$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f068b724-074e-33c4-be1e-08d4b00df786.roa File: f068b724-074e-33c4-be1e-08d4b00df786.roa (raw, json) Hash identifier: N4v145OzGzNYFfaDFCOGkLFkcU/IrKcjLSlTYXsqoEE= Subject key identifier: A6:EC:BD:EA:2F:72:C6:7D:41:10:0E:86:77:13:DD:4C:AF:C3:C7:EE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67974E8B53F9A05EA7B68580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f068b724-074e-33c4-be1e-08d4b00df786.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.85.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:4e:8b:53:f9:a0:5e:a7:b6:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2f266bec-a4c4-4c95-a643-07920b4fffe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:d6:02:b6:d4:cb:13:d7:6a:d8:ff:36:51: 08:a4:cd:41:93:f3:85:6c:b5:c7:31:27:f7:e3:ce: 2a:4b:37:b6:72:01:68:69:97:33:77:f3:22:a4:e3: ef:c6:e0:2f:40:28:08:fc:56:3a:3e:71:74:a8:e3: fa:f0:cb:08:57:a4:8c:9d:ac:63:13:16:44:62:42: 53:38:db:4f:b1:c0:83:e6:c7:09:11:3f:e5:3f:29: 0c:e9:12:a4:14:f8:2b:f0:9d:11:cb:e0:20:91:49: 32:7b:d4:dc:0a:64:27:d2:37:5a:f4:4d:95:ae:76: 31:6e:26:72:5e:2b:1c:b9:66:5e:64:f4:12:b6:5f: 92:c3:f7:67:cb:9b:6f:e3:84:6a:98:ef:dc:b9:94: 86:f4:ee:a3:ce:2f:03:3a:1d:54:30:93:76:9b:2e: cc:56:84:22:8e:ce:33:3a:0f:8d:c2:99:35:50:66: 94:4c:5d:8a:ff:8c:65:4b:8f:cd:27:1b:9e:4f:72: f9:38:2a:d5:b9:65:4f:81:88:db:fe:1d:41:46:55: 76:ee:20:03:d5:d9:a9:13:84:ba:00:6a:2e:13:f4: 11:94:89:17:a8:22:19:79:54:d2:74:0b:85:ec:20: 0e:43:14:8a:81:39:fd:9a:d3:68:92:49:e7:8a:99: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EC:BD:EA:2F:72:C6:7D:41:10:0E:86:77:13:DD:4C:AF:C3:C7:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f068b724-074e-33c4-be1e-08d4b00df786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:06:37:8d:0a:07:6e:a5:26:34:f8:c0:92:e0:e5:6b:ad:96: 17:2f:ba:3c:92:b1:e4:3e:92:ec:94:45:b2:ad:2d:b1:01:1d: d9:2a:a2:28:82:9b:a1:c7:4c:f3:a5:4d:6c:28:51:73:0b:80: 63:bd:5a:8a:ac:14:16:08:bb:dc:1e:b3:07:55:7e:48:db:db: f0:ff:4a:fa:b7:92:cf:a6:20:f0:97:f6:99:9b:b7:b7:ed:d8: be:a8:df:4a:2e:60:f4:cf:3d:d3:15:95:a3:ca:08:f4:90:e5: 86:fb:a0:11:49:71:99:c3:23:ad:d2:27:96:9c:0f:58:ab:20: 57:37:db:00:ed:16:0c:a5:e4:46:d2:62:24:90:0a:06:56:cf: 73:b7:55:5c:bb:77:9a:a5:2b:f2:1e:ba:be:19:4a:26:8c:af: df:b9:64:a7:ad:bf:13:b3:e3:a4:d9:62:7f:3c:6c:76:19:da: 8d:28:ce:a7:67:0f:f7:02:0a:f9:ef:93:a2:4f:7e:ca:1c:44: 7f:42:8f:12:98:52:a2:6a:17:39:62:77:db:50:f8:bf:36:3c: 5a:51:bd:31:dc:d8:c5:0a:01:f9:8b:9e:80:3b:33:cd:33:0a: f0:a6:96:e3:95:35:ef:a6:38:6c:c2:2a:b1:4d:2a:67:6c:e9: af:2e:fd:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl06LU/mgXqe2hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmYyNjZiZWMtYTRjNC00Yzk1LWE2NDMtMDc5MjBiNGZmZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9HWArbUyxPXatj/NlEIpM1Bk/OFbLXHMSf3 484qSze2cgFoaZczd/MipOPvxuAvQCgI/FY6PnF0qOP68MsIV6SMnaxjExZEYkJT ONtPscCD5scJET/lPykM6RKkFPgr8J0Ry+AgkUkye9TcCmQn0jda9E2VrnYxbiZy XiscuWZeZPQStl+Sw/dny5tv44RqmO/cuZSG9O6jzi8DOh1UMJN2my7MVoQijs4z Og+Nwpk1UGaUTF2K/4xlS4/NJxueT3L5OCrVuWVPgYjb/h1BRlV27iAD1dmpE4S6 AGouE/QRlIkXqCIZeVTSdAuF7CAOQxSKgTn9mtNokknniplfmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbsveovcsZ9QRAOhncT3Uyvw8fuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA2OGI3MjQtMDc0ZS0z M2M0LWJlMWUtMDhkNGIwMGRmNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUGN40KB26lJjT4wJLg5WutlhcvujySseQ+kuyURbKtLbEBHdkqoiiC m6HHTPOlTWwoUXMLgGO9WoqsFBYIu9weswdVfkjb2/D/Svq3ks+mIPCX9pmbt7ft 2L6o30ouYPTPPdMVlaPKCPSQ5Yb7oBFJcZnDI63SJ5acD1irIFc32wDtFgyl5EbS YiSQCgZWz3O3VVy7d5qlK/Ieur4ZSiaMr9+5ZKetvxOz46TZYn88bHYZ2o0ozqdn D/cCCvnvk6JPfsocRH9CjxKYUqJqFzlid9tQ+L82PFpRvTHc2MUKAfmLnoA7M80z CvCmluOVNe+mOGzCKrFNKmds6a8u/Tk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:31 2025 by rpki-client