$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4be3c258-3d86-3bb3-858c-eba8efb9de72.roa File: 4be3c258-3d86-3bb3-858c-eba8efb9de72.roa (raw, json) Hash identifier: trpyZh0BQPib7hU7mxHJZWEI+4N6JYez8MjioONSdBM= Subject key identifier: BF:89:7A:C1:36:CD:25:0E:EA:47:60:C0:41:0F:29:60:25:94:48:82 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C8B8657A0FEB84FE0E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4be3c258-3d86-3bb3-858c-eba8efb9de72.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.70.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c8:b8:65:7a:0f:eb:84:fe:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3b21d135-c4c8-49d1-8a9b-2fc4a5a77b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:ea:a1:19:46:a1:45:25:2a:30:f5:df:1c: 62:08:8a:e6:27:41:46:5b:bf:23:9b:4d:be:ed:3d: 60:02:b9:f0:b1:cd:24:8b:03:f7:e8:dc:63:fb:bd: 24:fe:84:55:d0:06:dc:5f:6f:6d:9f:c2:45:7e:43: 45:6d:19:9f:d2:2b:c9:0c:9d:8e:cb:6c:6a:64:8a: c3:2c:cb:34:0e:07:78:2f:bd:08:5a:79:a2:98:d7: e0:fb:59:eb:fd:04:a1:ac:9e:8a:9d:f2:76:e1:67: 27:d1:6d:65:b1:b1:03:77:e3:80:aa:52:df:54:29: b4:bb:42:a3:30:f8:12:44:b4:f2:35:46:c2:2e:25: f2:9d:ef:1a:63:85:e1:79:b3:9e:e4:66:c7:d7:24: d7:78:24:eb:66:a4:05:21:c3:2f:a4:40:09:0a:cf: 49:d2:ce:4b:30:2d:83:50:9f:2a:d2:2e:88:97:30: 13:30:9b:ed:ca:21:ae:9b:84:06:2f:ac:d8:2e:5b: c7:b2:5f:94:dc:71:81:47:74:30:e2:68:21:58:86: 02:15:43:29:be:c3:d8:76:70:f3:91:60:c7:95:03: b4:7f:09:be:c1:39:a4:2d:fa:0f:c4:48:29:a4:3d: 66:a2:33:83:1e:c6:50:bc:5b:6d:55:63:50:77:2d: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:89:7A:C1:36:CD:25:0E:EA:47:60:C0:41:0F:29:60:25:94:48:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4be3c258-3d86-3bb3-858c-eba8efb9de72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:11:96:82:61:72:50:aa:15:7e:ba:5d:b9:5a:ca:ab:00:91: 2b:b4:ee:80:d6:d2:a2:0c:a0:0a:b5:4b:4e:56:f1:ce:b6:13: 11:c9:e3:7d:05:3c:3b:b8:f6:57:72:68:50:30:fd:2b:27:de: b9:44:d8:21:9b:97:81:2a:94:2f:6d:86:ad:c3:66:e0:90:18: f7:bd:eb:5f:e9:b0:d0:f7:9f:90:e0:5b:1a:e5:d4:35:13:a2: 7e:b5:44:1e:ef:13:75:98:59:01:8a:7a:5f:e8:a2:eb:f0:7e: 9c:a9:66:e2:2b:9c:23:54:68:13:3e:4c:4c:60:67:43:55:d1: 95:c6:92:42:31:1c:87:f5:ed:3c:5b:c9:18:37:21:cd:9a:e0: d4:ee:d2:dc:45:fb:af:be:69:75:12:df:4c:56:b1:b5:31:48: eb:4e:99:77:91:8f:a8:3d:52:65:60:3e:60:c9:45:8f:fa:e2: b9:b0:b8:bd:19:63:95:87:84:22:fb:ca:c2:e5:78:60:d1:35: b0:fb:b6:4c:92:49:a2:d6:8b:ad:4f:55:16:af:4e:c7:16:1b: e6:6d:63:b0:37:01:78:3e:e1:c8:b7:e3:a7:a1:7d:cf:ff:79: 4d:0b:e9:f2:18:b5:7c:13:2d:f6:0c:7e:44:4e:ac:bb:f5:af: f7:f9:aa:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8i4ZXoP64T+DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2IyMWQxMzUtYzRjOC00OWQxLThhOWItMmZjNGE1YTc3YjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy/qoRlGoUUlKjD13xxiCIrmJ0FGW78jm02+ 7T1gArnwsc0kiwP36Nxj+70k/oRV0AbcX29tn8JFfkNFbRmf0ivJDJ2Oy2xqZIrD LMs0Dgd4L70IWnmimNfg+1nr/QShrJ6KnfJ24Wcn0W1lsbEDd+OAqlLfVCm0u0Kj MPgSRLTyNUbCLiXyne8aY4XhebOe5GbH1yTXeCTrZqQFIcMvpEAJCs9J0s5LMC2D UJ8q0i6IlzATMJvtyiGum4QGL6zYLlvHsl+U3HGBR3Qw4mghWIYCFUMpvsPYdnDz kWDHlQO0fwm+wTmkLfoPxEgppD1mojODHsZQvFttVWNQdy2U5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+JesE2zSUO6kdgwEEPKWAllEiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGJlM2MyNTgtM2Q4Ni0z YmIzLTg1OGMtZWJhOGVmYjlkZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcRloJhclCqFX66XblayqsAkSu07oDW0qIMoAq1S05W8c62ExHJ430F PDu49ldyaFAw/Ssn3rlE2CGbl4EqlC9thq3DZuCQGPe961/psND3n5DgWxrl1DUT on61RB7vE3WYWQGKel/oouvwfpypZuIrnCNUaBM+TExgZ0NV0ZXGkkIxHIf17Txb yRg3Ic2a4NTu0txF+6++aXUS30xWsbUxSOtOmXeRj6g9UmVgPmDJRY/64rmwuL0Z Y5WHhCL7ysLleGDRNbD7tkySSaLWi61PVRavTscWG+ZtY7A3AXg+4ci346ehfc// eU0L6fIYtXwTLfYMfkROrLv1r/f5qoE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:14 2025 by rpki-client