$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a75dddf8-02df-3b76-b915-c696c124696b.roa File: a75dddf8-02df-3b76-b915-c696c124696b.roa (raw, json) Hash identifier: 7shnivCJkcrGgHiRo7plJsmCZSsf104W3hcwWLUemAs= Subject key identifier: 5A:88:CF:D4:6A:B6:09:49:88:CC:15:6A:5E:BE:DE:28:22:CC:39:7E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B72C1E6F9CEA874ABDB24FD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a75dddf8-02df-3b76-b915-c696c124696b.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 396982 IP address blocks: 34.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:e6:f9:ce:a8:74:ab:db:24:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=7b01fd1f-2a9f-4621-964c-7026db9fe355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:88:29:4f:1f:32:20:1e:0a:bd:51:0c:fe:04: 3f:09:4d:e7:92:19:88:08:a8:04:ca:6d:08:1f:33: cd:25:fd:ee:e9:39:0c:c0:e5:5d:8e:b4:b4:81:ea: b3:2b:69:63:fb:af:4b:8c:e1:a6:d9:cf:25:84:82: 05:a5:d1:71:7a:98:9d:e7:84:24:d8:69:64:12:9b: 39:f7:aa:c3:1c:23:1d:b7:48:95:99:c6:ca:bb:e0: 59:1f:31:66:5d:16:a2:74:3f:56:99:75:49:e9:d2: 77:8e:da:83:3b:e8:46:b6:c8:f4:15:20:13:32:37: 3b:ea:9a:f8:66:2e:4e:e6:45:b8:75:ad:be:36:43: 3d:36:57:38:c7:7c:9b:ef:d5:fd:ac:11:c7:10:e9: 42:c3:5e:9f:60:e3:fe:68:8f:8f:ab:ab:4b:fd:5c: ec:cd:57:a1:ef:30:04:d5:80:21:2a:21:02:f3:af: 3d:90:69:2d:ce:27:41:ad:c4:c2:5f:a4:29:5c:7b: 57:cf:b8:84:33:dd:c5:a2:e5:79:7c:1b:f6:9e:74: d3:83:79:19:a1:a1:39:fb:94:37:8c:dc:95:eb:00: ec:4a:e9:46:3e:61:65:db:c1:ea:31:ca:b3:30:32: 40:ea:fe:2f:fd:1e:88:75:f2:12:2e:2d:b3:14:1c: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:88:CF:D4:6A:B6:09:49:88:CC:15:6A:5E:BE:DE:28:22:CC:39:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a75dddf8-02df-3b76-b915-c696c124696b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6d:cd:5b:b2:30:71:5b:9b:cf:8e:46:d7:ee:b5:b9:96:8b: 3e:5a:ee:e3:89:b3:57:ed:6b:07:63:22:48:ae:49:06:08:df: f7:55:90:3a:e5:49:c2:34:cc:f0:01:2e:7b:69:10:1d:2c:c4: 74:b7:fc:67:b8:93:a1:9f:93:bc:56:b8:77:32:c8:1d:b9:b7: be:1b:c8:59:42:3c:29:3a:0e:b7:3a:eb:cd:85:7b:37:96:35: 2a:d2:78:7a:fd:14:fb:78:fb:05:9f:bd:d1:98:8c:87:98:d7: b1:27:c5:62:90:c5:b0:b8:6c:88:7b:0b:bc:8b:5d:78:c7:5d: a4:16:5b:c2:5c:5c:ee:de:7d:07:eb:f4:cc:cc:0c:9f:df:b7: 67:35:07:85:12:6c:c1:20:18:bd:36:b7:96:7f:1b:9d:11:a7: d5:48:cd:a3:ce:e5:42:46:26:9e:e6:56:71:8f:46:35:82:fd: 6c:fe:51:90:f9:5b:b3:fe:cd:ff:69:20:c9:f9:0e:67:6f:65: 05:c9:07:e5:8a:61:20:20:e4:c9:c6:db:7b:45:f3:9b:ee:1c: a9:7c:c4:fc:75:9e:d6:2b:7b:e7:3c:f2:f2:d0:54:ff:a9:ef: 3f:f9:37:ed:8b:f0:76:f2:4b:f2:95:81:11:7b:35:d6:5f:d0: a3:ab:c0:ba -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtyweb5zqh0q9sk/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk N2IwMWZkMWYtMmE5Zi00NjIxLTk2NGMtNzAyNmRiOWZlMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnogpTx8yIB4KvVEM/gQ/CU3nkhmICKgEym0I HzPNJf3u6TkMwOVdjrS0geqzK2lj+69LjOGm2c8lhIIFpdFxepid54Qk2GlkEps5 96rDHCMdt0iVmcbKu+BZHzFmXRaidD9WmXVJ6dJ3jtqDO+hGtsj0FSATMjc76pr4 Zi5O5kW4da2+NkM9Nlc4x3yb79X9rBHHEOlCw16fYOP+aI+Pq6tL/VzszVeh7zAE 1YAhKiEC8689kGktzidBrcTCX6QpXHtXz7iEM93FouV5fBv2nnTTg3kZoaE5+5Q3 jNyV6wDsSulGPmFl28HqMcqzMDJA6v4v/R6IdfISLi2zFBzoKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFqIz9RqtglJiMwVal6+3igizDl+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTc1ZGRkZjgtMDJkZi0z Yjc2LWI5MTUtYzY5NmMxMjQ2OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIoQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKm3NW7IwcVubz45G1+61uZaLPlru44mzV+1rB2MiSK5JBgjf91WQOuVJ wjTM8AEue2kQHSzEdLf8Z7iToZ+TvFa4dzLIHbm3vhvIWUI8KToOtzrrzYV7N5Y1 KtJ4ev0U+3j7BZ+90ZiMh5jXsSfFYpDFsLhsiHsLvItdeMddpBZbwlxc7t59B+v0 zMwMn9+3ZzUHhRJswSAYvTa3ln8bnRGn1UjNo87lQkYmnuZWcY9GNYL9bP5RkPlb s/7N/2kgyfkOZ29lBckH5YphICDkycbbe0Xzm+4cqXzE/HWe1it75zzy8tBU/6nv P/k37YvwdvJL8pWBEXs11l/Qo6vAug== -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:56 2025 by rpki-client