$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf31511b-1dd6-300f-9dcb-a0132ebd8970.roa File: bf31511b-1dd6-300f-9dcb-a0132ebd8970.roa (raw, json) Hash identifier: xNtkpmW1BNv2SiDAlGXqD8ACBah7pkYCy7jDv/JpyLc= Subject key identifier: 0D:B8:02:3B:85:55:D5:36:ED:F4:21:5C:5B:EA:11:FB:D1:91:EA:6E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B233193488B471B67CEDF62E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf31511b-1dd6-300f-9dcb-a0132ebd8970.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 19527 IP address blocks: 34.2.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:93:48:8b:47:1b:67:ce:df:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=af10d0e2-f712-4f8b-8156-4acf1079e8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:94:3b:33:ec:c4:55:f9:00:fa:88:4b:33: 6f:4c:07:d6:af:73:37:8c:8b:49:7a:37:b9:56:72: 89:b0:1c:ec:d6:02:0e:86:aa:8b:64:57:48:23:b0: de:ca:c0:20:f3:24:70:f6:b4:60:ab:42:72:e5:9d: d1:29:b9:87:5c:17:e3:df:75:12:ef:69:7a:85:7d: e1:bc:4d:7e:01:f8:9a:28:ce:48:f9:e2:db:6d:c9: e8:e9:6c:33:97:3f:30:2c:39:b9:b1:d2:cd:8e:52: cd:4b:86:83:00:c8:fc:b0:4d:53:d2:76:75:57:4a: 97:b8:97:3e:9b:12:7d:46:f1:c3:72:9c:83:40:7d: 54:78:10:53:f3:30:2f:7c:d4:24:e6:5f:66:cf:a2: c3:c3:1b:33:b3:38:da:a7:61:17:b1:4d:4a:1b:40: ba:9a:81:f0:f0:ed:3a:6c:5a:96:7b:90:fe:a9:81: 7d:65:4c:42:f0:73:77:87:52:3f:52:8a:28:b8:18: c0:0d:23:dc:a4:f0:c1:6d:a2:6b:ce:e0:02:55:2e: e4:d8:71:85:97:8c:52:82:14:5f:21:a0:3c:1f:f7: e9:0b:39:54:fb:06:e0:29:48:3c:84:05:1d:f3:11: 4a:37:58:16:78:3a:26:69:76:aa:95:d1:36:4e:1b: 26:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B8:02:3B:85:55:D5:36:ED:F4:21:5C:5B:EA:11:FB:D1:91:EA:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf31511b-1dd6-300f-9dcb-a0132ebd8970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:fe:f3:13:50:c9:0a:9c:cc:9d:82:ec:93:b6:98:99:e2:c7: b7:cc:79:c7:91:88:8a:bc:7a:5e:13:0d:cd:3b:bf:1a:ac:a6: 97:47:0f:94:fe:0d:73:35:f7:40:b8:ec:95:93:cd:ca:02:fb: c1:cd:00:69:91:e7:78:37:de:07:98:fe:9a:a6:ce:75:51:a1: 19:c8:0c:be:0a:90:e7:94:6a:1a:a3:20:f5:04:e5:7c:5f:7d: 53:db:09:a8:4c:51:da:db:48:13:3c:a6:18:8d:f8:26:92:1f: 91:63:23:a6:8f:f2:6a:b0:a9:5e:e8:b6:ac:70:bb:89:c7:ea: 95:5a:77:28:a3:b8:fd:a3:af:51:1a:f0:6a:df:b9:43:17:31: 40:fc:97:af:7b:7d:e9:ab:81:8c:45:73:16:34:1e:e8:44:a9: 88:9b:d9:c1:42:ef:ca:66:9a:34:33:d6:07:08:8f:f4:0d:24: 70:63:8c:25:b9:88:d3:97:11:b2:b5:2f:73:a2:d9:cb:8f:c9: d2:ea:0b:87:68:d7:0e:93:62:58:9a:a9:79:23:a6:a3:fd:26: 12:d0:68:76:2b:eb:a0:dd:18:03:10:c5:6f:1a:9d:4b:40:96: b5:ea:39:62:bb:5b:38:18:05:62:63:f7:1a:35:15:59:0f:cd: ee:74:6c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZNIi0cbZ87fYuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YWYxMGQwZTItZjcxMi00ZjhiLTgxNTYtNGFjZjEwNzllOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCWUOzPsxFX5APqISzNvTAfWr3M3jItJeje5 VnKJsBzs1gIOhqqLZFdII7DeysAg8yRw9rRgq0Jy5Z3RKbmHXBfj33US72l6hX3h vE1+AfiaKM5I+eLbbcno6Wwzlz8wLDm5sdLNjlLNS4aDAMj8sE1T0nZ1V0qXuJc+ mxJ9RvHDcpyDQH1UeBBT8zAvfNQk5l9mz6LDwxszszjap2EXsU1KG0C6moHw8O06 bFqWe5D+qYF9ZUxC8HN3h1I/UooouBjADSPcpPDBbaJrzuACVS7k2HGFl4xSghRf IaA8H/fpCzlU+wbgKUg8hAUd8xFKN1gWeDomaXaqldE2ThsmOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA24AjuFVdU27fQhXFvqEfvRkepuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYzMTUxMWItMWRkNi0z MDBmLTlkY2ItYTAxMzJlYmQ4OTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr+8xNQyQqczJ2C7JO2mJnix7fMeceRiIq8el4TDc07vxqsppdHD5T+ DXM190C47JWTzcoC+8HNAGmR53g33geY/pqmznVRoRnIDL4KkOeUahqjIPUE5Xxf fVPbCahMUdrbSBM8phiN+CaSH5FjI6aP8mqwqV7otqxwu4nH6pVadyijuP2jr1Ea 8GrfuUMXMUD8l697femrgYxFcxY0HuhEqYib2cFC78pmmjQz1gcIj/QNJHBjjCW5 iNOXEbK1L3Oi2cuPydLqC4do1w6TYliaqXkjpqP9JhLQaHYr66DdGAMQxW8anUtA lrXqOWK7WzgYBWJj9xo1FVkPze50bG8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:06:58 2025 by rpki-client