$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4700e29a-ec5c-3668-b27f-3441ac64c658.roa File: 4700e29a-ec5c-3668-b27f-3441ac64c658.roa (raw, json) Hash identifier: x/sn35WytQslmkxfutD0g1i0CwP9Mw1ME53Goizt4ho= Subject key identifier: 53:42:45:E4:BA:B6:3F:08:0D:A8:5F:1B:35:67:7C:17:2C:0A:F9:DA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B864CB4D0380B2A6ED6037380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4700e29a-ec5c-3668-b27f-3441ac64c658.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 34.190.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b4:d0:38:0b:2a:6e:d6:03:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=ffb87625-b0de-4850-865a-2ded52b77f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:9d:32:2a:d9:24:a1:cb:78:ad:ac:a6:a2: 16:2e:7d:7b:d7:8d:ab:6f:82:ae:ab:99:be:90:ce: db:36:08:c4:b7:a9:20:31:e2:27:fd:19:ca:3c:32: 14:2a:50:6f:32:d2:06:20:42:49:9b:07:87:9a:ce: c5:06:a0:c1:48:c0:85:4d:fc:75:e9:2d:dd:5e:5c: 1c:21:74:bc:f2:a7:03:df:81:ec:05:74:1f:23:7d: ce:34:3b:56:65:49:3e:eb:2e:b3:c2:99:1c:8d:2d: 2c:78:73:73:01:23:1b:ea:78:82:20:8c:74:ff:70: 0c:01:ce:26:91:5b:ee:a2:00:ce:6b:73:86:52:da: 98:2d:e1:5f:75:d4:80:9f:be:2f:2b:51:fa:d4:3a: c9:19:9a:50:2c:d0:a8:06:83:7f:b1:3f:1e:e1:93: c4:f8:92:2c:ef:95:41:9e:db:fb:63:59:60:30:50: 44:aa:9d:e8:06:5c:77:80:f6:f0:51:c4:61:fa:89: e8:60:f3:25:a8:50:80:b4:fa:e8:2e:23:40:1c:4e: ad:7b:ad:23:e0:60:10:dd:e2:83:4c:f4:a1:df:d0: 7e:d2:3f:74:40:f8:91:17:5b:09:5f:35:95:1c:59: 4e:48:39:bb:61:03:ca:41:8a:f2:5f:12:41:ab:17: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:42:45:E4:BA:B6:3F:08:0D:A8:5F:1B:35:67:7C:17:2C:0A:F9:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4700e29a-ec5c-3668-b27f-3441ac64c658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ce:1d:27:e0:00:e2:f4:e7:ac:70:e2:21:6b:a6:a6:9e:0f: df:df:d0:f3:7b:52:01:57:5d:16:24:3d:f2:0c:44:19:2b:79: 06:bd:a6:4e:5b:3e:9c:43:80:55:8d:b3:87:02:d4:58:20:21: 05:e1:c4:41:db:7e:6a:2d:90:c1:79:91:ff:98:c5:89:24:3c: 6a:df:0e:60:90:7a:b3:c2:26:24:ac:9c:a2:5a:c7:b6:54:09: 85:3b:e2:a2:a6:61:23:5e:4d:49:e4:d3:15:e7:41:2c:5b:b6: 9d:9f:9c:37:ac:df:2c:48:e7:d6:2e:19:97:4d:63:a7:63:63: 17:f7:1a:1c:20:ad:5f:5f:bc:46:cd:6b:15:a2:bf:4d:93:91: 5e:82:bc:05:e8:a6:ad:e9:82:03:48:38:73:89:f7:57:32:79: 0c:ce:1d:10:fe:b4:64:23:4b:19:eb:0e:96:a7:db:36:b2:a2: db:db:09:b5:8e:e7:ad:e0:ab:c7:5a:1c:93:49:89:99:73:4d: fa:1b:7c:13:bf:e2:d9:c8:25:15:24:5f:f9:f2:1f:9b:2d:c2: d1:51:0c:4e:23:72:a6:9a:8b:e0:87:82:93:d4:eb:70:89:13: 98:24:75:c6:6d:11:94:7d:6c:27:78:46:9b:55:cf:3f:ed:46: b4:cc:0e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTLTQOAsqbtYDc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk ZmZiODc2MjUtYjBkZS00ODUwLTg2NWEtMmRlZDUyYjc3ZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/qdMirZJKHLeK2spqIWLn17142rb4Kuq5m+ kM7bNgjEt6kgMeIn/RnKPDIUKlBvMtIGIEJJmweHms7FBqDBSMCFTfx16S3dXlwc IXS88qcD34HsBXQfI33ONDtWZUk+6y6zwpkcjS0seHNzASMb6niCIIx0/3AMAc4m kVvuogDOa3OGUtqYLeFfddSAn74vK1H61DrJGZpQLNCoBoN/sT8e4ZPE+JIs75VB ntv7Y1lgMFBEqp3oBlx3gPbwUcRh+onoYPMlqFCAtProLiNAHE6te60j4GAQ3eKD TPSh39B+0j90QPiRF1sJXzWVHFlOSDm7YQPKQYryXxJBqxe+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNCReS6tj8IDahfGzVnfBcsCvnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDcwMGUyOWEtZWM1Yy0z NjY4LWIyN2YtMzQ0MWFjNjRjNjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzOHSfgAOL056xw4iFrpqaeD9/f0PN7UgFXXRYkPfIMRBkreQa9pk5b PpxDgFWNs4cC1FggIQXhxEHbfmotkMF5kf+YxYkkPGrfDmCQerPCJiSsnKJax7ZU CYU74qKmYSNeTUnk0xXnQSxbtp2fnDes3yxI59YuGZdNY6djYxf3GhwgrV9fvEbN axWiv02TkV6CvAXopq3pggNIOHOJ91cyeQzOHRD+tGQjSxnrDpan2zayotvbCbWO 563gq8daHJNJiZlzTfobfBO/4tnIJRUkX/nyH5stwtFRDE4jcqaai+CHgpPU63CJ E5gkdcZtEZR9bCd4RptVzz/tRrTMDq0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:23:03 2025 by rpki-client