$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa File: 890641f9-0aae-3a09-b375-d5faed4942f2.roa (raw, json) Hash identifier: VXFleaXPrcivKnM/f880DzTY8+4OUPBcNROfv+fq/sk= Subject key identifier: 9A:F7:04:62:A2:37:1D:2D:2F:AC:E8:71:D0:91:D0:D4:6D:38:D1:AC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C487140AE4CC5BCAAACFAF880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.64.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:40:ae:4c:c5:bc:aa:ac:fa:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=6b06b6e2-6a0c-4453-9f40-68c6cc2cfc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:2a:ce:e7:ed:9d:88:a2:be:75:64:9e:3a: ff:d1:ce:71:23:4c:f1:99:18:35:fb:32:be:eb:6c: c3:27:32:f2:27:20:f8:ae:33:2f:13:04:b6:3b:a7: 9b:2b:06:e9:33:12:0f:32:92:10:6f:72:0b:00:19: 2a:21:35:5e:f2:e6:52:25:5c:25:91:20:9f:7d:e2: 37:39:17:c7:0b:80:3d:98:16:39:a5:6e:57:84:62: be:c9:2a:76:5f:ef:e4:29:bf:71:07:b4:97:4b:6c: 2d:a4:ea:64:10:2e:26:38:1e:bc:5a:3a:43:3c:01: aa:24:9f:0b:1f:53:61:f1:d2:f2:61:f7:5e:90:50: 6c:bc:ed:9c:5a:55:01:86:5a:82:85:24:2a:af:25: dc:b3:db:db:74:3a:ba:21:63:a0:49:4f:89:3a:6a: 7d:0f:2d:03:c1:bb:80:d7:ee:2c:a3:95:b8:5b:07: 97:e0:d3:fa:4f:53:b4:0a:c7:ac:9a:98:a9:c1:2f: d4:2b:b8:f8:9a:db:80:18:7e:c3:b0:5d:90:05:35: 5f:b1:fd:d9:c4:bf:25:7e:d3:b4:69:06:d7:4f:c8: bf:c3:8a:54:c4:38:e1:45:39:84:0f:e6:ac:48:0e: 8e:44:6e:7d:a6:0d:12:e1:58:a1:d6:48:9d:b4:e5: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F7:04:62:A2:37:1D:2D:2F:AC:E8:71:D0:91:D0:D4:6D:38:D1:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:63:22:0d:d0:e1:1b:72:b3:03:35:05:74:49:c9:bf:bd:fe: ff:fc:31:84:cf:82:0f:d3:d6:5f:21:81:e9:b1:46:2b:fc:ba: db:e8:38:75:ec:25:03:a7:41:91:27:31:19:17:3f:2b:f3:5c: 67:9c:ee:c6:63:d2:61:a2:e1:b2:91:ff:78:67:ed:54:9c:e1: 3d:7b:6d:36:04:e7:08:a8:98:62:1c:1e:7e:37:c9:ab:03:d3: 4e:54:05:a8:c4:b4:2f:2c:04:0e:59:fa:3b:de:d4:52:f5:1a: fa:1d:42:18:f5:3b:0b:3c:6b:8a:9d:d7:bd:d6:ad:27:f6:59: 98:0d:aa:5d:9b:24:02:57:58:26:a5:05:57:5b:0f:a9:b6:47: 59:b1:69:be:c4:d9:8f:c7:fc:46:26:eb:e3:13:4f:be:ce:24: 5f:84:79:8c:f5:1b:51:1d:70:f6:0b:9f:83:32:b5:84:7b:a0: 57:1f:ca:89:75:b7:18:05:ba:a2:55:03:a0:ab:66:67:b9:c3: 1f:13:24:73:ea:54:d5:46:90:91:13:91:5c:e2:32:11:f4:a9: 56:32:3e:4c:96:7a:0e:8f:52:8c:d4:87:85:98:80:0c:99:cd: 6d:79:b6:12:10:df:e9:b1:02:4e:72:4a:51:59:ad:c1:41:7a: 4f:2f:d0:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcUCuTMW8qqz6+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NmIwNmI2ZTItNmEwYy00NDUzLTlmNDAtNjhjNmNjMmNmYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMoqzuftnYiivnVknjr/0c5xI0zxmRg1+zK+ 62zDJzLyJyD4rjMvEwS2O6ebKwbpMxIPMpIQb3ILABkqITVe8uZSJVwlkSCffeI3 ORfHC4A9mBY5pW5XhGK+ySp2X+/kKb9xB7SXS2wtpOpkEC4mOB68WjpDPAGqJJ8L H1Nh8dLyYfdekFBsvO2cWlUBhlqChSQqryXcs9vbdDq6IWOgSU+JOmp9Dy0DwbuA 1+4so5W4WweX4NP6T1O0CsesmpipwS/UK7j4mtuAGH7DsF2QBTVfsf3ZxL8lftO0 aQbXT8i/w4pUxDjhRTmED+asSA6ORG59pg0S4Vih1kidtOXX4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr3BGKiNx0tL6zocdCR0NRtONGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODkwNjQxZjktMGFhZS0z YTA5LWIzNzUtZDVmYWVkNDk0MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFjIg3Q4RtyswM1BXRJyb+9/v/8MYTPgg/T1l8hgemxRiv8utvoOHXs JQOnQZEnMRkXPyvzXGec7sZj0mGi4bKR/3hn7VSc4T17bTYE5wiomGIcHn43yasD 005UBajEtC8sBA5Z+jve1FL1GvodQhj1Ows8a4qd173WrSf2WZgNql2bJAJXWCal BVdbD6m2R1mxab7E2Y/H/EYm6+MTT77OJF+EeYz1G1EdcPYLn4MytYR7oFcfyol1 txgFuqJVA6CrZme5wx8TJHPqVNVGkJETkVziMhH0qVYyPkyWeg6PUozUh4WYgAyZ zW15thIQ3+mxAk5ySlFZrcFBek8v0Po= -----END CERTIFICATE-----Generated at Sun Feb 22 22:04:28 2026 by rpki-client