$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa File: 0f78b3fd-1445-384b-b208-6396a085dcb3.roa (raw, json) Hash identifier: DY4HMVw+JfiH+pOZhPUcCBbK7RXplKtD7qfgREqDrHQ= Subject key identifier: DD:61:A7:23:B5:E3:E2:85:1F:2D:9C:AA:FD:89:EE:B3:CF:20:61:B8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD6542B8980092DF595E60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.108.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:65:42:b8:98:00:92:df:59:5e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=462f517a-513c-4554-bf42-047ef86419be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:26:e5:3d:fa:19:27:19:c4:e3:22:47:41: be:e1:8d:5b:a5:ba:a5:c3:95:e8:01:31:15:26:a4: 1e:45:cd:f0:67:6a:6c:d9:4c:26:fa:31:18:9d:a5: 9e:25:0f:0a:f0:a3:98:18:51:60:16:db:10:87:e4: b9:7e:0d:7a:1b:6f:1f:9f:5c:a3:d6:00:50:a2:1b: 44:b1:48:00:20:44:04:89:ea:75:f5:60:d0:b3:0c: 7f:8c:b8:d8:39:ed:6a:e3:ab:96:1c:c8:2e:d1:3a: 94:a7:72:4d:2a:9b:f4:6e:27:97:fc:0f:e1:20:b7: 10:2c:e7:bb:10:1a:0e:fd:45:13:1b:51:e5:3c:57: 4c:0f:f7:80:d5:05:d0:d7:b8:9a:61:38:52:8c:aa: 8d:af:3e:c7:ab:ff:de:8d:ac:e6:07:c6:39:34:9c: e3:0b:9a:45:98:1a:4d:fd:fb:6b:81:ec:5a:5b:dd: 3a:34:5c:aa:41:2e:cb:fb:72:ae:45:42:87:ae:58: ba:4b:55:25:3b:ee:39:46:78:9b:1a:f7:6d:1e:13: 50:c6:d6:84:cf:14:47:44:cc:d5:58:9d:24:8f:91: c5:9b:6b:5c:6c:7a:74:92:9b:90:35:05:18:d0:10: fd:bd:3d:c6:91:e5:da:db:c2:83:20:db:60:5a:8f: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:61:A7:23:B5:E3:E2:85:1F:2D:9C:AA:FD:89:EE:B3:CF:20:61:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e2:d0:e1:f5:7a:49:79:4e:2a:35:ce:e5:98:f2:51:59:11: 9f:78:61:6a:39:75:87:a7:15:df:14:2c:17:f7:37:a2:2f:63: 1f:d5:54:af:c9:ee:b7:77:e2:d1:b9:85:86:e9:cb:b8:6e:b1: bf:50:53:30:05:e0:f9:e8:df:49:d7:98:87:1e:b2:04:e0:cb: 74:24:44:fd:bd:50:1d:67:01:4c:5e:3d:4e:32:71:47:45:12: ed:65:1f:90:21:dd:a5:f9:2b:30:45:ac:47:c8:fd:2d:ee:a3: 85:3a:2b:81:17:f6:6f:60:a1:a9:06:05:a2:c7:0b:8d:c9:f6: fd:ad:9b:aa:85:ba:37:f7:c4:cd:30:c2:8a:7b:0c:f7:e7:14: 15:28:8d:d7:bb:28:55:1d:63:c0:3e:e2:2e:5f:c3:8e:17:c0: 61:af:60:1d:19:ea:92:8f:1d:2b:28:06:17:ad:15:11:c1:c9: b2:8e:bc:56:25:d5:44:cb:04:ad:d9:ce:61:92:15:e7:50:af: 2a:07:bf:e6:37:14:65:bc:04:fd:5e:92:22:42:15:84:11:bd: d3:aa:d5:39:f8:83:78:3f:f8:a7:9d:55:34:51:ed:93:5f:aa: fc:36:75:4f:04:08:fb:37:2a:5a:82:66:32:a2:69:d5:5d:4f: 7f:60:02:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWVCuJgAkt9ZXmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDYyZjUxN2EtNTEzYy00NTU0LWJmNDItMDQ3ZWY4NjQxOWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjygm5T36GScZxOMiR0G+4Y1bpbqlw5XoATEV JqQeRc3wZ2ps2Uwm+jEYnaWeJQ8K8KOYGFFgFtsQh+S5fg16G28fn1yj1gBQohtE sUgAIEQEiep19WDQswx/jLjYOe1q46uWHMgu0TqUp3JNKpv0bieX/A/hILcQLOe7 EBoO/UUTG1HlPFdMD/eA1QXQ17iaYThSjKqNrz7Hq//ejazmB8Y5NJzjC5pFmBpN /ftrgexaW906NFyqQS7L+3KuRUKHrli6S1UlO+45RnibGvdtHhNQxtaEzxRHRMzV WJ0kj5HFm2tcbHp0kpuQNQUY0BD9vT3GkeXa28KDINtgWo9b4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1hpyO14+KFHy2cqv2J7rPPIGG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY3OGIzZmQtMTQ0NS0z ODRiLWIyMDgtNjM5NmEwODVkY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTi0OH1ekl5Tio1zuWY8lFZEZ94YWo5dYenFd8ULBf3N6IvYx/VVK/J 7rd34tG5hYbpy7husb9QUzAF4Pno30nXmIcesgTgy3QkRP29UB1nAUxePU4ycUdF Eu1lH5Ah3aX5KzBFrEfI/S3uo4U6K4EX9m9goakGBaLHC43J9v2tm6qFujf3xM0w wop7DPfnFBUojde7KFUdY8A+4i5fw44XwGGvYB0Z6pKPHSsoBhetFRHBybKOvFYl 1UTLBK3ZzmGSFedQryoHv+Y3FGW8BP1ekiJCFYQRvdOq1Tn4g3g/+KedVTRR7ZNf qvw2dU8ECPs3KlqCZjKiadVdT39gAkE= -----END CERTIFICATE-----Generated at Mon Oct 20 18:46:18 2025 by rpki-client