7f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ1D2XCksSLNkK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YjIyZGNlM2UtYTUxNy00MGIxLWEwYjYtY2UzZDYyOWYxOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBS0nn9E4qxto5tkMloHHRky137pgsbk1Vdw rUt6CpaWQyAc/D1yU6aTqnJDu0JXXSb9vbrcyC1P5yAWjNrepc86EyPMwUD9Ehtz 3N11jQPPxUUz/4MnrXjDqLoh33BjCiwGY6uCtZFq3Z6nkzgjZu0ZSqU7PgDx+SuS NnGwhssYjufpvp00rNAZD/gmCWAZ+/1euyG2Ogd3qLsh4GnkdZSdYIcxZ/0QvLie tffDdxeVeV3c+yrwJTuFGklqxTqjJe51TVMfAPVD6REjwLb8hEeQecA6Fu1zuDyR EqBn6zuFehrxW3/Cf11H9stXL/YSQDM5UMjvY8ZxPCupyGtzhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/ejKKKtxl8f8Gn5YahqsHzK81zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDhkNDI1MzAtM2FlNC0z MTA1LWIxNTUtOGM3OWI3NmRkNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtw+0UjZyyO5HkbM0ZQ1u3TwvJEyGK6ZnflOmGbXsi90ILAeT2u3Ctl 5nIM/jwL+BIsKI4zZPwz2K3uXg8eCrYO+zeRbjRDnnzSt1VD9o5vsxuXRzLEQ0Oj J+rgvP5kJK8C6Fq9TqoHhYyDbvyI87RDQjvl6XxPuMjsQuZawPOsqvGZuGMH0m/D wFJCsKcVoJ1pVzflBuBmdgkl0DbWccIxWGpjWGbOG1QyFmhgxDtIgCAd7Zpds/1K 3i/guoDRETq01iVRF5s+Iky8THIv8k469j8BFFmp9mz0k1anaJF/3VpENuAFJnag EtvDtLoJ5zMG0nSNQOigUWCUvzbhf5I= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:02 2025 by rpki-client