$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eb6f595-d950-3578-a890-0c70c39de6a3.roa File: 4eb6f595-d950-3578-a890-0c70c39de6a3.roa (raw, json) Hash identifier: 1sQi6k5bEvIk/Gh5M+62LbIoehur1L3IaFRyaLjqfVw= Subject key identifier: 70:06:0F:50:81:5E:F6:3E:F0:B4:C4:95:33:89:23:63:9C:E5:97:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B9FA101BF13B538A0087A4980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eb6f595-d950-3578-a890-0c70c39de6a3.roa Signing time: Fri 24 Oct 2025 02:45:38 +0000 ROA not before: Fri 24 Oct 2025 02:45:38 +0000 ROA not after: Thu 22 Jan 2026 03:45:38 +0000 asID: 396982 IP address blocks: 34.144.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:a1:01:bf:13:b5:38:a0:08:7a:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 24 02:45:38 2025 GMT Not After : Jan 22 03:45:38 2026 GMT Subject: CN=b40a6b9d-6221-407f-8308-4ef0fef45c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:de:b4:69:02:07:de:98:5f:b0:a9:77:c0:fa: b1:9f:92:1c:34:5e:87:63:9b:bf:01:05:9e:d1:b8: 08:6a:3a:1e:f7:ae:03:6e:c1:5e:e1:4f:8c:1e:52: d5:03:52:00:41:b5:b8:e8:74:48:84:70:1a:52:00: 50:15:89:f3:ce:2f:7b:af:4c:cc:65:12:98:f2:5a: 4c:05:92:22:22:2c:1d:56:61:12:07:fa:3c:a2:98: 1c:d5:90:04:4a:07:08:9e:68:19:40:79:75:ed:3c: 0b:bc:49:40:28:d5:29:cc:b2:25:83:e1:08:c8:a9: 3a:d3:25:bf:aa:42:c0:48:38:86:f1:f3:f7:b7:67: 16:dd:4e:e2:e3:f9:a3:c1:31:37:8f:6d:60:0a:4b: 03:4e:01:7b:36:24:c8:d6:1f:24:df:97:f1:81:8c: 06:42:2c:4c:b1:b1:d7:0a:5c:85:48:9b:69:7f:50: c0:67:ec:a9:ff:98:be:70:22:a4:7a:4b:31:c8:b4: 98:13:68:59:74:9e:ab:7a:5a:4b:1e:73:d5:5a:48: 71:22:58:34:1f:11:3e:1a:ef:a6:04:79:bb:a0:ac: 29:7f:cd:37:4d:f9:b5:cd:ae:dd:6b:d5:f2:52:5c: a9:21:8e:47:f9:9a:74:06:77:c2:f7:47:66:4e:84: bb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:06:0F:50:81:5E:F6:3E:F0:B4:C4:95:33:89:23:63:9C:E5:97:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eb6f595-d950-3578-a890-0c70c39de6a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:86:e3:25:c5:d9:be:bb:67:f1:1f:3d:f5:6c:2a:a6:04:93: 69:64:bb:41:f2:b9:4b:d5:fe:05:d9:c0:64:d7:18:52:df:aa: b0:2f:ce:dc:e4:28:38:5b:9e:c9:bf:8d:9c:c7:17:51:06:e1: 5b:6b:31:c6:83:84:22:f8:7a:2d:17:2e:68:a2:8e:f8:5e:7a: 85:01:87:9c:83:8c:de:6f:a4:b9:23:96:85:d6:18:71:e4:4c: 9c:ad:0f:83:bc:27:c5:c4:6f:a0:32:e1:a8:b2:45:55:d4:29: 67:d1:a3:3f:fa:7b:a5:c0:5d:76:e2:60:8d:12:53:41:9c:36: bb:06:d6:a8:53:85:cb:72:ce:81:8f:6f:64:e7:1d:f7:de:bb: 66:4c:a8:ff:32:00:79:ae:f5:f7:d8:60:fe:33:4f:ea:c5:e8: 0d:61:61:29:6a:1d:0a:7d:18:0c:cb:31:bd:aa:60:de:ff:b6: d1:e6:34:b5:a3:7d:3f:6d:81:e9:cd:b1:92:35:20:8e:18:fe: c7:56:27:75:b8:65:1a:fe:47:41:98:98:29:09:6f:f9:fe:cd: da:21:ee:64:90:91:82:24:19:15:ec:82:97:cb:6b:85:b3:c3: aa:ae:d4:1d:e2:87:00:47:28:5e:fd:9c:16:c7:45:c1:85:11: d6:64:27:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufoQG/E7U4oAh6SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyNDAyNDUzOFoXDTI2MDEyMjAzNDUzOFowLzEtMCsGA1UEAxMk YjQwYTZiOWQtNjIyMS00MDdmLTgzMDgtNGVmMGZlZjQ1YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd60aQIH3phfsKl3wPqxn5IcNF6HY5u/AQWe 0bgIajoe964DbsFe4U+MHlLVA1IAQbW46HRIhHAaUgBQFYnzzi97r0zMZRKY8lpM BZIiIiwdVmESB/o8opgc1ZAESgcInmgZQHl17TwLvElAKNUpzLIlg+EIyKk60yW/ qkLASDiG8fP3t2cW3U7i4/mjwTE3j21gCksDTgF7NiTI1h8k35fxgYwGQixMsbHX ClyFSJtpf1DAZ+yp/5i+cCKkeksxyLSYE2hZdJ6relpLHnPVWkhxIlg0HxE+Gu+m BHm7oKwpf803Tfm1za7da9XyUlypIY5H+Zp0BnfC90dmToS7dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAGD1CBXvY+8LTElTOJI2Oc5Zd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGViNmY1OTUtZDk1MC0z NTc4LWE4OTAtMGM3MGMzOWRlNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIpCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCG4yXF2b67Z/EfPfVsKqYEk2lku0HyuUvV/gXZwGTXGFLfqrAvztzk KDhbnsm/jZzHF1EG4VtrMcaDhCL4ei0XLmiijvheeoUBh5yDjN5vpLkjloXWGHHk TJytD4O8J8XEb6Ay4aiyRVXUKWfRoz/6e6XAXXbiYI0SU0GcNrsG1qhThctyzoGP b2TnHffeu2ZMqP8yAHmu9ffYYP4zT+rF6A1hYSlqHQp9GAzLMb2qYN7/ttHmNLWj fT9tgenNsZI1II4Y/sdWJ3W4ZRr+R0GYmCkJb/n+zdoh7mSQkYIkGRXsgpfLa4Wz w6qu1B3ihwBHKF79nBbHRcGFEdZkJzY= -----END CERTIFICATE-----Generated at Mon Nov 3 21:51:02 2025 by rpki-client