$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35a3f1a8-9d5a-35e2-a70d-a264f5cf0332.roa File: 35a3f1a8-9d5a-35e2-a70d-a264f5cf0332.roa (raw, json) Hash identifier: xdZL0f2SONlYDFPXyg4GXYzGWsnMqWubvPTI2aaBwLY= Subject key identifier: A6:F8:44:58:33:27:32:1B:80:3F:29:0F:75:3B:79:B1:88:C2:FC:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B63673969A9F61D754D29CE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35a3f1a8-9d5a-35e2-a70d-a264f5cf0332.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 396982 IP address blocks: 34.157.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:39:69:a9:f6:1d:75:4d:29:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=d1e56a4e-ddd5-4966-835d-9a60c94bfd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:62:f8:b8:60:3f:83:9c:fe:dd:a5:8c:18: 3b:3e:99:87:e1:af:95:58:4c:6c:d8:e2:94:64:2b: 8a:11:7f:85:b7:1a:7c:ba:e4:1c:94:8f:26:41:8a: 06:e8:f5:9f:c9:45:65:d7:e5:aa:0a:9a:4f:6f:72: 5b:2a:57:07:69:c5:48:dc:91:6c:1d:24:1b:6b:0b: 74:26:2b:cc:20:c5:93:33:40:78:df:ef:f2:e1:42: 84:46:a4:ff:bb:c8:ed:10:33:75:29:6f:ce:b0:c6: 23:7d:93:ab:26:85:fb:93:e0:1d:78:f2:1c:ae:00: 38:00:6b:2a:69:eb:01:4d:b9:53:c3:10:ab:fc:de: 9e:5a:5f:43:3e:96:49:0f:52:19:48:65:ec:4c:4e: a1:70:ec:f4:3a:54:35:4a:e0:1f:34:64:b9:1e:4b: f0:81:d2:ff:d2:99:ad:4a:db:8e:78:88:fb:ef:4d: ee:d2:85:c3:8e:78:3b:1b:42:f5:6a:4d:44:cb:a0: 5e:d4:60:43:0d:73:a8:71:ec:77:12:32:01:18:c2: ff:80:b1:86:e6:f7:3a:14:c0:0f:03:4c:1e:89:2a: e4:aa:22:f7:7e:77:27:c0:e4:c9:19:be:76:23:60: 5c:77:36:77:ba:11:87:ad:27:7a:c2:19:35:fb:ef: b9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F8:44:58:33:27:32:1B:80:3F:29:0F:75:3B:79:B1:88:C2:FC:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35a3f1a8-9d5a-35e2-a70d-a264f5cf0332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.157.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:d1:b8:1b:02:b0:9d:06:ac:b0:ea:2c:f9:eb:17:81:0f:9f: c1:5f:c9:81:78:6d:ee:75:e7:78:bb:25:1d:4c:d5:49:0a:c9: cb:c7:88:e1:ca:b5:4a:b8:a8:87:fa:a6:98:f6:18:5a:0c:79: 14:82:ad:0c:d3:48:26:e2:56:a9:94:99:4a:91:3e:d1:65:13: 93:1e:27:22:e0:a1:2d:d1:fe:c0:b7:a6:26:75:08:d9:33:46: 2d:73:e9:be:f9:82:a2:fd:3c:9b:8b:f8:7f:3c:ba:75:b4:73: e1:2e:68:56:c4:f6:ec:f0:98:66:de:70:1e:7e:f7:0d:40:89: a6:61:9a:0b:0b:26:68:fb:2d:f7:3c:73:27:b8:fd:23:07:2f: 3a:f2:cc:bf:93:e4:25:aa:4c:10:d0:67:aa:c6:92:d8:4f:fb: 37:9b:a6:96:20:d7:2c:07:d9:1f:b9:3e:4e:4e:7d:49:8f:0d: 8d:c8:e7:21:c8:77:6c:c1:d8:5f:9c:3e:cd:a9:f4:ea:eb:fa: 05:da:1f:84:a0:99:51:91:de:a0:a1:ec:1c:5d:a3:33:a5:dc: e4:23:de:36:cb:50:9d:5c:1a:f2:b0:08:d1:f6:0c:3d:c7:57: 73:9e:0b:d6:4c:c0:c8:ce:bf:c1:18:60:68:5f:0b:eb:dc:5e: 51:2e:f4:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzlpqfYddU0pzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZDFlNTZhNGUtZGRkNS00OTY2LTgzNWQtOWE2MGM5NGJmZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykJi+LhgP4Oc/t2ljBg7PpmH4a+VWExs2OKU ZCuKEX+Ftxp8uuQclI8mQYoG6PWfyUVl1+WqCppPb3JbKlcHacVI3JFsHSQbawt0 JivMIMWTM0B43+/y4UKERqT/u8jtEDN1KW/OsMYjfZOrJoX7k+AdePIcrgA4AGsq aesBTblTwxCr/N6eWl9DPpZJD1IZSGXsTE6hcOz0OlQ1SuAfNGS5HkvwgdL/0pmt StuOeIj7703u0oXDjng7G0L1ak1Ey6Be1GBDDXOocex3EjIBGML/gLGG5vc6FMAP A0weiSrkqiL3fncnwOTJGb52I2BcdzZ3uhGHrSd6whk1+++50QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb4RFgzJzIbgD8pD3U7ebGIwvwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzVhM2YxYTgtOWQ1YS0z NWUyLWE3MGQtYTI2NGY1Y2YwMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIp2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7RuBsCsJ0GrLDqLPnrF4EPn8FfyYF4be5153i7JR1M1UkKycvHiOHK tUq4qIf6ppj2GFoMeRSCrQzTSCbiVqmUmUqRPtFlE5MeJyLgoS3R/sC3piZ1CNkz Ri1z6b75gqL9PJuL+H88unW0c+EuaFbE9uzwmGbecB5+9w1AiaZhmgsLJmj7Lfc8 cye4/SMHLzryzL+T5CWqTBDQZ6rGkthP+zebppYg1ywH2R+5Pk5OfUmPDY3I5yHI d2zB2F+cPs2p9Orr+gXaH4SgmVGR3qCh7BxdozOl3OQj3jbLUJ1cGvKwCNH2DD3H V3OeC9ZMwMjOv8EYYGhfC+vcXlEu9CI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:01 2025 by rpki-client