$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dbd9a6b-4a1c-3f77-ba96-29db332a32a0.roa File: 9dbd9a6b-4a1c-3f77-ba96-29db332a32a0.roa (raw, json) Hash identifier: NKwzdrXOqNDtnFwGeY2119imBEWas029am2zjxbrlJI= Subject key identifier: 86:09:AB:BF:C5:7C:21:BA:33:10:95:B5:33:B7:A6:5B:A1:2F:7F:01 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B33F1A0461D58153AE4596080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dbd9a6b-4a1c-3f77-ba96-29db332a32a0.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 15169 IP address blocks: 34.2.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a0:46:1d:58:15:3a:e4:59:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=0dc3d0c2-0a5a-4bbb-b93f-5cd242e1fb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:c4:f0:92:52:44:4c:f6:8e:b2:f1:30:6b: e2:93:ec:55:15:64:cf:19:5c:2d:fb:90:d9:b8:89: e9:28:ae:85:24:8f:8a:86:1e:82:7b:b1:cf:f5:ea: 3d:c4:85:41:a1:5e:c6:72:9e:e2:73:d2:ed:34:d8: dd:56:6e:74:32:36:bb:2a:dc:4c:ed:14:5f:ad:a3: 8f:31:19:9f:eb:9a:bb:ba:a6:c0:82:a3:cc:bd:d3: 4d:0c:22:dd:80:11:cb:7f:b5:0a:2e:bc:2d:8d:6c: c8:50:59:76:7d:6f:9e:8d:14:69:79:85:7d:aa:b2: 35:1a:5a:57:9d:ce:81:1f:a7:be:fe:e2:d0:59:45: 34:d8:23:65:c4:7a:68:18:0d:44:90:f5:c3:05:dc: a7:9f:24:19:aa:b6:2c:8c:71:a9:ba:39:f5:4e:f3: b3:ef:d2:69:60:35:22:3a:40:e2:34:c5:45:b3:5b: 6d:e8:eb:d3:7c:4c:f0:f3:29:81:ae:78:c4:13:6a: af:dd:7c:8a:9b:e3:81:d3:6c:dd:77:5b:e4:9d:f0: 47:77:80:f0:18:b4:04:0a:fc:da:f6:ab:de:ae:f0: 62:43:44:27:7d:43:99:02:5c:84:f6:2d:41:eb:c7: 7c:9e:2c:5b:45:fb:16:96:0d:15:39:2d:14:b4:3b: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:09:AB:BF:C5:7C:21:BA:33:10:95:B5:33:B7:A6:5B:A1:2F:7F:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dbd9a6b-4a1c-3f77-ba96-29db332a32a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ea:b3:63:92:92:bc:ea:2d:d4:69:24:eb:bf:15:32:5d:97: 72:57:6b:95:be:be:b7:85:42:a2:63:a5:47:a2:d9:28:7f:5d: c7:2c:8a:77:2e:54:d9:d8:62:12:ff:2f:7f:a3:20:cb:ba:25: 7a:27:b2:6d:bb:58:c2:d0:88:5b:92:bc:13:1f:56:75:37:2b: f4:1e:37:f5:c4:b7:ac:10:21:46:ad:7c:e8:d7:1d:bc:05:18: 9d:46:d0:b3:5f:e1:5d:bc:ab:50:45:4b:13:6d:e2:e0:7e:8c: d3:54:21:2c:59:22:0b:e1:56:9f:8c:44:a7:5a:23:02:5e:7d: 1a:ba:af:59:93:ea:a9:3d:b5:c1:7b:a2:5e:f9:7a:6a:e1:97: 66:3c:bf:b4:ec:20:62:8e:6e:3f:5d:9f:93:7f:3d:bd:4c:25: 7d:a0:bc:ef:3f:68:a4:70:43:82:c7:42:db:16:8e:89:84:4f: 66:29:1e:81:04:b4:03:33:db:1e:86:26:c3:8d:17:6d:08:a4: 0b:3d:b5:35:10:76:3a:4c:bd:fe:f3:da:64:b1:07:0f:13:6e: a8:76:c0:93:35:5c:56:0b:9c:72:5b:e7:d6:fa:00:95:98:1c: d6:0e:33:06:6c:77:dd:ef:e8:77:53:05:ee:57:4d:23:db:d2: 07:f1:9a:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aBGHVgVOuRZYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk MGRjM2QwYzItMGE1YS00YmJiLWI5M2YtNWNkMjQyZTFmYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3jE8JJSREz2jrLxMGvik+xVFWTPGVwt+5DZ uInpKK6FJI+Khh6Ce7HP9eo9xIVBoV7Gcp7ic9LtNNjdVm50Mja7KtxM7RRfraOP MRmf65q7uqbAgqPMvdNNDCLdgBHLf7UKLrwtjWzIUFl2fW+ejRRpeYV9qrI1GlpX nc6BH6e+/uLQWUU02CNlxHpoGA1EkPXDBdynnyQZqrYsjHGpujn1TvOz79JpYDUi OkDiNMVFs1tt6OvTfEzw8ymBrnjEE2qv3XyKm+OB02zdd1vknfBHd4DwGLQECvza 9qvervBiQ0QnfUOZAlyE9i1B68d8nixbRfsWlg0VOS0UtDtnUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYJq7/FfCG6MxCVtTO3pluhL38BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWRiZDlhNmItNGExYy0z Zjc3LWJhOTYtMjlkYjMzMmEzMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7qs2OSkrzqLdRpJOu/FTJdl3JXa5W+vreFQqJjpUei2Sh/Xccsincu VNnYYhL/L3+jIMu6JXonsm27WMLQiFuSvBMfVnU3K/QeN/XEt6wQIUatfOjXHbwF GJ1G0LNf4V28q1BFSxNt4uB+jNNUISxZIgvhVp+MRKdaIwJefRq6r1mT6qk9tcF7 ol75emrhl2Y8v7TsIGKObj9dn5N/Pb1MJX2gvO8/aKRwQ4LHQtsWjomET2YpHoEE tAMz2x6GJsONF20IpAs9tTUQdjpMvf7z2mSxBw8Tbqh2wJM1XFYLnHJb59b6AJWY HNYOMwZsd93v6HdTBe5XTSPb0gfxmpM= -----END CERTIFICATE-----Generated at Mon Oct 20 00:05:44 2025 by rpki-client