$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa File: bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa (raw, json) Hash identifier: dOoOS6WZ2zMl4l9jocZlvFIkxvn8OAuXY+VWvrve+nw= Subject key identifier: B0:11:08:4C:36:F0:CE:05:B2:BD:D5:3F:8D:D3:69:5E:1C:0A:9E:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B864CAB9BB3B6183D5657CFC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 34.191.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:ab:9b:b3:b6:18:3d:56:57:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=14c12a17-a5bd-4d58-83d9-588830e1f8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:fc:1f:e1:f2:f3:a7:3f:87:04:5a:ab:30: 47:a4:54:ce:6e:cc:af:8b:01:0d:8b:34:38:04:ac: d5:48:63:f1:d3:17:7e:8d:b2:b6:d5:e3:74:d2:40: 17:a0:2d:7d:20:37:51:40:c6:5e:db:ba:89:81:9b: de:2e:86:b9:d1:3f:37:e7:66:96:a5:b2:0b:0e:ef: 91:a6:d1:01:d1:4e:f6:ec:dc:41:cc:60:cd:9a:a5: fa:9f:1c:8f:cf:1d:8f:95:25:48:bf:42:41:06:51: 7d:74:f7:a7:6a:44:52:44:a1:87:02:d6:4f:a4:0c: bc:87:70:a1:25:23:ba:21:a9:de:e8:33:b3:38:1a: 4b:1f:83:ff:50:97:2f:8f:3a:0c:24:b7:cd:e5:31: ce:3a:65:ee:1d:f8:ea:9b:8d:2d:29:8d:b6:d1:c1: fb:c2:66:2a:93:96:d0:a1:67:fc:62:4c:6b:a1:91: 3f:3e:43:aa:4e:7f:07:1c:03:69:70:ff:3f:3e:46: 0f:b8:3e:c7:44:0c:de:f0:c8:ff:81:15:02:fe:0c: a2:24:19:e2:2b:b7:1c:eb:87:25:59:78:cc:80:bd: 16:20:5c:42:6e:56:44:92:2f:7b:0c:5a:ad:9f:3d: b7:d7:b8:90:dc:1d:18:e4:c6:16:b6:b9:65:27:43: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:11:08:4C:36:F0:CE:05:B2:BD:D5:3F:8D:D3:69:5E:1C:0A:9E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:54:22:62:5b:03:c3:45:94:b0:31:3d:e1:14:f1:b0:66:f1: 41:21:fa:41:51:15:d0:11:c7:e8:f3:11:bb:19:48:bb:b7:24: 90:29:28:df:5e:d3:28:2d:e8:84:d0:2a:b2:a2:d5:8c:12:c7: 27:8f:95:2c:f4:2b:29:1c:fb:15:58:fb:b2:fc:ba:ea:ed:43: 83:97:c3:c2:7f:2e:c8:5b:0a:4c:33:e0:de:5d:59:3b:1f:31: 72:7f:82:1e:cd:9c:dd:6f:d3:3a:74:df:c1:a2:e7:a2:52:00: c3:2c:88:9c:7c:ad:11:31:8f:41:08:e6:e6:e3:4e:37:2e:e9: 2e:34:d2:a5:ee:75:28:74:0d:09:a7:a0:2f:d7:4a:68:a7:83: 7b:cd:19:2f:f0:16:a3:97:1a:24:4d:1d:b4:8d:95:8f:1c:91: 29:0e:47:3a:c8:e0:93:17:d4:bb:89:5b:cc:b9:81:b0:ef:6b: c3:f5:8f:39:ed:65:d2:10:06:dd:75:b4:d2:75:86:aa:12:3c: 2d:8f:b9:cb:59:77:37:af:2e:73:9d:39:a4:11:d6:1f:75:4e: 50:5d:6c:11:98:15:de:e2:12:a5:0e:f7:d6:7c:8c:9b:b3:92: 39:6d:d2:ab:5e:f4:88:cb:77:a7:b5:23:85:6d:33:29:e6:9d: 42:d4:70:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTKubs7YYPVZXz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk MTRjMTJhMTctYTViZC00ZDU4LTgzZDktNTg4ODMwZTFmOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZD8H+Hy86c/hwRaqzBHpFTObsyviwENizQ4 BKzVSGPx0xd+jbK21eN00kAXoC19IDdRQMZe27qJgZveLoa50T8352aWpbILDu+R ptEB0U727NxBzGDNmqX6nxyPzx2PlSVIv0JBBlF9dPenakRSRKGHAtZPpAy8h3Ch JSO6Iane6DOzOBpLH4P/UJcvjzoMJLfN5THOOmXuHfjqm40tKY220cH7wmYqk5bQ oWf8YkxroZE/PkOqTn8HHANpcP8/PkYPuD7HRAze8Mj/gRUC/gyiJBniK7cc64cl WXjMgL0WIFxCblZEki97DFqtnz2317iQ3B0Y5MYWtrllJ0NK0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLARCEw28M4Fsr3VP43TaV4cCp5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmNhMzliZGMtMmMxOS0z MzQzLTg1ZDgtZjVmNTk5MGMyNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFUImJbA8NFlLAxPeEU8bBm8UEh+kFRFdARx+jzEbsZSLu3JJApKN9e 0ygt6ITQKrKi1YwSxyePlSz0Kykc+xVY+7L8uurtQ4OXw8J/LshbCkwz4N5dWTsf MXJ/gh7NnN1v0zp038Gi56JSAMMsiJx8rRExj0EI5ubjTjcu6S400qXudSh0DQmn oC/XSming3vNGS/wFqOXGiRNHbSNlY8ckSkORzrI4JMX1LuJW8y5gbDva8P1jznt ZdIQBt11tNJ1hqoSPC2PuctZdzevLnOdOaQR1h91TlBdbBGYFd7iEqUO99Z8jJuz kjlt0qte9IjLd6e1I4VtMynmnULUcGA= -----END CERTIFICATE-----Generated at Mon Oct 20 02:26:17 2025 by rpki-client