$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a62512bd-dc40-349f-ada6-fdd3d162e006.roa File: a62512bd-dc40-349f-ada6-fdd3d162e006.roa (raw, json) Hash identifier: M3Hx27bZA6evfrt0GMKlBNuGCsF9aXUhM7y0vsDhTY8= Subject key identifier: B8:71:C7:A9:13:68:D5:38:14:91:47:16:15:27:96:63:DE:6B:1C:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67975DBABE5F00A9BB3F7700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a62512bd-dc40-349f-ada6-fdd3d162e006.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.76.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:5d:ba:be:5f:00:a9:bb:3f:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=51ebbf04-2f8e-4a5c-821b-704f98ccbbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:22:f6:8c:1e:c3:ff:d9:11:db:da:02:8b:a7: 02:09:23:ec:d4:12:fa:4d:7d:9a:33:d1:5b:e3:19: ab:fa:72:d4:1c:8f:50:b2:ee:f5:44:8a:fe:cd:ab: 75:bb:ad:08:ad:f6:41:4c:be:de:32:fc:ad:88:dc: 73:46:19:ba:69:32:58:26:1b:ba:8b:72:35:fd:fc: 40:8c:fe:e2:32:f2:d2:5e:4a:63:f0:41:57:0e:06: b3:7f:fb:42:79:ec:bd:d3:2a:58:6d:8d:65:cd:1b: e8:a4:2b:2c:20:b4:26:3a:5c:02:1a:1b:3b:ec:a0: a7:93:eb:7f:88:2a:86:52:d9:38:2d:9d:82:c6:cb: e4:29:d0:63:cd:01:af:d8:e0:1b:a0:4f:6a:5a:71: 82:8d:8e:6f:af:ff:46:20:bd:ce:5c:e7:03:c0:c1: fb:c7:a5:03:0a:2d:ff:59:02:ae:54:0f:5e:c2:4d: bd:39:00:c6:aa:21:73:5d:26:1e:c4:44:f4:a9:ef: 65:f0:da:57:34:db:df:87:6d:1a:41:c4:2e:e2:fa: 1d:b5:5c:b8:03:10:82:7d:e3:91:b2:a0:77:52:4d: 26:2b:85:36:af:0c:ee:4f:af:90:06:0a:4b:1b:38: ad:0d:13:88:53:99:93:60:7d:dd:6b:45:0d:4c:d4: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:71:C7:A9:13:68:D5:38:14:91:47:16:15:27:96:63:DE:6B:1C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a62512bd-dc40-349f-ada6-fdd3d162e006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a3:4b:9c:9c:90:6c:09:e8:14:ce:59:d5:c6:1d:ff:da:cb: 8e:b3:d2:a3:17:b3:ad:b7:17:b4:b0:39:2a:81:c6:8b:01:9b: bf:fb:82:1d:4f:d9:db:4b:e2:f8:f5:a1:0e:e1:96:b3:d3:90: 23:12:7b:7d:51:7c:4d:c5:93:95:8a:ca:1a:e3:49:56:29:c0: 0d:12:f3:d0:27:d7:c7:d0:85:9a:bd:19:f3:ae:63:67:00:ca: e5:c2:f7:f3:e2:0e:35:c3:32:8f:14:d8:d7:76:40:9d:0f:c7: 36:a2:26:85:64:2e:b3:01:04:fa:00:c0:bd:7d:c8:fd:7e:f3: 37:e0:41:5f:2d:a7:64:95:f0:11:68:68:3a:f9:ba:7e:aa:4b: d4:23:a0:83:43:30:3b:91:18:97:76:a6:26:e9:6b:ea:1b:f4: 3e:2a:5e:6a:ce:a5:dc:d8:ff:a8:aa:66:ca:62:0c:ab:f1:78: 31:b1:7b:fc:1e:86:ab:51:52:a6:88:78:a5:9e:21:e2:21:01: 12:ad:2d:b9:f0:9e:99:47:39:f9:8e:d4:d6:52:2e:29:20:e8: 2b:27:92:3c:dc:ab:d3:5f:8c:75:d3:fc:78:fe:28:c6:ab:42: 52:b5:48:c4:47:f5:4c:e5:9e:00:81:69:ce:44:21:37:b6:42: e2:7d:ad:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl126vl8Aqbs/dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTFlYmJmMDQtMmY4ZS00YTVjLTgyMWItNzA0Zjk4Y2NiYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSL2jB7D/9kR29oCi6cCCSPs1BL6TX2aM9Fb 4xmr+nLUHI9Qsu71RIr+zat1u60IrfZBTL7eMvytiNxzRhm6aTJYJhu6i3I1/fxA jP7iMvLSXkpj8EFXDgazf/tCeey90ypYbY1lzRvopCssILQmOlwCGhs77KCnk+t/ iCqGUtk4LZ2CxsvkKdBjzQGv2OAboE9qWnGCjY5vr/9GIL3OXOcDwMH7x6UDCi3/ WQKuVA9ewk29OQDGqiFzXSYexET0qe9l8NpXNNvfh20aQcQu4vodtVy4AxCCfeOR sqB3Uk0mK4U2rwzuT6+QBgpLGzitDROIU5mTYH3da0UNTNTvrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhxx6kTaNU4FJFHFhUnlmPeaxxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTYyNTEyYmQtZGM0MC0z NDlmLWFkYTYtZmRkM2QxNjJlMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGjS5yckGwJ6BTOWdXGHf/ay46z0qMXs623F7SwOSqBxosBm7/7gh1P 2dtL4vj1oQ7hlrPTkCMSe31RfE3Fk5WKyhrjSVYpwA0S89An18fQhZq9GfOuY2cA yuXC9/PiDjXDMo8U2Nd2QJ0PxzaiJoVkLrMBBPoAwL19yP1+8zfgQV8tp2SV8BFo aDr5un6qS9QjoINDMDuRGJd2pibpa+ob9D4qXmrOpdzY/6iqZspiDKvxeDGxe/we hqtRUqaIeKWeIeIhARKtLbnwnplHOfmO1NZSLikg6Csnkjzcq9NfjHXT/Hj+KMar QlK1SMRH9UzlngCBac5EITe2QuJ9rb4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:08:57 2025 by rpki-client