$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf60108d-6422-313a-9cd9-777c85bff898.roa File: bf60108d-6422-313a-9cd9-777c85bff898.roa (raw, json) Hash identifier: Qo3PXoDLIqQN8DgiOIWRS5AufNiqXFkDRLCUmpN27EQ= Subject key identifier: 32:EB:E2:A7:74:C8:41:F4:28:11:03:46:5B:B8:9A:CF:07:7B:64:34 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67979F60678B06C36CC16FA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf60108d-6422-313a-9cd9-777c85bff898.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.71.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:9f:60:67:8b:06:c3:6c:c1:6f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f770a49a-673d-4837-b452-c2cf231d6adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:54:af:75:53:40:46:5a:7d:c1:47:1c:c8: 29:06:24:71:51:95:99:a3:6f:f3:98:fe:58:ab:fe: a9:e0:3d:c1:53:06:50:2a:56:75:2d:03:c2:2f:eb: 8b:e8:1b:e2:c8:5b:7a:9e:d5:32:ab:84:5f:89:f2: 66:9d:93:0a:fb:07:89:c8:44:8f:6a:9e:69:93:60: 7d:33:4a:a0:69:13:8a:a7:f5:c8:19:ef:9c:0c:91: bb:50:12:c6:7c:97:be:48:27:0e:84:ef:65:fb:ed: 56:9e:c0:ae:d6:a7:93:17:42:ef:ec:1d:55:27:54: 6c:df:b8:24:e3:5e:9c:1e:d5:15:ba:26:8b:38:00: 36:7b:d5:53:3a:97:8e:b7:5f:29:30:59:cb:cf:c9: d1:62:29:93:ff:f6:87:93:0a:df:a9:67:11:0d:72: 24:44:4f:cd:0d:ee:7d:7c:94:60:db:ce:df:c6:1b: af:6c:c0:0b:11:ef:42:f5:5c:b1:81:c5:6d:4c:ae: 55:0e:20:c1:64:1e:65:2b:4c:9f:47:42:54:a6:0c: 23:df:76:e3:7a:69:de:3c:ea:aa:1b:6c:4d:a4:7e: e0:e9:a0:15:ce:08:b0:8c:51:e3:66:14:aa:3c:1e: ce:72:89:48:fd:77:cc:14:20:9d:bc:a9:7e:e6:31: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EB:E2:A7:74:C8:41:F4:28:11:03:46:5B:B8:9A:CF:07:7B:64:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf60108d-6422-313a-9cd9-777c85bff898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:30:f9:ec:60:37:1a:2c:fa:4c:90:02:1c:f7:3e:67:6b:54: a8:2d:b6:3c:70:28:06:9f:19:56:43:59:d6:22:17:c1:db:59: 1e:6f:c6:72:9a:97:f2:1f:2a:82:41:03:9a:80:94:c9:a8:b2: 24:bf:3e:20:44:e5:2b:27:88:10:5a:aa:4a:64:0f:9d:3b:84: 2d:4d:6a:b3:35:e7:95:d9:f2:b1:cb:1c:8f:4e:55:aa:14:48: 04:2a:8b:0c:b9:4e:87:c6:30:0a:3e:ae:1d:1d:80:4b:6c:48: a1:9b:76:9f:4c:cf:a8:9c:dd:61:fa:47:0e:47:c2:37:23:61: fc:6c:01:c9:c0:23:2a:ae:a4:f6:36:2f:a5:02:57:15:67:12: ca:f2:a0:9b:02:b3:7f:90:0b:e1:65:e3:56:fb:b4:9d:b7:e0: 34:0c:85:3a:3f:98:15:8d:ca:35:50:01:e9:60:ca:4c:76:af: 8f:0e:15:7c:4c:d6:09:e6:b4:12:c2:10:5d:2f:df:70:96:28: 21:94:df:3d:10:df:35:2f:c1:40:e0:1b:e4:4f:27:fe:0f:99: fa:45:91:4a:e4:fa:8a:1f:a2:71:9a:71:95:24:94:0a:e9:78: 20:d4:1f:0f:06:ff:38:af:c4:c4:51:4f:a1:7d:ba:ab:08:2d: 3d:88:bc:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl59gZ4sGw2zBb6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Zjc3MGE0OWEtNjczZC00ODM3LWI0NTItYzJjZjIzMWQ2YWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0pUr3VTQEZafcFHHMgpBiRxUZWZo2/zmP5Y q/6p4D3BUwZQKlZ1LQPCL+uL6BviyFt6ntUyq4RfifJmnZMK+weJyESPap5pk2B9 M0qgaROKp/XIGe+cDJG7UBLGfJe+SCcOhO9l++1WnsCu1qeTF0Lv7B1VJ1Rs37gk 416cHtUVuiaLOAA2e9VTOpeOt18pMFnLz8nRYimT//aHkwrfqWcRDXIkRE/NDe59 fJRg287fxhuvbMALEe9C9VyxgcVtTK5VDiDBZB5lK0yfR0JUpgwj33bjemnePOqq G2xNpH7g6aAVzgiwjFHjZhSqPB7OcolI/XfMFCCdvKl+5jGC+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLr4qd0yEH0KBEDRlu4ms8He2Q0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY2MDEwOGQtNjQyMi0z MTNhLTljZDktNzc3Yzg1YmZmODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEw+exgNxos+kyQAhz3PmdrVKgttjxwKAafGVZDWdYiF8HbWR5vxnKa l/IfKoJBA5qAlMmosiS/PiBE5SsniBBaqkpkD507hC1NarM155XZ8rHLHI9OVaoU SAQqiwy5TofGMAo+rh0dgEtsSKGbdp9Mz6ic3WH6Rw5HwjcjYfxsAcnAIyqupPY2 L6UCVxVnEsryoJsCs3+QC+Fl41b7tJ234DQMhTo/mBWNyjVQAelgykx2r48OFXxM 1gnmtBLCEF0v33CWKCGU3z0Q3zUvwUDgG+RPJ/4PmfpFkUrk+oofonGacZUklArp eCDUHw8G/zivxMRRT6F9uqsILT2IvCk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:43:42 2025 by rpki-client