$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be22a27-9948-3fac-9560-851b2682931e.roa File: 3be22a27-9948-3fac-9560-851b2682931e.roa (raw, json) Hash identifier: kExX1VzZ7GeL4uEqdCQEvmu/2jD7qG+r3qKYtic0i8g= Subject key identifier: 8B:42:B8:DA:B3:12:AE:43:70:70:4D:78:53:8A:D0:D9:4C:60:E6:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE0BD950574AE7472B8200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be22a27-9948-3fac-9560-851b2682931e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.100.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0b:d9:50:57:4a:e7:47:2b:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=fa54cfed-014b-4ea5-bf0f-ca40c07f589e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:20:3f:40:32:4c:fd:68:ab:19:d4:d3:07:d7: 63:f9:9e:2f:9f:22:aa:41:e6:b2:2d:85:89:63:89: 03:86:ee:e4:3c:de:c4:7c:76:81:9f:67:c4:15:b5: bf:b9:ce:56:96:99:d5:b2:c6:34:34:2d:e7:89:48: a8:f4:49:b6:55:1a:7e:35:75:06:4e:ea:20:53:01: 9f:83:b3:0a:9c:f2:7f:36:f4:f3:b2:0b:e1:cd:f2: 1b:a6:26:f4:51:f9:f0:bd:6d:ad:2e:fb:4e:7b:66: ea:47:6d:04:e1:10:49:90:03:e7:f9:4d:e2:8a:78: ae:4a:e4:a3:60:ea:82:12:77:a0:e1:3f:d6:44:34: 29:6d:7a:2b:ea:9c:b0:0d:79:b0:8f:98:cd:f7:aa: 30:8d:3b:5b:80:41:a5:85:79:7b:63:3e:20:a7:eb: c5:1d:88:a3:3c:0d:eb:67:45:66:4a:9e:ac:6b:99: a0:0c:25:1b:d6:0b:82:54:ac:83:b0:9e:64:af:8d: 1e:3c:32:df:87:64:66:7e:9f:5c:23:c9:3c:46:59: 66:d4:48:d1:aa:3c:53:54:8c:e0:bb:28:09:10:a2: c9:6a:2d:2d:c7:60:16:3f:08:3c:d2:7a:bb:89:7a: 7f:cd:8d:04:99:c5:8b:2e:c5:61:f4:bc:8b:ef:b4: cf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:42:B8:DA:B3:12:AE:43:70:70:4D:78:53:8A:D0:D9:4C:60:E6:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be22a27-9948-3fac-9560-851b2682931e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ff:d7:55:5a:51:48:07:b8:55:81:a5:01:47:98:7b:7c:c2: de:24:6f:6e:2a:01:e1:22:df:87:be:83:7c:58:09:a4:5e:5f: c6:db:f0:56:86:25:a1:09:f9:7c:d2:b3:cc:f0:ab:28:ea:0d: f8:d0:01:24:3d:92:22:ab:fd:7c:e2:c1:09:a7:04:fa:ef:a7: aa:b1:d9:a3:46:1c:e2:53:e5:10:00:19:68:33:8a:01:06:9c: a3:88:b8:c3:ef:08:29:d8:de:c2:f7:d8:97:ca:7e:a7:9b:3a: 80:98:f4:47:70:7b:24:43:59:d8:53:f4:2f:fb:dc:04:28:fd: cb:e8:8f:3b:44:e2:3b:f6:14:e0:38:42:28:2a:da:bd:e4:a6: 1b:22:89:a5:ff:8b:4b:0f:c5:a7:8b:44:c4:fa:11:c7:e5:21: 26:4e:a4:de:3f:08:42:1a:fe:d6:0c:82:e2:d6:fe:b4:14:e8: 8d:d6:24:93:a4:3e:48:16:a0:49:bb:05:a3:81:d9:b3:cd:b3: c1:08:28:9c:d5:25:a1:a9:5d:c6:e9:d5:ff:e5:7c:3c:a9:a2: ab:bc:cb:c2:5e:32:2e:11:c5:cd:bf:1b:32:8b:83:17:9c:98: 6f:4e:a5:74:d9:73:6b:24:2e:db:38:88:fc:3d:1d:dd:91:ed: 7d:8f:5e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgvZUFdK50crggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZmE1NGNmZWQtMDE0Yi00ZWE1LWJmMGYtY2E0MGMwN2Y1ODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliA/QDJM/WirGdTTB9dj+Z4vnyKqQeayLYWJ Y4kDhu7kPN7EfHaBn2fEFbW/uc5WlpnVssY0NC3niUio9Em2VRp+NXUGTuogUwGf g7MKnPJ/NvTzsgvhzfIbpib0UfnwvW2tLvtOe2bqR20E4RBJkAPn+U3iiniuSuSj YOqCEneg4T/WRDQpbXor6pywDXmwj5jN96owjTtbgEGlhXl7Yz4gp+vFHYijPA3r Z0VmSp6sa5mgDCUb1guCVKyDsJ5kr40ePDLfh2Rmfp9cI8k8Rllm1EjRqjxTVIzg uygJEKLJai0tx2AWPwg80nq7iXp/zY0EmcWLLsVh9LyL77TPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItCuNqzEq5DcHBNeFOK0NlMYOZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JlMjJhMjctOTk0OC0z ZmFjLTk1NjAtODUxYjI2ODI5MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf/11VaUUgHuFWBpQFHmHt8wt4kb24qAeEi34e+g3xYCaReX8bb8FaG JaEJ+XzSs8zwqyjqDfjQASQ9kiKr/XziwQmnBPrvp6qx2aNGHOJT5RAAGWgzigEG nKOIuMPvCCnY3sL32JfKfqebOoCY9EdweyRDWdhT9C/73AQo/cvojztE4jv2FOA4 Qigq2r3kphsiiaX/i0sPxaeLRMT6EcflISZOpN4/CEIa/tYMguLW/rQU6I3WJJOk PkgWoEm7BaOB2bPNs8EIKJzVJaGpXcbp1f/lfDypoqu8y8JeMi4Rxc2/GzKLgxec mG9OpXTZc2skLts4iPw9Hd2R7X2PXq8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:27 2025 by rpki-client