$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c76d76-452e-3704-ab32-58fef977e5ea.roa File: 38c76d76-452e-3704-ab32-58fef977e5ea.roa (raw, json) Hash identifier: drQhBi1YvtxDU53oSrQuM4SWAS9mLc2lvdvvKz6p698= Subject key identifier: E0:A7:9B:06:09:2B:31:3A:51:A8:FB:41:4B:B6:F6:0E:2D:C3:DC:63 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A4F3C02DDB9C0CF6A1B0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c76d76-452e-3704-ab32-58fef977e5ea.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.152.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a4:f3:c0:2d:db:9c:0c:f6:a1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=c59b4b40-2aa6-4091-83b7-d82942041063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:fc:06:35:bc:83:7f:59:dc:41:a7:31:4e: 2b:a0:93:1d:c0:05:51:0b:65:31:46:ec:94:ab:0a: 92:c0:9b:85:b3:99:72:74:ee:30:b1:7a:f5:28:07: a3:18:f1:8a:80:40:02:42:1b:af:50:df:c0:dc:15: 3f:97:73:6e:c6:64:b8:35:b9:2b:1a:da:ca:af:dc: c0:cf:e4:15:e4:9f:28:91:f1:1f:5d:c5:16:37:42: 45:a6:69:84:44:a4:c1:b6:e6:9a:c8:c3:0d:96:37: 56:4d:16:26:cb:0c:05:f7:3c:bf:7a:1d:2d:35:e2: 22:3a:db:f0:1b:d4:97:11:5c:44:c9:a5:e6:cd:56: b0:a5:5f:33:af:2e:69:bb:81:2f:eb:70:3e:07:f5: 15:cc:16:f5:f2:dc:bc:d5:03:57:24:ab:a7:de:32: 23:da:8a:f8:43:d6:5e:28:bb:3b:d6:94:2a:cc:fc: 70:11:24:ad:5d:91:ca:bb:e8:08:eb:98:91:95:81: f2:31:6d:d8:57:2c:c3:72:da:63:0b:10:8f:bc:8e: 40:d0:49:90:67:38:60:f6:7f:89:75:dc:10:1d:f2: f2:7a:0b:99:b3:63:92:c6:b4:56:0c:17:4d:eb:32: 3e:bc:ee:36:ba:2f:06:0b:75:8c:8e:6c:8a:bc:eb: b7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A7:9B:06:09:2B:31:3A:51:A8:FB:41:4B:B6:F6:0E:2D:C3:DC:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c76d76-452e-3704-ab32-58fef977e5ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f6:e4:02:45:f4:31:4f:07:ef:9b:8f:c7:34:93:5d:0d:83: aa:ec:17:ad:1b:31:dc:f3:8f:a0:14:4d:0b:0e:fc:4f:1e:e1: 56:19:f4:5b:76:8b:61:45:86:cd:fe:46:c7:52:86:b2:06:03: cf:4b:67:8b:fc:b5:3a:9c:72:2f:20:c4:44:03:31:43:44:aa: 91:5c:14:08:82:5b:f1:11:51:c1:52:de:69:e1:d9:7d:8e:b8: 2f:ff:b0:94:1c:83:ef:54:ec:f0:ce:14:34:c0:34:ef:2f:e3: 78:35:27:80:9f:d3:7f:b8:07:51:e9:f2:67:42:84:af:83:0a: c1:67:d3:80:25:cf:69:c9:f9:5c:62:9f:40:b0:97:f1:82:95: 2a:4d:bf:34:39:d9:8c:b8:9a:88:a4:f8:f2:75:6f:ba:5d:7c: 9a:52:e3:8b:75:dc:7e:3e:73:13:96:22:94:4d:81:e3:fe:f8: 5b:1b:b2:7a:95:c6:8e:2f:d9:8d:2c:11:a0:f8:b3:7b:29:aa: f1:e2:26:82:a4:5a:9d:88:53:64:73:55:fd:98:f0:15:68:49: 7a:41:fd:7d:e2:1e:67:57:a1:89:27:72:d1:28:d3:be:e9:74: 96:34:90:8b:ec:f8:5e:49:53:0c:d1:58:91:cf:14:a5:e6:4e: 90:68:ed:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6TzwC3bnAz2obAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YzU5YjRiNDAtMmFhNi00MDkxLTgzYjctZDgyOTQyMDQxMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8j8BjW8g39Z3EGnMU4roJMdwAVRC2UxRuyU qwqSwJuFs5lydO4wsXr1KAejGPGKgEACQhuvUN/A3BU/l3NuxmS4NbkrGtrKr9zA z+QV5J8okfEfXcUWN0JFpmmERKTBtuaayMMNljdWTRYmywwF9zy/eh0tNeIiOtvw G9SXEVxEyaXmzVawpV8zry5pu4Ev63A+B/UVzBb18ty81QNXJKun3jIj2or4Q9Ze KLs71pQqzPxwESStXZHKu+gI65iRlYHyMW3YVyzDctpjCxCPvI5A0EmQZzhg9n+J ddwQHfLyeguZs2OSxrRWDBdN6zI+vO42ui8GC3WMjmyKvOu3YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCnmwYJKzE6Uaj7QUu29g4tw9xjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzhjNzZkNzYtNDUyZS0z NzA0LWFiMzItNThmZWY5NzdlNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn25AJF9DFPB++bj8c0k10Ng6rsF60bMdzzj6AUTQsO/E8e4VYZ9Ft2 i2FFhs3+RsdShrIGA89LZ4v8tTqcci8gxEQDMUNEqpFcFAiCW/ERUcFS3mnh2X2O uC//sJQcg+9U7PDOFDTANO8v43g1J4Cf03+4B1Hp8mdChK+DCsFn04Alz2nJ+Vxi n0Cwl/GClSpNvzQ52Yy4moik+PJ1b7pdfJpS44t13H4+cxOWIpRNgeP++FsbsnqV xo4v2Y0sEaD4s3spqvHiJoKkWp2IU2RzVf2Y8BVoSXpB/X3iHmdXoYknctEo077p dJY0kIvs+F5JUwzRWJHPFKXmTpBo7fw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:29:05 2025 by rpki-client