$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3afd4069-a658-306e-a6bf-36f942b2600a.roa File: 3afd4069-a658-306e-a6bf-36f942b2600a.roa (raw, json) Hash identifier: 2Yl1f5cd1HPYLCbsBLjwBlweUhM71a/0oLURVzmSE7M= Subject key identifier: 36:86:F6:61:46:B5:DD:0F:F1:1E:0B:A0:D3:0C:C9:8C:21:C8:E2:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD71FEEF6D32541ACE4BC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3afd4069-a658-306e-a6bf-36f942b2600a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.100.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:71:fe:ef:6d:32:54:1a:ce:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=95703e86-036e-4083-81e1-53301b9c846f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:67:a0:11:94:f0:6d:0c:7b:e4:b3:97:3c: fb:2a:a3:47:d9:a8:23:24:09:7d:0e:4e:88:24:90: ee:01:62:b3:06:28:d0:d3:82:8a:0a:87:4d:e6:5d: a1:4d:67:cc:69:3d:51:75:3a:dc:57:3d:62:4e:a1: fe:da:24:a1:1d:4f:4f:7d:c4:65:78:ee:c2:dd:b1: a1:30:0f:ff:48:77:8e:63:9d:23:b1:ca:83:86:b7: 81:52:1d:04:1d:35:82:01:7f:38:f2:0d:cf:1b:70: 54:b1:b0:65:de:c6:c3:ca:68:fc:46:fb:8e:f9:f5: 50:47:de:6f:fe:55:09:1b:5c:50:45:49:ce:ac:03: f9:eb:92:19:85:af:b8:83:e5:c2:9e:d0:d7:c0:1a: af:58:27:2b:a8:ea:ff:be:ea:21:10:5e:c8:9e:6f: dd:59:69:e3:2b:35:c6:13:fd:a3:c9:76:24:98:b0: aa:65:6e:f7:a0:4b:31:60:b4:d8:af:2e:3d:81:d9: f1:5c:cd:8b:39:c1:5e:15:1e:e6:bf:5d:66:d5:20: b4:28:0d:ba:01:82:5f:08:b1:79:26:c5:d4:ea:62: 08:fd:fd:b5:fa:6e:58:9b:2c:cc:79:e8:6d:d0:a6: 2d:cc:de:cd:d6:d8:9d:6e:39:02:b3:f8:95:fc:f4: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:86:F6:61:46:B5:DD:0F:F1:1E:0B:A0:D3:0C:C9:8C:21:C8:E2:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3afd4069-a658-306e-a6bf-36f942b2600a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b4:2a:4a:f8:9b:18:44:e5:d0:53:88:39:1a:18:9b:e8:f9: 96:68:c4:d8:7b:bf:18:54:a1:57:17:fb:cb:57:9c:e5:7c:e8: b9:66:0f:6d:32:5f:5f:ba:1e:14:97:82:fc:83:15:ea:e0:07: 1b:e4:de:be:2c:1f:1f:58:30:2b:49:af:b1:db:eb:18:21:1b: 8a:af:64:79:d5:96:ad:21:7e:7c:f3:d2:71:29:6e:a4:36:e1: 9c:be:69:93:11:6c:7b:0e:86:15:ac:1e:66:e4:cc:33:69:c0: 40:ef:69:54:b5:8e:43:95:62:bc:ba:1e:ef:2d:63:4b:e4:27: 9f:b2:19:fd:66:4f:2b:8a:bd:ff:8d:e8:e5:68:83:59:d8:17: 8a:9c:4f:fb:71:bb:87:45:b9:28:d6:a9:95:14:0a:32:83:47: 3d:e4:7a:9c:44:34:0a:52:1f:89:2c:92:b6:a5:cb:5a:cc:13: 5c:6c:37:53:df:de:f1:cf:ad:e1:d0:f1:63:ae:c7:ff:d5:42: 36:40:aa:52:87:cd:b9:40:8b:3f:95:73:3e:e6:24:cd:85:70: 35:90:59:1d:3c:49:6e:61:28:24:3a:c1:3b:98:2c:53:11:c6: e1:d1:7d:dc:bc:62:69:13:7d:6c:3c:e2:bd:1c:79:e8:8d:55: 00:71:af:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXH+720yVBrOS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTU3MDNlODYtMDM2ZS00MDgzLTgxZTEtNTMzMDFiOWM4NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslhnoBGU8G0Me+Szlzz7KqNH2agjJAl9Dk6I JJDuAWKzBijQ04KKCodN5l2hTWfMaT1RdTrcVz1iTqH+2iShHU9PfcRleO7C3bGh MA//SHeOY50jscqDhreBUh0EHTWCAX848g3PG3BUsbBl3sbDymj8RvuO+fVQR95v /lUJG1xQRUnOrAP565IZha+4g+XCntDXwBqvWCcrqOr/vuohEF7Inm/dWWnjKzXG E/2jyXYkmLCqZW73oEsxYLTYry49gdnxXM2LOcFeFR7mv11m1SC0KA26AYJfCLF5 JsXU6mII/f21+m5YmyzMeeht0KYtzN7N1tidbjkCs/iV/PQEMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaG9mFGtd0P8R4LoNMMyYwhyOJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2FmZDQwNjktYTY1OC0z MDZlLWE2YmYtMzZmOTQyYjI2MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu0Kkr4mxhE5dBTiDkaGJvo+ZZoxNh7vxhUoVcX+8tXnOV86LlmD20y X1+6HhSXgvyDFergBxvk3r4sHx9YMCtJr7Hb6xghG4qvZHnVlq0hfnzz0nEpbqQ2 4Zy+aZMRbHsOhhWsHmbkzDNpwEDvaVS1jkOVYry6Hu8tY0vkJ5+yGf1mTyuKvf+N 6OVog1nYF4qcT/txu4dFuSjWqZUUCjKDRz3kepxENApSH4kskraly1rME1xsN1Pf 3vHPreHQ8WOux//VQjZAqlKHzblAiz+Vcz7mJM2FcDWQWR08SW5hKCQ6wTuYLFMR xuHRfdy8YmkTfWw84r0ceeiNVQBxr2w= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:56 2025 by rpki-client