$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bec76361-6d24-3de8-a21e-998f83f5abfc.roa File: bec76361-6d24-3de8-a21e-998f83f5abfc.roa (raw, json) Hash identifier: tdMttpI9iz9b4zGkvY4L76bJw5yyDTF6PIpofDSIpak= Subject key identifier: DC:F4:AC:07:28:73:2D:07:FC:09:E4:66:6C:C1:C5:60:08:CA:5C:59 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B72C1E853A5DD6E53D51BB890 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bec76361-6d24-3de8-a21e-998f83f5abfc.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 396982 IP address blocks: 34.169.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:e8:53:a5:dd:6e:53:d5:1b:b8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=1c66b2d0-5158-4157-a113-18faee04dea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:fd:e0:fa:04:00:63:62:00:89:b7:3c:93: a5:1a:c1:4e:95:80:6a:d8:b6:47:ed:70:3e:10:23: 41:cf:c8:74:b6:13:56:d5:45:96:22:0a:fb:37:bd: 42:a2:53:6d:9d:ec:0f:c2:05:7a:e3:bd:d4:19:ba: 5c:47:63:2a:48:3d:22:42:1f:3b:d2:19:2e:1b:3d: 7f:53:42:15:cf:a3:1d:89:31:ab:d2:0c:ff:5f:09: 11:24:06:9e:a3:3c:1e:0c:6f:3b:f2:6b:ff:a1:67: 78:19:46:c3:39:51:bc:4d:3d:1d:27:86:ad:bf:6d: 9a:2a:13:8c:3a:df:25:77:41:89:1b:cc:71:e9:16: c5:68:53:26:99:9a:cd:87:b9:01:78:49:0e:66:ad: 62:9d:d1:0f:be:c2:1d:4b:34:a9:39:1a:60:ff:03: 94:bb:db:05:bf:fb:86:21:74:45:62:07:9a:41:4f: 54:c8:f7:6a:0f:4c:d0:d8:b4:e5:4a:14:bb:da:14: e6:7f:b4:ce:9e:92:8d:12:d1:fc:87:ea:ea:72:e0: c3:fc:98:30:98:6b:11:1b:c5:24:41:39:2c:7f:0a: e3:15:4c:9e:e8:b8:82:7d:47:e3:99:b5:da:b5:41: a4:2d:70:98:71:74:9f:ce:83:22:a2:49:54:03:2f: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F4:AC:07:28:73:2D:07:FC:09:E4:66:6C:C1:C5:60:08:CA:5C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bec76361-6d24-3de8-a21e-998f83f5abfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.169.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:85:6f:b9:40:1f:93:2f:25:12:4e:18:df:42:38:68:5f:4b: 53:23:68:b6:d1:f5:0b:2c:66:5c:b8:3e:4b:62:f4:ab:6b:97: 5b:8b:29:c1:05:3d:a9:70:65:46:cb:5a:5a:1f:fa:b2:e1:2f: 2d:80:fe:b9:01:95:d7:ff:60:81:ac:1e:59:ce:d0:d7:bc:b0: 71:69:8b:7e:3b:9b:42:78:fc:24:20:ff:2f:6f:50:c6:03:00: 12:45:80:59:18:c8:cf:84:2d:cb:15:39:e8:f1:13:f7:a1:29: 00:de:07:7c:78:81:7e:86:e5:12:e2:56:fc:0c:e1:9f:dc:a5: 17:f9:dd:7e:d0:62:eb:d2:1d:cf:a9:4f:d3:f2:3d:c0:6b:88: 59:40:80:91:7b:89:7b:54:28:e5:46:a6:33:9e:7f:a5:30:53: 5e:2f:89:df:a7:e1:5a:6a:e9:d0:74:66:3e:c2:81:9b:0d:49: 7b:ce:d0:34:8a:30:1a:72:f3:10:df:cd:25:c5:9b:47:5e:53: 1b:96:a1:ef:8c:22:45:ec:d6:97:f6:3c:f7:6d:25:9e:3e:d0: 36:31:79:17:38:ea:bd:a3:63:44:20:3e:df:00:ff:5f:11:a3: 2b:3a:57:37:b4:fc:60:ef:40:fd:2b:dc:5f:91:9d:bd:64:5b: 30:8f:a6:38 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtywehTpd1uU9UbuJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk MWM2NmIyZDAtNTE1OC00MTU3LWExMTMtMThmYWVlMDRkZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAb94PoEAGNiAIm3PJOlGsFOlYBq2LZH7XA+ ECNBz8h0thNW1UWWIgr7N71ColNtnewPwgV6473UGbpcR2MqSD0iQh870hkuGz1/ U0IVz6MdiTGr0gz/XwkRJAaeozweDG878mv/oWd4GUbDOVG8TT0dJ4atv22aKhOM Ot8ld0GJG8xx6RbFaFMmmZrNh7kBeEkOZq1indEPvsIdSzSpORpg/wOUu9sFv/uG IXRFYgeaQU9UyPdqD0zQ2LTlShS72hTmf7TOnpKNEtH8h+rqcuDD/JgwmGsRG8Uk QTksfwrjFUye6LiCfUfjmbXatUGkLXCYcXSfzoMioklUAy+40wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNz0rAcocy0H/AnkZmzBxWAIylxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmVjNzYzNjEtNmQyNC0z ZGU4LWEyMWUtOTk4ZjgzZjVhYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOYVvuUAfky8lEk4Y30I4aF9LUyNottH1CyxmXLg+S2L0q2uXW4spwQU9 qXBlRstaWh/6suEvLYD+uQGV1/9ggaweWc7Q17ywcWmLfjubQnj8JCD/L29QxgMA EkWAWRjIz4QtyxU56PET96EpAN4HfHiBfoblEuJW/Azhn9ylF/ndftBi69Idz6lP 0/I9wGuIWUCAkXuJe1Qo5UamM55/pTBTXi+J36fhWmrp0HRmPsKBmw1Je87QNIow GnLzEN/NJcWbR15TG5ah74wiRezWl/Y8920lnj7QNjF5FzjqvaNjRCA+3wD/XxGj KzpXN7T8YO9A/SvcX5GdvWRbMI+mOA== -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:20 2025 by rpki-client