$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/065b4aec-609e-3afe-b52f-8e5bfd8228c6.roa File: 065b4aec-609e-3afe-b52f-8e5bfd8228c6.roa (raw, json) Hash identifier: jH8Ezwvx+Pj/VmIscX7Fc6clfKqbzsGYhl/ZS5dEVDE= Subject key identifier: B9:40:44:90:61:45:6B:DD:2B:06:9A:1D:BB:AE:2D:24:40:DB:B9:CF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B9EEFE2232149FA072EFE7E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/065b4aec-609e-3afe-b52f-8e5bfd8228c6.roa Signing time: Thu 23 Oct 2025 20:48:45 +0000 ROA not before: Thu 23 Oct 2025 20:48:45 +0000 ROA not after: Wed 21 Jan 2026 21:48:45 +0000 asID: 396982 IP address blocks: 34.3.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:ef:e2:23:21:49:fa:07:2e:fe:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 23 20:48:45 2025 GMT Not After : Jan 21 21:48:45 2026 GMT Subject: CN=a1e6dd89-abfb-4677-82ea-d171d4f2e7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:22:55:16:ca:a6:98:2e:fc:d5:2b:51:12:58: ce:68:0c:db:56:2c:71:47:73:bd:0f:18:48:57:64: d9:a8:b2:9b:40:a2:6e:79:16:73:2e:46:bb:ca:ad: 18:2e:09:70:d1:12:f4:91:37:fd:78:0a:c3:fe:75: 51:d1:07:dd:69:d6:77:7f:26:6a:66:f4:5f:e6:53: a1:4c:80:7e:a3:69:38:77:70:36:89:ee:3a:6a:62: 56:81:a9:22:07:ed:ff:62:15:06:15:08:2f:e5:e7: e3:6d:0e:e8:3f:8b:4d:24:e6:2c:a8:d3:3b:63:de: a6:4c:f7:38:0f:85:8f:70:d3:ab:4c:82:72:49:55: d0:f9:1d:c6:db:16:04:66:f0:16:c8:5b:02:46:1c: 96:5c:c9:aa:c6:d2:d1:b4:13:f7:64:83:f6:ca:d5: 5f:85:3f:59:06:d4:f0:c4:c0:c1:82:fd:e8:e5:ce: 8d:db:0f:42:ea:3b:0e:24:22:38:e2:ee:e9:eb:57: a9:a6:10:b3:bd:55:63:2e:e6:4d:2a:76:ba:0d:db: c6:c0:d3:05:ac:5d:c0:91:c6:3b:c1:02:f7:d6:4c: cc:ea:8f:f2:4d:1c:d1:f5:0b:69:a1:3a:c0:b8:07: cb:7a:15:fb:d5:43:31:98:65:88:6c:7e:6a:e5:db: 8f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:44:90:61:45:6B:DD:2B:06:9A:1D:BB:AE:2D:24:40:DB:B9:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/065b4aec-609e-3afe-b52f-8e5bfd8228c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c8:d3:6c:98:7e:fc:7f:98:0c:6b:b7:c9:6e:78:4a:03:8e: 8f:d5:d5:de:49:82:61:44:41:9a:2e:28:89:e5:73:43:7c:da: 8a:62:5b:d8:aa:59:3f:52:47:8e:d0:f0:5b:96:c8:1f:49:11: 8e:aa:ac:64:0f:66:c2:6f:2c:57:bf:66:8a:a8:85:20:e0:75: e5:7f:53:ad:3f:55:88:b0:0f:93:dd:f6:6d:53:2a:7d:d4:3c: f9:99:d6:7d:40:be:49:47:e1:2a:d7:5f:28:88:84:d8:76:ff: c5:7f:76:b6:77:bc:6b:63:d6:ab:cb:4b:e4:e0:7d:2d:d9:b8: 0d:28:23:69:c0:aa:b4:90:af:50:97:1b:43:06:ac:80:c5:be: ac:45:d0:c2:6b:22:2a:1d:e2:6d:70:3a:d7:42:9b:95:01:48: e8:4d:1b:ce:c5:15:75:31:54:97:d9:1f:f9:1b:aa:50:29:29: f7:e6:da:2a:b4:35:05:58:9d:22:f6:8f:4f:ca:94:d2:e0:29: 5b:2f:80:76:da:35:f9:77:52:a6:59:8b:c9:3a:a3:d6:11:2e: cb:58:bd:f1:70:42:53:61:8d:b5:5d:67:45:5a:c7:1f:f3:4a: cf:81:33:9f:2d:11:b0:46:ad:0c:89:5a:2f:9a:d7:2a:18:a6: b5:0a:d8:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEue7+IjIUn6By7+fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyMzIwNDg0NVoXDTI2MDEyMTIxNDg0NVowLzEtMCsGA1UEAxMk YTFlNmRkODktYWJmYi00Njc3LTgyZWEtZDE3MWQ0ZjJlN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SJVFsqmmC781StREljOaAzbVixxR3O9DxhI V2TZqLKbQKJueRZzLka7yq0YLglw0RL0kTf9eArD/nVR0QfdadZ3fyZqZvRf5lOh TIB+o2k4d3A2ie46amJWgakiB+3/YhUGFQgv5efjbQ7oP4tNJOYsqNM7Y96mTPc4 D4WPcNOrTIJySVXQ+R3G2xYEZvAWyFsCRhyWXMmqxtLRtBP3ZIP2ytVfhT9ZBtTw xMDBgv3o5c6N2w9C6jsOJCI44u7p61epphCzvVVjLuZNKna6DdvGwNMFrF3AkcY7 wQL31kzM6o/yTRzR9QtpoTrAuAfLehX71UMxmGWIbH5q5duPZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlARJBhRWvdKwaaHbuuLSRA27nPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDY1YjRhZWMtNjA5ZS0z YWZlLWI1MmYtOGU1YmZkODIyOGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHI02yYfvx/mAxrt8lueEoDjo/V1d5JgmFEQZouKInlc0N82opiW9iq WT9SR47Q8FuWyB9JEY6qrGQPZsJvLFe/ZoqohSDgdeV/U60/VYiwD5Pd9m1TKn3U PPmZ1n1AvklH4SrXXyiIhNh2/8V/drZ3vGtj1qvLS+TgfS3ZuA0oI2nAqrSQr1CX G0MGrIDFvqxF0MJrIiod4m1wOtdCm5UBSOhNG87FFXUxVJfZH/kbqlApKffm2iq0 NQVYnSL2j0/KlNLgKVsvgHbaNfl3UqZZi8k6o9YRLstYvfFwQlNhjbVdZ0Vaxx/z Ss+BM58tEbBGrQyJWi+a1yoYprUK2AE= -----END CERTIFICATE-----Generated at Mon Nov 3 21:51:03 2025 by rpki-client