$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca7e3781-d6de-35f1-96da-ea67e7ac9080.roa File: ca7e3781-d6de-35f1-96da-ea67e7ac9080.roa (raw, json) Hash identifier: JhXLtA09F9UJfAVU0Nintud6ViddDlVf+eEUrX3UyYE= Subject key identifier: B5:43:CF:FC:8C:ED:AB:0B:97:71:8F:7B:D4:51:4F:7F:B6:E0:4C:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797757699B2FF6F7B59E9A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca7e3781-d6de-35f1-96da-ea67e7ac9080.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.125.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:75:76:99:b2:ff:6f:7b:59:e9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1c4aaa67-68a3-4006-a711-4abad1ab65c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1c:c0:9e:41:08:5b:32:f0:95:9d:8d:32:90: c5:d9:3c:fb:0d:e5:6d:3d:70:f8:80:20:4c:41:d4: 32:51:88:9d:dd:3b:e8:da:5e:a4:d2:da:f4:da:8e: e2:f4:95:fc:47:4a:40:df:72:d9:bb:6d:9a:5c:d7: 5b:3c:6f:90:49:04:9d:bb:7a:f9:b8:11:fd:7d:57: c6:d8:cc:19:ae:da:53:20:56:77:1a:11:08:68:3a: 5d:95:5e:45:ed:a8:92:1c:b5:fa:e4:1b:c1:bb:6d: f3:1d:35:7c:4e:21:16:8e:4a:6c:cf:19:b5:5e:31: d7:f3:6d:7e:1e:aa:84:9c:d3:c5:2d:1f:8f:4d:9a: 99:fb:59:b2:d8:7b:a0:3a:82:43:5e:b3:8c:58:ce: 41:32:cb:23:b4:e0:9e:63:b1:13:16:dc:df:60:24: 56:51:88:e9:55:0f:b0:22:40:87:ed:ea:f8:84:7c: af:58:e6:a3:ca:c2:99:f5:31:32:1b:15:21:e0:8c: a2:54:f2:be:4b:93:9e:b8:fc:57:af:a3:6b:75:70: 56:bf:f8:d8:4b:8f:cf:c7:ef:2b:2d:76:f6:a1:b4: 03:1c:33:c6:67:12:7f:fc:22:8e:aa:f2:ed:e1:13: 5d:5d:a3:3c:15:b4:cb:ae:73:73:79:dc:a9:75:76: 2a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:43:CF:FC:8C:ED:AB:0B:97:71:8F:7B:D4:51:4F:7F:B6:E0:4C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca7e3781-d6de-35f1-96da-ea67e7ac9080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.125.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:58:53:47:1b:0b:82:03:f4:e0:60:ec:e2:43:87:fc:3e:e4: 02:55:d0:c4:ce:ce:87:22:c0:94:55:70:5b:b7:38:80:79:77: 03:df:32:a8:64:13:cf:b4:35:ac:53:13:12:00:06:2f:cf:32: d9:59:c6:29:b3:16:63:8b:c2:0f:05:51:ab:6c:20:ee:c4:1c: 0f:3d:f2:a1:86:61:de:da:46:27:84:2d:97:3c:48:c2:16:51: 67:a8:77:5a:6f:b9:d3:05:d4:80:9a:39:03:9b:80:4a:05:b0: 35:bb:d3:74:46:f5:eb:2b:be:67:d9:a8:3c:ed:17:43:a6:87: 29:a3:0c:9b:47:46:1d:5e:bf:2a:26:64:ef:a4:4e:00:ec:01: 72:cb:ea:32:48:45:a0:d5:37:8f:0b:e0:95:68:db:fa:e0:6f: bc:1a:38:d7:a9:f6:f6:95:9b:83:75:1f:e2:37:34:de:84:a1: 9b:ff:da:57:e2:f8:49:89:c6:09:c6:38:8e:90:70:12:2f:90: 43:61:8d:6b:f4:80:0f:8c:2d:3f:f8:af:6e:a8:65:7a:ed:d5: 00:9a:9e:60:13:b2:f7:ca:1c:a0:28:9f:c2:01:a9:fc:89:36: 56:9e:fe:07:b1:92:a7:20:ad:93:33:5c:59:72:af:9c:6d:a7: c9:81:8e:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3V2mbL/b3tZ6aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWM0YWFhNjctNjhhMy00MDA2LWE3MTEtNGFiYWQxYWI2NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxzAnkEIWzLwlZ2NMpDF2Tz7DeVtPXD4gCBM QdQyUYid3Tvo2l6k0tr02o7i9JX8R0pA33LZu22aXNdbPG+QSQSdu3r5uBH9fVfG 2MwZrtpTIFZ3GhEIaDpdlV5F7aiSHLX65BvBu23zHTV8TiEWjkpszxm1XjHX821+ HqqEnNPFLR+PTZqZ+1my2HugOoJDXrOMWM5BMssjtOCeY7ETFtzfYCRWUYjpVQ+w IkCH7er4hHyvWOajysKZ9TEyGxUh4IyiVPK+S5OeuPxXr6NrdXBWv/jYS4/Px+8r LXb2obQDHDPGZxJ//CKOqvLt4RNdXaM8FbTLrnNzedypdXYqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVDz/yM7asLl3GPe9RRT3+24EyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2E3ZTM3ODEtZDZkZS0z NWYxLTk2ZGEtZWE2N2U3YWM5MDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZYU0cbC4ID9OBg7OJDh/w+5AJV0MTOzociwJRVcFu3OIB5dwPfMqhk E8+0NaxTExIABi/PMtlZximzFmOLwg8FUatsIO7EHA898qGGYd7aRieELZc8SMIW UWeod1pvudMF1ICaOQObgEoFsDW703RG9esrvmfZqDztF0OmhymjDJtHRh1evyom ZO+kTgDsAXLL6jJIRaDVN48L4JVo2/rgb7waONep9vaVm4N1H+I3NN6EoZv/2lfi +EmJxgnGOI6QcBIvkENhjWv0gA+MLT/4r26oZXrt1QCanmATsvfKHKAon8IBqfyJ Nlae/gexkqcgrZMzXFlyr5xtp8mBjrI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:42 2025 by rpki-client