$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3d22f7f-3276-3f59-b7b7-c41f4028039a.roa File: c3d22f7f-3276-3f59-b7b7-c41f4028039a.roa (raw, json) Hash identifier: sZPDTu3VdDe+InP7bnDwOWlGtb6YpLEK9HOppxyh+j0= Subject key identifier: C0:19:87:DE:93:1B:65:00:75:6B:EA:6B:13:DC:7F:F0:9C:5A:30:73 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67975A1DEB552510E6AB9CC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3d22f7f-3276-3f59-b7b7-c41f4028039a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:5a:1d:eb:55:25:10:e6:ab:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1d3a6206-e355-4215-bb3f-1b39d990edca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c4:47:41:6d:74:9e:78:8b:c4:04:dd:2c:8e: 6b:41:93:9b:cb:18:10:66:f5:b3:ce:62:a4:31:95: 59:79:1a:fd:1e:0d:53:78:a2:7c:82:58:b5:65:89: 9d:3a:d3:c5:dd:1c:51:2b:c5:8c:50:14:52:17:ec: e5:28:d5:7d:55:c4:5c:1d:55:93:91:d6:fc:2b:21: 8d:a7:fc:58:5d:6a:8d:44:0e:c3:3b:b4:7c:dc:3d: 8c:03:8b:55:21:9e:1f:d7:8c:6e:2f:b3:e4:79:f1: be:dc:83:99:4c:af:05:0f:04:d6:d5:c5:a2:af:b9: 69:d1:42:05:46:2c:7e:ea:c5:9c:77:a6:bf:39:71: dc:6a:45:91:73:da:b3:48:0e:40:0b:c1:ac:da:42: a8:f1:fa:99:0c:da:bd:5f:37:bd:0c:7d:c8:8b:7e: 8f:a6:84:ad:1e:39:0a:a5:a6:6c:b6:4e:ff:b7:3e: 12:77:13:0f:9f:ed:a2:4e:7c:d8:31:d3:0c:76:26: ae:f4:29:5e:0e:fe:b9:f4:ad:22:45:54:e3:61:04: 0d:c3:ec:30:32:81:31:ab:b8:c4:ae:ed:f1:7d:6e: ff:7d:32:bb:0f:0c:ee:88:f3:06:2e:6b:ea:41:82: dc:c5:5e:2d:94:9c:a9:68:52:1e:11:38:be:b9:a2: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:19:87:DE:93:1B:65:00:75:6B:EA:6B:13:DC:7F:F0:9C:5A:30:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3d22f7f-3276-3f59-b7b7-c41f4028039a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b9:e8:05:f7:dc:c8:55:0e:24:0f:68:5d:e7:5c:ff:d9:5f: 9b:a2:84:16:a7:f9:20:77:f5:ba:d0:eb:df:7b:cb:9e:80:98: 65:2a:48:73:eb:36:ae:73:03:da:1f:53:2a:21:67:c3:69:95: 60:99:bb:94:bc:15:d9:ca:3f:17:eb:6f:c5:1a:f0:99:9d:1b: 71:bc:8c:28:22:4c:7f:95:44:cd:4b:0b:24:8e:34:16:27:20: f8:76:c7:80:86:d8:cd:c3:0c:d0:f6:53:a9:5e:59:2d:43:b5: 3e:0e:c2:2c:ae:05:e2:c2:58:ee:b6:04:17:32:59:ba:db:c4: f1:ec:22:f3:d4:c7:59:09:26:8b:1d:b8:88:81:a7:fc:12:a0: 0f:da:cd:49:ee:e0:a4:3f:1c:d4:c6:3a:23:4f:2c:46:90:98: ed:08:c7:1d:17:8f:d5:f6:65:f1:02:7c:f3:d3:3a:2f:76:b3: af:bc:24:b0:fa:a8:e9:ad:6d:3b:0a:f9:a1:48:3d:12:5d:ca: 7e:6c:ed:c1:0a:6f:2a:0c:27:5e:2e:6b:19:8a:01:83:f3:6b: 95:54:de:5e:44:c4:ea:11:af:fe:a7:f4:72:4f:40:da:78:17: c4:43:8e:d2:e3:33:14:0d:a7:f1:56:f6:ec:e4:24:96:81:27: 32:18:04:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1od61UlEOarnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWQzYTYyMDYtZTM1NS00MjE1LWJiM2YtMWIzOWQ5OTBlZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMRHQW10nniLxATdLI5rQZObyxgQZvWzzmKk MZVZeRr9Hg1TeKJ8gli1ZYmdOtPF3RxRK8WMUBRSF+zlKNV9VcRcHVWTkdb8KyGN p/xYXWqNRA7DO7R83D2MA4tVIZ4f14xuL7PkefG+3IOZTK8FDwTW1cWir7lp0UIF Rix+6sWcd6a/OXHcakWRc9qzSA5AC8Gs2kKo8fqZDNq9Xze9DH3Ii36PpoStHjkK paZstk7/tz4SdxMPn+2iTnzYMdMMdiau9CleDv659K0iRVTjYQQNw+wwMoExq7jE ru3xfW7/fTK7DwzuiPMGLmvqQYLcxV4tlJypaFIeETi+uaLbMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAZh96TG2UAdWvqaxPcf/CcWjBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzNkMjJmN2YtMzI3Ni0z ZjU5LWI3YjctYzQxZjQwMjgwMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi56AX33MhVDiQPaF3nXP/ZX5uihBan+SB39brQ6997y56AmGUqSHPr Nq5zA9ofUyohZ8NplWCZu5S8FdnKPxfrb8Ua8JmdG3G8jCgiTH+VRM1LCySONBYn IPh2x4CG2M3DDND2U6leWS1DtT4OwiyuBeLCWO62BBcyWbrbxPHsIvPUx1kJJosd uIiBp/wSoA/azUnu4KQ/HNTGOiNPLEaQmO0Ixx0Xj9X2ZfECfPPTOi92s6+8JLD6 qOmtbTsK+aFIPRJdyn5s7cEKbyoMJ14uaxmKAYPza5VU3l5ExOoRr/6n9HJPQNp4 F8RDjtLjMxQNp/FW9uzkJJaBJzIYBFU= -----END CERTIFICATE-----Generated at Mon Oct 20 20:16:42 2025 by rpki-client