$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa File: 291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa (raw, json) Hash identifier: HgqrLvmbYcxhRsNFeSk4IahMypmZGYr3dvCYaUBRFpo= Subject key identifier: 15:9A:CD:2B:98:4C:AA:33:E4:FB:E8:F7:21:48:04:AD:16:22:D1:B8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67974E76BB72EAF3B203BE40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.23.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:4e:76:bb:72:ea:f3:b2:03:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=6af7cebe-be40-4948-a44c-a7f531e20bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2b:89:0a:02:c3:be:da:8d:a5:5b:24:e4:cc: 64:66:8b:93:ba:c8:c5:66:76:33:1d:9a:dc:af:59: 2c:e1:28:19:b2:d3:70:bf:d8:09:69:31:83:f4:de: 7c:08:d1:fb:5c:57:c8:2b:c9:11:05:b7:58:84:16: f9:25:ac:28:a3:47:22:2a:a1:13:fb:b0:65:c3:98: a0:4a:cc:38:ba:ff:ba:f6:ae:9a:a5:36:a8:e3:b7: f0:b1:ab:66:11:40:6f:6e:78:65:74:57:ec:0c:22: 3d:a8:f6:33:6e:b2:a3:8f:84:38:9c:c7:76:b3:1d: cf:71:e4:d7:40:d8:bc:2b:5d:6e:bc:97:26:06:48: ff:9a:ca:3a:f2:6c:ae:38:cf:da:78:48:11:b6:15: c6:8e:22:74:84:48:08:3a:1a:a7:27:3a:4b:26:79: f2:d1:c5:11:59:e5:0c:38:c5:28:28:55:d9:4b:3c: 5d:3b:f2:40:35:c5:f5:1f:65:4a:40:5c:ff:84:69: 82:b4:e2:53:30:b5:58:bd:35:f2:2f:60:3d:01:d0: 63:6a:da:8b:fe:88:92:18:e1:77:be:29:29:f7:9a: 9f:65:e3:ed:db:71:59:8a:e9:cf:9c:dd:dc:c4:9e: 54:65:4b:aa:2d:ac:4b:72:fb:13:fd:34:ae:cf:f3: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9A:CD:2B:98:4C:AA:33:E4:FB:E8:F7:21:48:04:AD:16:22:D1:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b3:7d:ba:10:9a:76:86:f1:24:d4:2b:88:3e:0c:92:03:ef: 1f:4c:57:84:e0:01:57:3a:33:42:c2:8e:54:32:ea:b2:33:72: a0:41:0f:1f:91:0d:76:63:25:63:80:5f:dd:22:c2:5b:4a:5b: ff:ed:12:f6:7c:d7:89:7d:e4:44:03:45:8e:d1:5c:d6:0d:8d: 78:b7:f5:34:85:aa:db:41:6a:13:db:d5:47:ea:c0:00:54:cc: 41:1e:14:d1:ee:5b:d1:6c:52:56:49:ff:f1:9c:8c:d4:16:eb: 1c:7d:00:27:99:74:56:75:61:86:6e:15:b1:ba:b7:10:37:8d: bb:f5:de:9e:74:fd:21:77:ca:6e:6a:15:da:3e:62:4b:fa:d2: ab:32:f3:cc:fc:3c:1b:ad:c0:13:5a:83:ef:7f:a5:27:d4:c4: 73:05:c4:93:1b:5e:16:41:04:b5:bd:16:6e:fc:9e:46:a4:40: 85:c1:31:99:1e:98:02:46:b5:76:bb:c2:b0:9e:7c:12:af:d0: 0c:0e:08:c1:b9:cb:f4:9b:0e:85:05:01:83:56:a2:c7:5f:89: 90:55:3d:cd:f9:09:d2:a1:49:12:fe:a9:1c:65:29:84:31:fc: 22:8f:b5:6b:85:2f:a3:06:66:f1:81:ec:0a:20:13:ed:a2:a6: 89:5d:89:66 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtnl052u3Lq87IDvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NmFmN2NlYmUtYmU0MC00OTQ4LWE0NGMtYTdmNTMxZTIwYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiuJCgLDvtqNpVsk5MxkZouTusjFZnYzHZrc r1ks4SgZstNwv9gJaTGD9N58CNH7XFfIK8kRBbdYhBb5Jawoo0ciKqET+7Blw5ig Ssw4uv+69q6apTao47fwsatmEUBvbnhldFfsDCI9qPYzbrKjj4Q4nMd2sx3PceTX QNi8K11uvJcmBkj/mso68myuOM/aeEgRthXGjiJ0hEgIOhqnJzpLJnny0cURWeUM OMUoKFXZSzxdO/JANcX1H2VKQFz/hGmCtOJTMLVYvTXyL2A9AdBjatqL/oiSGOF3 vikp95qfZePt23FZiunPnN3cxJ5UZUuqLaxLcvsT/TSuz/PlXwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBWazSuYTKoz5Pvo9yFIBK0WItG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjkxZjBjMDctNjU2ZS0z YjJiLWI5YjMtYTc3ZGU3OTA5ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIhcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYLN9uhCadobxJNQriD4MkgPvH0xXhOABVzozQsKOVDLqsjNyoEEPH5EN dmMlY4Bf3SLCW0pb/+0S9nzXiX3kRANFjtFc1g2NeLf1NIWq20FqE9vVR+rAAFTM QR4U0e5b0WxSVkn/8ZyM1BbrHH0AJ5l0VnVhhm4Vsbq3EDeNu/XennT9IXfKbmoV 2j5iS/rSqzLzzPw8G63AE1qD73+lJ9TEcwXEkxteFkEEtb0WbvyeRqRAhcExmR6Y Aka1drvCsJ58Eq/QDA4IwbnL9JsOhQUBg1aix1+JkFU9zfkJ0qFJEv6pHGUphDH8 Io+1a4UvowZm8YHsCiAT7aKmiV2JZg== -----END CERTIFICATE-----Generated at Mon Oct 20 01:59:42 2025 by rpki-client