$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de8acd64-be66-3782-a5b5-279e4662e5e6.roa File: de8acd64-be66-3782-a5b5-279e4662e5e6.roa (raw, json) Hash identifier: P7vc7jfMrh3J1yjYMYWMB7r8uCMoHGZKilvcbh4yJC4= Subject key identifier: 79:F5:EE:AC:32:F9:51:2C:20:43:63:B7:0A:A6:2C:51:1D:8B:5A:CD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B5908CEC7E808F673D40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de8acd64-be66-3782-a5b5-279e4662e5e6.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.84.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b5:90:8c:ec:7e:80:8f:67:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5d1bc7f7-b23a-4dbd-b031-387dac2afe84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:07:3e:c5:f1:fe:fb:2a:f0:2d:4b:5b:99:27: c7:22:92:b9:22:66:c3:74:01:ff:07:ed:54:a9:ec: af:9c:1c:3d:a1:d1:2f:aa:2d:9d:29:1d:4c:9c:b7: ea:15:1a:e9:8a:3b:a1:5c:1b:a9:95:ec:d1:b4:01: b1:dd:b9:22:4c:64:ab:85:38:ba:13:8d:30:7e:87: 03:2e:88:5c:68:6f:0c:c4:35:8a:22:46:be:c8:cd: 31:25:7c:3e:3c:e7:d9:b2:b6:73:e0:09:d2:02:a6: 49:b6:3d:38:72:45:d9:57:fe:ac:b0:d9:b1:b6:09: 2a:8c:8c:28:5b:dd:f7:f8:86:f5:6c:f9:49:2e:22: e5:a8:41:de:b3:93:3e:0b:85:e4:88:ee:da:ca:4a: 85:15:82:04:07:cd:f2:19:57:3d:ae:23:44:79:8e: 15:71:63:3a:fd:b4:48:c2:ec:da:20:14:e4:85:36: a5:8e:b8:09:7c:ff:38:d9:55:85:ef:16:11:31:8d: 93:ef:06:34:b0:05:26:72:76:a1:c7:25:ec:9a:4c: d1:28:f1:82:89:e4:11:e9:5c:ad:13:99:39:bd:3f: 85:9e:0a:f7:05:31:6d:3e:10:ae:1c:1e:86:ad:50: 61:a4:c0:dc:1b:28:15:d2:53:76:5a:cd:cf:e5:51: 92:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F5:EE:AC:32:F9:51:2C:20:43:63:B7:0A:A6:2C:51:1D:8B:5A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de8acd64-be66-3782-a5b5-279e4662e5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3a:b3:c0:43:b6:f8:b3:c2:91:16:53:a6:e7:c0:2d:80:cc: f5:91:fc:8b:6e:1f:f4:3e:b1:2b:6c:f1:c6:71:8e:e3:c0:ec: dd:4f:50:cd:3b:70:0f:39:2d:a8:ef:00:33:d5:11:17:a5:cb: 25:90:d1:ab:7d:48:ff:5b:b0:52:7d:55:84:13:9a:9d:a9:b1: 2a:5f:78:37:c3:33:48:cd:97:97:31:e2:d2:8e:ea:2a:df:55: 8d:d5:2c:b1:26:23:de:39:00:1b:92:4e:09:d2:01:51:90:1d: 30:0c:f1:53:0f:b8:d4:96:c8:bd:1a:73:d0:ad:f6:d5:a4:f9: c7:1b:32:9b:1d:20:ab:81:94:ef:13:7f:9d:8b:fb:14:07:b8: cd:72:11:fa:af:8a:09:40:52:cf:de:6a:33:43:fe:4a:db:99: 16:1a:44:73:ed:9e:12:71:f7:27:7e:85:af:5c:6b:57:40:0a: 52:18:32:f2:89:ee:ce:71:57:a4:b8:21:45:78:21:3e:ab:7c: d3:0f:99:80:ee:ed:10:d8:37:08:15:36:b3:e1:23:18:92:4d: eb:40:c1:d1:27:e3:49:2a:5e:dd:d3:27:15:af:70:f5:60:fa: f9:ec:1e:13:e7:41:c3:45:65:f9:3e:9c:e0:e1:7f:d7:59:b5: c6:64:a4:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7WQjOx+gI9nPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NWQxYmM3ZjctYjIzYS00ZGJkLWIwMzEtMzg3ZGFjMmFmZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQc+xfH++yrwLUtbmSfHIpK5ImbDdAH/B+1U qeyvnBw9odEvqi2dKR1MnLfqFRrpijuhXBuplezRtAGx3bkiTGSrhTi6E40wfocD LohcaG8MxDWKIka+yM0xJXw+POfZsrZz4AnSAqZJtj04ckXZV/6ssNmxtgkqjIwo W933+Ib1bPlJLiLlqEHes5M+C4XkiO7aykqFFYIEB83yGVc9riNEeY4VcWM6/bRI wuzaIBTkhTaljrgJfP842VWF7xYRMY2T7wY0sAUmcnahxyXsmkzRKPGCieQR6Vyt E5k5vT+Fngr3BTFtPhCuHB6GrVBhpMDcGygV0lN2Ws3P5VGSpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHn17qwy+VEsIENjtwqmLFEdi1rNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGU4YWNkNjQtYmU2Ni0z NzgyLWE1YjUtMjc5ZTQ2NjJlNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF06s8BDtvizwpEWU6bnwC2AzPWR/ItuH/Q+sSts8cZxjuPA7N1PUM07 cA85LajvADPVERelyyWQ0at9SP9bsFJ9VYQTmp2psSpfeDfDM0jNl5cx4tKO6irf VY3VLLEmI945ABuSTgnSAVGQHTAM8VMPuNSWyL0ac9Ct9tWk+ccbMpsdIKuBlO8T f52L+xQHuM1yEfqviglAUs/eajND/krbmRYaRHPtnhJx9yd+ha9ca1dAClIYMvKJ 7s5xV6S4IUV4IT6rfNMPmYDu7RDYNwgVNrPhIxiSTetAwdEn40kqXt3TJxWvcPVg +vnsHhPnQcNFZfk+nODhf9dZtcZkpGs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:09 2025 by rpki-client