$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa File: cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa (raw, json) Hash identifier: oBoluoGO72OHT75r9BhxFxPcEajoG5xhKpAP8QxB088= Subject key identifier: 0D:28:2D:5B:3F:52:48:D3:CF:37:06:FA:D2:C1:8E:E1:60:1F:D5:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B864CB6C1DE2F9A4A4A3EFF40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 19527 IP address blocks: 34.190.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b6:c1:de:2f:9a:4a:4a:3e:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=456c69bf-5e0b-4331-a0af-81259e761649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:91:52:97:04:b6:0c:74:53:64:d8:9e:8e:45: 23:2f:75:b5:a6:84:f4:13:3b:f5:13:91:61:40:52: 6f:90:c2:c0:71:21:64:d5:1e:d0:18:e9:86:a4:bf: 53:66:9d:7e:7b:af:e4:5a:bb:80:d4:68:1d:9e:e9: 11:c8:7a:7e:14:a6:81:f6:ef:cb:34:24:b1:89:4f: 72:cc:48:b8:f2:32:78:f3:a4:8b:ee:d0:ec:6a:0d: 46:3d:dd:4b:5a:50:e3:e6:cb:91:2d:eb:b2:07:05: bb:d7:4c:cd:55:42:14:c9:05:9e:12:98:61:e9:54: f5:37:fc:39:da:f8:8b:e6:b6:ef:04:fb:ec:44:9b: b0:e6:89:a5:dc:29:2e:6b:72:12:5a:f4:27:b0:06: e2:77:47:ba:80:f7:54:de:36:da:7f:34:61:bc:fc: c4:ea:cf:16:ee:e6:dd:e7:7c:9a:e9:1c:e7:22:c7: 1e:81:a5:d2:c5:64:89:1c:18:94:78:47:c2:a4:b7: 37:0d:27:b4:c8:6b:88:d0:84:85:30:d9:1a:7d:b6: 77:1d:e6:23:ae:79:2c:f9:55:40:43:d5:9b:3d:70: 5d:c5:08:23:f5:68:f5:6b:c3:d0:c6:31:e1:e7:22: 51:d7:e9:65:e2:22:bc:13:3f:74:41:5c:5c:4b:6f: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:28:2D:5B:3F:52:48:D3:CF:37:06:FA:D2:C1:8E:E1:60:1F:D5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d2:ab:a2:b3:61:8c:f8:4d:88:18:da:05:92:64:dc:d0:c2: 5c:f2:86:95:b1:ce:87:36:a2:13:bb:63:3d:d4:97:1a:c5:f2: 43:3f:2c:ec:94:d7:b4:fd:eb:97:d7:b0:b4:34:74:13:24:10: 86:24:f5:de:8a:3c:eb:1c:a7:b5:b2:07:0f:4e:fa:38:9e:c3: ed:21:b3:7d:0e:00:95:d2:60:0c:61:eb:67:cb:76:65:b8:79: 35:fb:dc:c0:54:84:b1:4a:62:ae:a2:90:42:d2:cc:9e:80:37: 0b:a7:49:1d:db:0f:4d:09:e4:c3:9a:9d:5f:1d:b8:0c:64:39: a4:33:4c:21:6c:ff:0e:fc:a3:11:b6:74:68:64:92:81:94:ca: 88:e6:04:53:45:bc:da:01:e0:2a:f4:f9:9c:95:1b:0d:bc:6a: e1:8f:d4:e4:fc:80:1e:63:c5:cb:f3:e5:85:a8:5c:e4:19:b8: 47:c2:1a:d1:cf:4a:9f:f3:df:3e:26:b8:79:b7:fa:09:04:d3: 48:e0:8a:15:3b:26:0d:ed:e0:3c:d6:24:d0:a3:59:83:41:e3: 40:51:ba:b0:92:71:72:25:ee:e5:1d:fd:b5:93:e6:bb:87:6b: 53:19:e4:b0:9a:fc:4e:fe:dd:0f:24:ad:3f:73:ff:bf:00:93: e4:15:ba:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTLbB3i+aSko+/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk NDU2YzY5YmYtNWUwYi00MzMxLWEwYWYtODEyNTllNzYxNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZFSlwS2DHRTZNiejkUjL3W1poT0Ezv1E5Fh QFJvkMLAcSFk1R7QGOmGpL9TZp1+e6/kWruA1GgdnukRyHp+FKaB9u/LNCSxiU9y zEi48jJ486SL7tDsag1GPd1LWlDj5suRLeuyBwW710zNVUIUyQWeEphh6VT1N/w5 2viL5rbvBPvsRJuw5oml3Ckua3ISWvQnsAbid0e6gPdU3jbafzRhvPzE6s8W7ubd 53ya6RznIscegaXSxWSJHBiUeEfCpLc3DSe0yGuI0ISFMNkafbZ3HeYjrnks+VVA Q9WbPXBdxQgj9Wj1a8PQxjHh5yJR1+ll4iK8Ez90QVxcS28e/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0oLVs/UkjTzzcG+tLBjuFgH9WpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZjZjI5MWMtOGRhYS0z YTk1LWI5NDItZjRkMjI0ZmRiZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/Sq6KzYYz4TYgY2gWSZNzQwlzyhpWxzoc2ohO7Yz3UlxrF8kM/LOyU 17T965fXsLQ0dBMkEIYk9d6KPOscp7WyBw9O+jiew+0hs30OAJXSYAxh62fLdmW4 eTX73MBUhLFKYq6ikELSzJ6ANwunSR3bD00J5MOanV8duAxkOaQzTCFs/w78oxG2 dGhkkoGUyojmBFNFvNoB4Cr0+ZyVGw28auGP1OT8gB5jxcvz5YWoXOQZuEfCGtHP Sp/z3z4muHm3+gkE00jgihU7Jg3t4DzWJNCjWYNB40BRurCScXIl7uUd/bWT5ruH a1MZ5LCa/E7+3Q8krT9z/78Ak+QVutU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:56:50 2025 by rpki-client