$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f8aea2-2333-3e3c-ae67-e334191775a2.roa File: 52f8aea2-2333-3e3c-ae67-e334191775a2.roa (raw, json) Hash identifier: 553wL3u3wxk0enRQ46GSdyVBD5zOlDRPK6hMRCFZxgw= Subject key identifier: 50:6E:E0:92:26:9F:55:78:67:58:02:64:9E:E8:AA:0F:C0:C6:25:77 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C8D85CFC624CB7BF0788 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f8aea2-2333-3e3c-ae67-e334191775a2.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.96.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c8:d8:5c:fc:62:4c:b7:bf:07:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=28625403-7a77-4192-9f3a-6d1f2ee8ca23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:58:96:83:34:f2:8b:12:f2:4a:28:94:f5: 0c:b0:1a:f8:25:5b:ac:fd:04:c2:6b:3f:f0:e7:9b: 8e:fb:09:86:24:de:7a:cb:1b:06:f0:48:bf:ec:73: 09:e6:42:72:c8:31:19:66:29:71:46:6e:7d:0e:a7: c1:ac:18:10:6f:94:81:a2:11:c5:b0:c2:10:5a:ac: 18:55:88:06:1f:ee:04:f7:38:2b:fc:94:45:8e:c7: d2:66:1e:fb:7a:93:eb:4a:2a:a4:94:e2:1f:19:9f: c7:55:a3:2b:09:3f:ab:fb:56:39:ae:43:76:74:0f: 8c:f1:7b:42:99:c1:37:31:94:40:21:30:5f:71:b1: bb:73:e2:45:9f:99:b3:a8:20:93:59:6e:c3:08:fa: bb:ca:da:9b:51:70:27:cc:c4:f0:22:a3:63:5b:23: 3a:24:ff:0b:12:45:33:e3:6a:d6:cf:2f:61:98:40: 8c:77:6c:70:77:0f:4a:a2:6b:6b:3d:8a:82:2b:41: fb:b2:15:ca:fd:0e:28:fc:aa:bb:1a:16:b2:23:a8: 12:b3:a3:d3:d6:1d:1e:28:b6:02:18:18:c7:67:e4: 0e:5d:c0:e4:da:19:8c:64:27:c7:a1:1a:5b:30:7d: a3:6b:9a:5b:04:01:19:7a:25:46:c7:25:10:b3:af: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6E:E0:92:26:9F:55:78:67:58:02:64:9E:E8:AA:0F:C0:C6:25:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f8aea2-2333-3e3c-ae67-e334191775a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e3:31:a5:9d:d1:45:11:c2:bb:b0:c1:dd:42:da:ca:18:f0: d2:63:88:fe:d2:1b:00:b2:da:7a:99:3b:9a:80:a5:4d:23:57: 6c:34:b0:99:b4:b7:80:89:ec:0d:de:d9:4d:82:05:13:3b:4c: da:0f:d2:47:21:79:53:ad:c6:87:20:8e:1d:ee:65:ac:1f:38: e4:00:4a:e7:34:5d:f0:43:83:ee:64:4b:64:8b:78:cf:70:13: cc:52:f6:20:11:08:1f:de:85:3f:ef:eb:ed:be:5a:53:60:97: c8:e8:f6:b6:3b:58:2c:05:59:b2:f1:36:c0:35:77:c6:fa:9b: 97:9a:0e:9b:05:71:e1:65:61:a3:0f:8e:71:0f:01:04:d4:04: dd:6a:07:a3:28:f8:0d:0c:ac:72:7d:89:aa:d9:a3:3b:27:99: 06:8e:0d:d9:78:e4:b9:83:81:c6:a1:2e:1f:2c:f2:df:cc:17: 15:9b:3d:18:58:f3:3d:fe:e7:5d:75:c2:35:a5:38:75:f2:02: 67:b5:70:81:73:3f:fb:af:0d:cd:76:88:fa:a7:36:05:26:64: ef:21:4e:18:cf:c8:41:3a:c3:cc:aa:27:93:05:4c:eb:3d:91: c0:81:5e:57:1b:73:0c:58:4e:e9:36:ab:11:dd:5f:42:6e:a3: de:fa:63:7d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtnl8jYXPxiTLe/B4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Mjg2MjU0MDMtN2E3Ny00MTkyLTlmM2EtNmQxZjJlZThjYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZxYloM08osS8koolPUMsBr4JVus/QTCaz/w 55uO+wmGJN56yxsG8Ei/7HMJ5kJyyDEZZilxRm59DqfBrBgQb5SBohHFsMIQWqwY VYgGH+4E9zgr/JRFjsfSZh77epPrSiqklOIfGZ/HVaMrCT+r+1Y5rkN2dA+M8XtC mcE3MZRAITBfcbG7c+JFn5mzqCCTWW7DCPq7ytqbUXAnzMTwIqNjWyM6JP8LEkUz 42rWzy9hmECMd2xwdw9KomtrPYqCK0H7shXK/Q4o/Kq7GhayI6gSs6PT1h0eKLYC GBjHZ+QOXcDk2hmMZCfHoRpbMH2ja5pbBAEZeiVGxyUQs69gmwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFBu4JImn1V4Z1gCZJ7oqg/AxiV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTJmOGFlYTItMjMzMy0z ZTNjLWFlNjctZTMzNDE5MTc3NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCImAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFeMxpZ3RRRHCu7DB3ULayhjw0mOI/tIbALLaepk7moClTSNXbDSwmbS3 gInsDd7ZTYIFEztM2g/SRyF5U63GhyCOHe5lrB845ABK5zRd8EOD7mRLZIt4z3AT zFL2IBEIH96FP+/r7b5aU2CXyOj2tjtYLAVZsvE2wDV3xvqbl5oOmwVx4WVhow+O cQ8BBNQE3WoHoyj4DQyscn2JqtmjOyeZBo4N2XjkuYOBxqEuHyzy38wXFZs9GFjz Pf7nXXXCNaU4dfICZ7VwgXM/+68NzXaI+qc2BSZk7yFOGM/IQTrDzKonkwVM6z2R wIFeVxtzDFhO6TarEd1fQm6j3vpjfQ== -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:34 2025 by rpki-client