$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa File: cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa (raw, json) Hash identifier: nbq0Obz4A4LDIuY7gnr65KQR74V96Xv59tQf07IAzdA= Subject key identifier: 09:EA:14:21:24:AC:A4:B2:42:66:00:A4:6B:D8:7F:60:07:9E:72:A7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD5E443143F42B8DB35C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.121.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:5e:44:31:43:f4:2b:8d:b3:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c8f376fd-8ed3-4a0f-b627-39a621dec47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:0a:90:12:74:a6:d1:75:23:46:47:3e:8f: ca:a7:1d:85:2e:f9:78:e2:f4:cf:aa:85:52:cf:1f: 5c:36:b6:f6:9a:6b:01:7c:90:9d:f5:b9:7b:ff:f9: 74:77:09:89:b5:7b:26:28:a9:67:5e:11:76:3a:71: 0d:d4:3f:12:39:90:84:ae:07:0b:c6:96:5b:ef:eb: e1:de:c5:38:c4:98:cf:d5:dc:6a:aa:2a:1e:bf:a7: 8a:5c:ac:d0:5b:37:2b:b1:e1:be:97:e9:2d:5a:60: 9c:3d:d1:b1:87:28:99:be:da:4f:e7:78:d2:12:65: c5:81:d7:9a:58:b4:de:f8:3f:59:5d:82:2b:79:0f: fd:47:c5:79:a5:e5:02:9a:a5:2d:d8:a1:6e:06:f1: c8:b5:56:46:c0:d5:09:e5:60:9d:87:3e:36:44:ee: 7a:31:2c:dc:60:24:af:9d:c0:25:3f:90:83:c3:cd: 02:ff:0c:08:94:ba:38:1e:07:18:2d:d5:38:c1:5c: 3f:2a:d4:0b:b2:2d:1c:e7:ed:82:0e:5f:55:1f:87: 0c:bb:10:cb:39:4d:76:53:a3:54:93:fd:79:11:ca: 0d:41:90:1b:75:c0:98:f9:ac:e5:de:28:bd:5e:ab: dd:39:80:37:3c:95:c3:9e:b0:c3:99:4e:e0:25:29: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EA:14:21:24:AC:A4:B2:42:66:00:A4:6B:D8:7F:60:07:9E:72:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:60:ba:9e:c0:59:47:c1:3d:c4:2e:9d:57:1d:6f:00:1d:a7: 62:c2:18:2a:a9:39:85:37:2a:7d:0d:69:9b:c4:e2:e9:58:4b: fe:a5:a3:77:5b:4e:43:a2:9a:d0:be:b5:14:19:a8:0f:26:3b: 04:3a:38:50:96:e1:3a:ea:76:1a:d6:35:07:7a:21:7d:82:e6: da:34:a9:9b:15:d9:af:de:83:f5:99:eb:98:fd:a0:69:3f:1e: f8:ff:3d:ed:eb:60:f1:e3:d2:88:95:22:e5:ee:e7:0e:1b:da: 22:60:97:ba:bf:de:06:70:48:64:54:9f:37:a9:6b:06:be:68: 7e:c6:d9:f0:fe:0c:79:81:df:37:b1:0d:74:8b:07:5c:ed:b8: 55:48:99:bc:88:5d:40:50:95:fd:70:3e:3f:e2:08:7b:f9:e9: 95:2c:6f:89:38:69:ee:e1:38:57:9c:ba:2d:4f:bd:9a:c7:c7: f9:d5:d4:c9:b2:bc:3e:e6:38:b9:b6:8c:ef:f1:62:df:19:42: 87:81:04:dc:3c:30:62:ad:10:97:a5:8a:6d:95:c9:d3:46:94: 5f:5d:1b:a0:e6:8e:77:d1:53:af:48:1b:99:24:6e:e5:dd:9f: 51:9c:b0:dc:36:8d:5d:2a:38:c0:62:c9:23:7d:1a:41:1b:9c: ca:6d:6a:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzV5EMUP0K42zXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzhmMzc2ZmQtOGVkMy00YTBmLWI2MjctMzlhNjIxZGVjNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKAKkBJ0ptF1I0ZHPo/Kpx2FLvl44vTPqoVS zx9cNrb2mmsBfJCd9bl7//l0dwmJtXsmKKlnXhF2OnEN1D8SOZCErgcLxpZb7+vh 3sU4xJjP1dxqqioev6eKXKzQWzcrseG+l+ktWmCcPdGxhyiZvtpP53jSEmXFgdea WLTe+D9ZXYIreQ/9R8V5peUCmqUt2KFuBvHItVZGwNUJ5WCdhz42RO56MSzcYCSv ncAlP5CDw80C/wwIlLo4HgcYLdU4wVw/KtQLsi0c5+2CDl9VH4cMuxDLOU12U6NU k/15EcoNQZAbdcCY+azl3ii9XqvdOYA3PJXDnrDDmU7gJSnUEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnqFCEkrKSyQmYApGvYf2AHnnKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y4MmU5YzMtNTFiNS0z ZDNkLTg0ZDEtYzNlNDdjOTYwYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlgup7AWUfBPcQunVcdbwAdp2LCGCqpOYU3Kn0NaZvE4ulYS/6lo3db TkOimtC+tRQZqA8mOwQ6OFCW4TrqdhrWNQd6IX2C5to0qZsV2a/eg/WZ65j9oGk/ Hvj/Pe3rYPHj0oiVIuXu5w4b2iJgl7q/3gZwSGRUnzepawa+aH7G2fD+DHmB3zex DXSLB1ztuFVImbyIXUBQlf1wPj/iCHv56ZUsb4k4ae7hOFecui1PvZrHx/nV1Mmy vD7mOLm2jO/xYt8ZQoeBBNw8MGKtEJelim2VydNGlF9dG6DmjnfRU69IG5kkbuXd n1GcsNw2jV0qOMBiySN9GkEbnMptaus= -----END CERTIFICATE-----Generated at Mon Oct 20 20:16:41 2025 by rpki-client