$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/383349f5-1e47-3dac-8c85-635459902478.roa File: 383349f5-1e47-3dac-8c85-635459902478.roa (raw, json) Hash identifier: OGVNlN7+15Fgn9sjbXOV9w4zPR23PmVui3uEn76NrBM= Subject key identifier: 70:AC:37:6D:B5:9C:2C:9A:50:DD:9A:14:89:13:DB:EF:77:B6:D7:A1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797919CBFA34B72A906A260 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/383349f5-1e47-3dac-8c85-635459902478.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.94.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:91:9c:bf:a3:4b:72:a9:06:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=09afdd3b-e5a4-40de-b27b-4e642508c60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7b:f6:5a:de:1f:c6:75:46:2b:c7:de:66:6b: 90:51:45:4e:67:ad:92:ff:0e:c9:f7:f7:8e:0c:5b: 0f:dd:4c:77:17:25:a1:f6:a2:be:39:e4:ee:37:62: dd:ff:49:0b:b7:30:5b:0d:0a:42:09:25:f4:9c:c6: 52:00:d9:9e:4c:f6:d6:81:fc:5f:51:be:99:f0:5a: d8:83:33:a1:73:57:6d:d3:4f:bf:28:c5:39:d1:2b: 5a:60:52:41:c8:ae:60:12:4b:d0:32:be:ff:cb:02: 85:f7:ca:f1:ed:64:78:95:d4:9c:2a:09:81:1e:0a: e6:fb:73:af:ec:16:2d:74:d1:7c:b2:19:4b:d7:11: 4f:f3:74:db:1c:7e:74:2e:6f:e6:86:fb:69:45:03: c4:cf:92:cc:77:f5:fb:58:5e:8c:24:05:83:6c:ff: 49:ae:de:89:9a:ec:08:94:5c:4b:49:54:92:ee:cb: 31:45:4c:f2:24:8a:00:3a:1b:b7:46:db:ca:e3:2b: 7a:fa:7e:92:46:46:31:0c:4f:7c:b0:09:a5:1b:59: 8f:4b:af:9e:3f:e6:27:16:bd:a4:cc:9d:5b:8f:7d: 7b:55:2b:42:b2:4c:c4:cd:48:db:5e:ff:53:f0:98: 02:b3:e2:32:0d:a3:23:9b:23:04:46:06:b5:be:11: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AC:37:6D:B5:9C:2C:9A:50:DD:9A:14:89:13:DB:EF:77:B6:D7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/383349f5-1e47-3dac-8c85-635459902478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c0:f3:b2:f5:d4:f1:ee:b0:ed:3e:8d:3c:1b:58:ef:6d:61: f7:45:e9:61:46:a9:9e:d3:8a:61:ca:a9:41:aa:c3:ad:49:39: 09:7e:c5:e6:e8:c6:03:90:b8:a7:da:48:b2:bb:09:f8:de:e1: 05:c1:bf:be:f8:c3:f7:cf:4d:64:10:70:ef:b0:45:80:7e:9f: f7:d1:95:48:ae:98:41:e4:48:78:95:63:91:95:59:77:d4:4c: 88:55:f9:fe:38:ea:7c:c1:c4:32:20:dd:82:4d:84:2d:2f:43: 24:b7:a8:4c:1b:01:bf:f2:64:6f:55:5b:c9:45:f4:7a:15:49: 40:9b:8f:36:e6:00:7f:50:27:a0:29:d5:88:dd:7d:c2:93:53: ad:90:fb:81:f0:d1:4a:43:05:39:ac:5e:f5:95:e3:ab:68:2a: 93:f9:d0:de:a1:ba:10:9d:ad:c0:cf:c0:2b:c2:cf:b9:4d:91: 54:22:f1:d3:08:40:53:ea:ea:34:32:bf:2b:35:69:f1:af:78: 12:e9:0b:75:9e:d9:a2:35:50:e7:1b:f5:a0:52:84:40:7f:c7: 74:0d:60:80:0e:a2:a2:8e:b7:1d:d1:ef:99:49:c3:ff:01:6a: f5:d9:34:b4:f9:bf:f0:e6:1d:c1:ff:47:69:0f:70:56:da:a4: aa:49:ee:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5Gcv6NLcqkGomAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MDlhZmRkM2ItZTVhNC00MGRlLWIyN2ItNGU2NDI1MDhjNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXv2Wt4fxnVGK8feZmuQUUVOZ62S/w7J9/eO DFsP3Ux3FyWh9qK+OeTuN2Ld/0kLtzBbDQpCCSX0nMZSANmeTPbWgfxfUb6Z8FrY gzOhc1dt00+/KMU50StaYFJByK5gEkvQMr7/ywKF98rx7WR4ldScKgmBHgrm+3Ov 7BYtdNF8shlL1xFP83TbHH50Lm/mhvtpRQPEz5LMd/X7WF6MJAWDbP9Jrt6JmuwI lFxLSVSS7ssxRUzyJIoAOhu3RtvK4yt6+n6SRkYxDE98sAmlG1mPS6+eP+YnFr2k zJ1bj317VStCskzEzUjbXv9T8JgCs+IyDaMjmyMERga1vhEtpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCsN221nCyaUN2aFIkT2+93ttehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzgzMzQ5ZjUtMWU0Ny0z ZGFjLThjODUtNjM1NDU5OTAyNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrA87L11PHusO0+jTwbWO9tYfdF6WFGqZ7TimHKqUGqw61JOQl+xebo xgOQuKfaSLK7Cfje4QXBv774w/fPTWQQcO+wRYB+n/fRlUiumEHkSHiVY5GVWXfU TIhV+f446nzBxDIg3YJNhC0vQyS3qEwbAb/yZG9VW8lF9HoVSUCbjzbmAH9QJ6Ap 1YjdfcKTU62Q+4Hw0UpDBTmsXvWV46toKpP50N6huhCdrcDPwCvCz7lNkVQi8dMI QFPq6jQyvys1afGveBLpC3We2aI1UOcb9aBShEB/x3QNYIAOoqKOtx3R75lJw/8B avXZNLT5v/DmHcH/R2kPcFbapKpJ7g0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:37:59 2025 by rpki-client