$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2121d867-2cf3-31c2-b58a-3a3b18de980c.roa File: 2121d867-2cf3-31c2-b58a-3a3b18de980c.roa (raw, json) Hash identifier: YXgd/2wp6u4gIhb30mp6ZjefaKlkS/Wzr7mIa8NMBqg= Subject key identifier: 15:47:43:1B:E4:3F:02:FF:72:CD:A3:8B:98:11:C4:FA:AC:B5:3E:FF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797DD29D663DA68C3812000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2121d867-2cf3-31c2-b58a-3a3b18de980c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.135.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:dd:29:d6:63:da:68:c3:81:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f79dc213-addd-41ab-8a91-679df5764ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:75:35:97:13:e8:bb:5e:12:38:96:ab:bb: 07:84:5c:9a:39:a4:a1:81:54:f6:e3:7e:38:79:38: 64:c8:6c:40:15:15:f1:4c:4f:db:75:15:ac:cc:bf: c7:52:16:c8:a9:25:d9:c9:b0:5b:2f:01:c8:d0:6c: 69:c3:ef:86:5a:e4:07:3e:13:e4:0b:20:16:8c:4c: 9e:2b:ca:3e:57:5a:3b:08:d9:0a:9b:b7:00:6f:c8: ff:81:99:4a:07:f8:53:0e:05:6f:0e:62:ad:7a:f5: 5b:21:71:d9:24:18:59:1d:3d:62:3f:b8:9f:fe:81: 4c:b8:17:df:8c:aa:b4:16:f0:ec:53:11:94:25:1c: 25:01:a0:bf:63:c0:a5:ae:1f:62:df:fc:fe:1f:27: f8:6b:44:de:60:48:4e:95:02:c8:ec:b2:2a:42:df: ed:51:aa:ee:5b:8e:50:33:95:19:0e:18:ea:05:22: 16:e9:18:08:01:ae:91:5d:25:39:0f:74:cb:64:70: 51:02:db:67:63:10:c7:32:f6:e6:eb:89:ff:6d:98: 2e:0f:87:9c:fd:76:bc:b1:ee:3a:42:10:0a:26:3b: e8:94:36:6c:07:c4:25:40:69:c7:25:8f:22:07:32: e2:04:62:91:5a:44:a1:58:64:28:c8:00:72:11:cc: 99:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:47:43:1B:E4:3F:02:FF:72:CD:A3:8B:98:11:C4:FA:AC:B5:3E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2121d867-2cf3-31c2-b58a-3a3b18de980c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:41:93:90:72:a0:61:49:80:69:8b:ff:94:d4:9f:d5:dd:e5: b6:64:8e:36:bb:a7:77:ff:fa:58:71:88:a7:e6:0f:e1:04:ff: 61:3c:af:93:c9:4f:7d:cf:e8:c6:6b:88:25:de:8c:e6:fc:ed: 3e:2e:b0:d8:d8:0b:13:59:99:6e:ff:e9:b2:34:a2:b7:1e:81: 92:2f:a4:35:6a:b4:1c:ff:f0:c5:ce:e0:5c:b6:bb:4e:67:82: 09:49:2e:8d:0d:24:c2:78:a0:02:9d:6a:1c:38:8c:83:01:d1: 08:64:2b:ca:4f:84:31:2c:5f:94:19:48:f4:a1:1f:32:c2:21: bb:37:a2:ce:ea:25:1e:da:1d:d1:4b:59:53:ec:9b:d6:25:16: b5:b7:6b:a8:9a:5f:86:65:83:c2:6d:b9:4e:68:b4:1d:b8:58: f5:20:9b:ef:62:49:85:94:4d:f6:6a:92:8f:f5:99:4b:36:5d: ed:bc:20:40:af:cc:c6:4c:75:97:f8:03:01:02:df:55:df:7f: 7a:e0:ee:ca:e2:8b:65:17:85:59:34:28:47:55:e8:b7:c7:b8: 06:2c:61:59:1b:8e:75:da:09:87:ab:62:10:fc:a4:aa:c3:98: 3f:33:92:df:3a:11:73:3b:94:2b:02:24:e2:9f:e5:f5:c1:dd: b3:3a:9b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl90p1mPaaMOBIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Zjc5ZGMyMTMtYWRkZC00MWFiLThhOTEtNjc5ZGY1NzY0YmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTd1NZcT6LteEjiWq7sHhFyaOaShgVT24344 eThkyGxAFRXxTE/bdRWszL/HUhbIqSXZybBbLwHI0Gxpw++GWuQHPhPkCyAWjEye K8o+V1o7CNkKm7cAb8j/gZlKB/hTDgVvDmKtevVbIXHZJBhZHT1iP7if/oFMuBff jKq0FvDsUxGUJRwlAaC/Y8Clrh9i3/z+Hyf4a0TeYEhOlQLI7LIqQt/tUaruW45Q M5UZDhjqBSIW6RgIAa6RXSU5D3TLZHBRAttnYxDHMvbm64n/bZguD4ec/Xa8se46 QhAKJjvolDZsB8QlQGnHJY8iBzLiBGKRWkShWGQoyAByEcyZRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVHQxvkPwL/cs2ji5gRxPqstT7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjEyMWQ4NjctMmNmMy0z MWMyLWI1OGEtM2EzYjE4ZGU5ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIocAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdBk5ByoGFJgGmL/5TUn9Xd5bZkjja7p3f/+lhxiKfmD+EE/2E8r5PJ T33P6MZriCXejOb87T4usNjYCxNZmW7/6bI0orcegZIvpDVqtBz/8MXO4Fy2u05n gglJLo0NJMJ4oAKdahw4jIMB0QhkK8pPhDEsX5QZSPShHzLCIbs3os7qJR7aHdFL WVPsm9YlFrW3a6iaX4Zlg8JtuU5otB24WPUgm+9iSYWUTfZqko/1mUs2Xe28IECv zMZMdZf4AwEC31Xff3rg7srii2UXhVk0KEdV6LfHuAYsYVkbjnXaCYerYhD8pKrD mD8zkt86EXM7lCsCJOKf5fXB3bM6myo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:54 2025 by rpki-client