$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/120874a6-a1d8-3595-b5fb-3e62cedb8247.roa File: 120874a6-a1d8-3595-b5fb-3e62cedb8247.roa (raw, json) Hash identifier: yYEFVSpwxkA12yS/DXwjFnXDyJq5UW5zdbTVjMM1cNA= Subject key identifier: 9C:BA:04:18:39:0C:5B:1D:53:8B:8A:DD:89:3F:E1:11:33:63:77:3E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67974B2A27EDACBC6DE4BC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/120874a6-a1d8-3595-b5fb-3e62cedb8247.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.161.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:4b:2a:27:ed:ac:bc:6d:e4:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a045d20a-2958-4431-9458-fcfaf2f34912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b9:a5:87:71:f9:59:f5:3c:81:df:ef:c3:b5: 1f:a9:d0:7b:69:c3:9c:3b:f1:d3:d8:f4:51:bd:f6: 87:c7:36:69:94:50:7e:85:73:63:0d:e2:b3:bc:3b: eb:43:a3:ec:40:8f:61:5c:87:15:2d:00:bf:a3:1d: 2c:f5:a7:a1:d1:2a:2f:df:a0:2b:da:f4:c1:d8:a0: db:87:03:8c:f6:31:6a:44:5c:5e:05:33:83:3b:a7: 3a:09:9c:d3:11:61:9b:8c:84:d4:51:e5:d8:f7:3d: ad:49:30:67:89:19:4d:a3:34:b1:1e:f4:00:ed:04: e9:59:43:05:1a:2c:40:df:5e:1f:89:8f:1b:b3:98: 0e:96:45:d5:f4:3e:05:c6:ee:15:f1:94:fd:7a:23: 8c:fd:87:9e:32:8e:99:13:fa:01:ad:27:8d:9c:f7: 68:01:d0:07:04:10:3a:a1:f2:ed:c3:3f:15:d4:f5: d2:08:77:17:bf:69:b2:82:b2:0b:bd:f1:a8:f4:c5: 66:ce:8c:46:41:83:58:15:62:7d:a3:48:f6:a7:42: da:27:af:a8:26:1a:14:50:52:a9:ff:07:b0:3f:fd: 30:7d:ca:39:df:11:17:ab:81:ae:8d:52:e9:31:d0: f0:ad:d5:e7:f6:6b:85:33:67:6f:47:63:24:1f:fd: 75:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BA:04:18:39:0C:5B:1D:53:8B:8A:DD:89:3F:E1:11:33:63:77:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/120874a6-a1d8-3595-b5fb-3e62cedb8247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.161.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:de:e1:de:cc:ab:c7:6b:a6:95:2a:b2:a2:e9:2c:f7:e8:d3: 8c:fc:18:50:e0:af:a2:3b:f6:63:c2:4d:52:77:3c:43:7b:c6: f6:ed:8f:08:69:d0:3e:7e:b7:47:c2:6e:dd:74:f5:3e:78:d9: f1:7b:b3:4a:aa:4e:3d:18:3f:87:65:3f:58:97:5a:c8:12:dd: 75:e9:db:4a:11:bd:48:d9:d9:9d:f9:ad:bc:33:6f:36:44:a5: b2:65:18:61:75:ce:35:dc:bb:b9:97:f8:37:8c:37:72:02:e7: 53:5d:6f:97:5d:8e:09:a3:57:f2:a9:7c:8b:46:ca:1c:35:28: a4:a8:90:e6:f6:76:37:d0:eb:cc:c3:92:ec:96:16:bd:f0:b1: 12:9f:45:a7:4a:e3:83:fb:1c:67:72:83:17:f4:67:63:fa:16: d1:b7:13:fa:8a:05:3d:99:24:54:80:86:b3:f8:6a:89:6e:c9: 04:0e:b8:5f:22:16:23:fb:04:6e:0e:08:0c:81:18:88:c4:42: 00:35:c5:42:a9:6f:59:ec:02:cb:52:82:6f:d9:f3:c1:90:b5: 9b:77:9b:f8:ef:d2:55:77:72:18:55:1b:39:a2:4f:42:a4:a5: 36:93:98:af:d2:53:a4:b6:d6:a3:e6:ab:f5:9a:2d:b5:d7:78: 8a:c8:fb:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0sqJ+2svG3kvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTA0NWQyMGEtMjk1OC00NDMxLTk0NTgtZmNmYWYyZjM0OTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7mlh3H5WfU8gd/vw7UfqdB7acOcO/HT2PRR vfaHxzZplFB+hXNjDeKzvDvrQ6PsQI9hXIcVLQC/ox0s9aeh0Sov36Ar2vTB2KDb hwOM9jFqRFxeBTODO6c6CZzTEWGbjITUUeXY9z2tSTBniRlNozSxHvQA7QTpWUMF GixA314fiY8bs5gOlkXV9D4Fxu4V8ZT9eiOM/YeeMo6ZE/oBrSeNnPdoAdAHBBA6 ofLtwz8V1PXSCHcXv2mygrILvfGo9MVmzoxGQYNYFWJ9o0j2p0LaJ6+oJhoUUFKp /wewP/0wfco53xEXq4GujVLpMdDwrdXn9muFM2dvR2MkH/119wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJy6BBg5DFsdU4uK3Yk/4REzY3c+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTIwODc0YTYtYTFkOC0z NTk1LWI1ZmItM2U2MmNlZGI4MjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbe4d7Mq8drppUqsqLpLPfo04z8GFDgr6I79mPCTVJ3PEN7xvbtjwhp 0D5+t0fCbt109T542fF7s0qqTj0YP4dlP1iXWsgS3XXp20oRvUjZ2Z35rbwzbzZE pbJlGGF1zjXcu7mX+DeMN3IC51Ndb5ddjgmjV/KpfItGyhw1KKSokOb2djfQ68zD kuyWFr3wsRKfRadK44P7HGdygxf0Z2P6FtG3E/qKBT2ZJFSAhrP4aoluyQQOuF8i FiP7BG4OCAyBGIjEQgA1xUKpb1nsAstSgm/Z88GQtZt3m/jv0lV3chhVGzmiT0Kk pTaTmK/SU6S21qPmq/WaLbXXeIrI+zk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:16 2025 by rpki-client