$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5d7ac3c-8442-3595-8cb4-0453aaa366bf.roa File: d5d7ac3c-8442-3595-8cb4-0453aaa366bf.roa (raw, json) Hash identifier: 3NOsAfINrIfL3Zx7mGNCptRjDjhX5SbMTkIlqOZWgO0= Subject key identifier: 79:66:82:7C:92:ED:C7:9B:55:2F:72:BE:B9:09:5D:A7:45:25:C3:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679785B74091F213A1EBAC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5d7ac3c-8442-3595-8cb4-0453aaa366bf.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.136.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:85:b7:40:91:f2:13:a1:eb:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=81586ac0-bd38-4a19-8cf6-cd32a6281cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1f:27:30:84:ab:0a:6e:44:5f:f9:5c:ce:14: 6d:74:4a:44:39:b5:a2:5b:f8:79:53:d3:46:73:80: 55:a6:ae:75:51:19:f6:66:8f:80:67:f7:59:7d:40: 47:41:c9:b8:70:49:70:af:15:8b:15:31:42:ec:c0: f0:3d:28:55:f6:2f:36:8b:49:71:dd:c4:5c:83:39: 65:1b:a8:1f:7b:f1:69:eb:96:61:03:72:f3:a2:ac: bc:6d:63:85:23:7c:98:6d:08:35:6a:4e:5c:b6:27: 03:36:ca:7e:84:8a:38:8d:9a:bc:67:8e:01:98:04: 2e:53:de:4b:e4:d0:5b:19:55:c4:d9:92:0c:80:c4: 4b:16:95:ab:e4:9d:f6:a6:ba:82:48:17:5b:73:e5: ef:d1:9d:7c:db:db:10:bc:f0:a9:71:9e:91:a2:dd: 1d:e4:54:d8:13:88:d3:41:fd:99:be:e4:4d:3b:4d: 1f:fd:90:83:b4:1c:d4:f3:0c:e9:b8:c7:1c:73:17: ab:99:cf:39:b4:54:81:f6:58:ce:fe:ca:ad:86:26: bb:de:6d:68:c5:e3:1f:91:c0:84:1a:66:ad:bf:90: 56:20:cb:9f:a2:d8:b7:fc:54:b5:0e:6a:7b:99:ed: a6:6d:64:f1:89:b8:23:1c:6e:6c:cd:74:40:ef:80: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:66:82:7C:92:ED:C7:9B:55:2F:72:BE:B9:09:5D:A7:45:25:C3:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5d7ac3c-8442-3595-8cb4-0453aaa366bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ea:fc:0a:8d:11:b0:03:28:e1:1c:27:2a:7a:72:8c:4a:9c: ad:73:d4:86:0a:3d:e4:5c:21:d7:09:3a:13:1f:31:66:7d:9b: 02:43:a1:14:79:a2:56:fc:35:55:dc:b9:a4:35:3b:d2:91:1c: 42:29:33:32:92:7c:55:41:b3:e7:b1:e3:2c:4e:34:59:24:94: ac:e4:b0:df:60:ef:cf:22:05:45:dd:ed:2c:0b:d4:7b:bb:70: 3e:54:17:1b:0c:3e:b0:c9:2d:03:f3:3f:05:44:fd:31:95:70: 63:26:57:69:ea:64:92:3d:4b:ac:9c:71:6c:33:2c:b0:99:3b: 7c:71:c5:1f:76:ca:b9:18:a8:24:a5:e7:51:d5:0c:03:4e:58: 6c:20:94:26:3d:ca:39:d3:5d:fd:97:68:26:ca:d3:82:b0:72: 74:f7:01:4d:b4:ec:4a:c4:2d:54:99:d1:cc:b5:35:5d:89:bc: ac:0c:d3:1c:db:ed:ac:49:31:5a:ec:0e:ae:0f:8f:94:e1:6f: 78:d9:fb:fd:2f:e2:86:c2:1f:af:69:ce:89:a6:75:21:fb:eb: 4f:38:d9:04:f5:64:5a:9a:86:02:db:74:ff:b4:c1:5d:52:bf: 33:92:31:d5:67:25:d2:35:0e:19:10:bc:03:5a:a9:90:c4:e9: 71:df:0f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4W3QJHyE6HrrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODE1ODZhYzAtYmQzOC00YTE5LThjZjYtY2QzMmE2MjgxY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh8nMISrCm5EX/lczhRtdEpEObWiW/h5U9NG c4BVpq51URn2Zo+AZ/dZfUBHQcm4cElwrxWLFTFC7MDwPShV9i82i0lx3cRcgzll G6gfe/Fp65ZhA3Lzoqy8bWOFI3yYbQg1ak5cticDNsp+hIo4jZq8Z44BmAQuU95L 5NBbGVXE2ZIMgMRLFpWr5J32prqCSBdbc+Xv0Z1829sQvPCpcZ6Rot0d5FTYE4jT Qf2ZvuRNO00f/ZCDtBzU8wzpuMcccxermc85tFSB9ljO/sqthia73m1oxeMfkcCE Gmatv5BWIMufoti3/FS1Dmp7me2mbWTxibgjHG5szXRA74DhZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlmgnyS7cebVS9yvrkJXadFJcNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDVkN2FjM2MtODQ0Mi0z NTk1LThjYjQtMDQ1M2FhYTM2NmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIohwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvq/AqNEbADKOEcJyp6coxKnK1z1IYKPeRcIdcJOhMfMWZ9mwJDoRR5 olb8NVXcuaQ1O9KRHEIpMzKSfFVBs+ex4yxONFkklKzksN9g788iBUXd7SwL1Hu7 cD5UFxsMPrDJLQPzPwVE/TGVcGMmV2nqZJI9S6yccWwzLLCZO3xxxR92yrkYqCSl 51HVDANOWGwglCY9yjnTXf2XaCbK04KwcnT3AU207ErELVSZ0cy1NV2JvKwM0xzb 7axJMVrsDq4Pj5Thb3jZ+/0v4obCH69pzommdSH760842QT1ZFqahgLbdP+0wV1S vzOSMdVnJdI1DhkQvANaqZDE6XHfD+Y= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:46 2025 by rpki-client