$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fcb2e84-0cfe-32d3-9c08-9bb7875186a2.roa File: 8fcb2e84-0cfe-32d3-9c08-9bb7875186a2.roa (raw, json) Hash identifier: fGqziCF8Zwc8AGXX7oTdQukmOT3qr9JkUPQN4/UISqs= Subject key identifier: 20:22:05:59:40:B9:AF:CF:79:07:DC:E6:75:C3:75:00:EE:8E:2B:BD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B864CB408299D14B05D5B4570 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fcb2e84-0cfe-32d3-9c08-9bb7875186a2.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 19527 IP address blocks: 34.190.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b4:08:29:9d:14:b0:5d:5b:45:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=5b704cce-34c8-48ed-9a41-ebbb5e4e2b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:50:b5:9a:94:59:68:74:2a:cb:8a:96:42:5a: 26:c4:c6:8d:ea:df:c8:f9:d8:7e:42:3f:73:02:e7: 0b:32:d8:d4:c2:56:8e:39:12:27:e2:8a:96:86:8e: f9:58:fe:d1:22:f4:ea:05:01:2d:65:3c:95:81:5d: 90:98:5e:f4:86:3d:28:6b:71:82:dd:15:c1:1a:79: 1a:10:e5:0a:b4:23:04:01:c5:52:0c:fc:14:00:0b: 34:11:88:18:da:04:58:7f:39:09:30:63:74:22:56: eb:6a:a5:9c:77:5e:0f:f1:23:a7:00:3e:1d:93:07: 9b:83:6d:e8:6b:65:f3:c1:01:f6:c0:8c:b9:bb:2f: 56:86:a0:bb:98:ff:92:77:6f:07:49:0a:65:46:98: 19:13:c7:69:bc:75:0a:a6:9c:31:4a:08:fe:ea:72: e7:ce:ec:3f:2a:5b:e9:fc:0b:41:5c:13:58:91:33: c4:4a:0e:8d:6c:d4:a4:aa:e6:42:47:35:da:07:8d: 2f:17:e0:b8:bb:c6:7c:31:93:32:3f:3c:c0:6e:5a: 49:84:15:15:e1:e9:3b:06:2f:17:46:e9:d6:3c:54: df:0c:ec:6a:e4:15:39:80:63:62:59:5a:97:b4:3f: 40:e4:2e:5e:09:58:05:98:f8:72:46:4a:d6:bf:ac: 7f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:22:05:59:40:B9:AF:CF:79:07:DC:E6:75:C3:75:00:EE:8E:2B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fcb2e84-0cfe-32d3-9c08-9bb7875186a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:30:4f:15:95:20:55:6b:7f:e3:39:95:cd:09:61:02:e5:04: 4a:6a:41:b1:5a:bf:2a:0c:a3:bf:c3:5d:b0:1d:94:da:5b:4a: ca:f9:db:e9:17:c1:83:ad:16:07:7e:0d:ec:03:72:0f:85:36: 9c:1e:95:41:68:2e:da:aa:6a:a5:b1:42:ba:e9:27:eb:59:26: 78:3f:f7:fd:c0:9b:6a:65:23:de:9e:b0:94:30:ef:a5:be:c9: e1:0a:6e:81:85:fc:8d:23:22:b4:17:7e:bd:ab:54:fa:5c:80: 96:bb:25:00:2e:2a:0a:fd:89:b1:df:8d:64:65:1e:e2:d1:53: d0:a1:f4:8a:d7:a3:92:92:69:bb:89:30:3d:5e:a3:24:22:78: c8:63:6c:14:c6:69:3b:a4:c7:30:b5:ec:92:82:8b:b8:97:09: 83:93:22:e5:5d:13:a7:24:ce:0e:4c:3f:fe:9d:9a:d2:e6:9a: 74:fb:1e:cc:b4:fb:ae:a2:15:18:5e:17:83:21:47:48:d4:d4: 82:8d:b5:8f:bf:b9:70:c7:42:f3:c3:01:a4:c9:72:89:fe:d0: de:d2:8b:0e:86:96:f9:0c:31:9b:9b:96:dd:54:26:f7:12:f5: f9:c4:1c:d5:33:14:1f:55:ae:09:05:4d:6a:13:ba:cc:23:8a: f3:46:3b:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTLQIKZ0UsF1bRXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk NWI3MDRjY2UtMzRjOC00OGVkLTlhNDEtZWJiYjVlNGUyYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1C1mpRZaHQqy4qWQlomxMaN6t/I+dh+Qj9z AucLMtjUwlaOORIn4oqWho75WP7RIvTqBQEtZTyVgV2QmF70hj0oa3GC3RXBGnka EOUKtCMEAcVSDPwUAAs0EYgY2gRYfzkJMGN0IlbraqWcd14P8SOnAD4dkwebg23o a2XzwQH2wIy5uy9WhqC7mP+Sd28HSQplRpgZE8dpvHUKppwxSgj+6nLnzuw/Klvp /AtBXBNYkTPESg6NbNSkquZCRzXaB40vF+C4u8Z8MZMyPzzAblpJhBUV4ek7Bi8X RunWPFTfDOxq5BU5gGNiWVqXtD9A5C5eCVgFmPhyRkrWv6x/9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAiBVlAua/PeQfc5nXDdQDujiu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGZjYjJlODQtMGNmZS0z MmQzLTljMDgtOWJiNzg3NTE4NmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUwTxWVIFVrf+M5lc0JYQLlBEpqQbFavyoMo7/DXbAdlNpbSsr52+kX wYOtFgd+DewDcg+FNpwelUFoLtqqaqWxQrrpJ+tZJng/9/3Am2plI96esJQw76W+ yeEKboGF/I0jIrQXfr2rVPpcgJa7JQAuKgr9ibHfjWRlHuLRU9Ch9IrXo5KSabuJ MD1eoyQieMhjbBTGaTukxzC17JKCi7iXCYOTIuVdE6ckzg5MP/6dmtLmmnT7Hsy0 +66iFRheF4MhR0jU1IKNtY+/uXDHQvPDAaTJcon+0N7Siw6GlvkMMZublt1UJvcS 9fnEHNUzFB9VrgkFTWoTuswjivNGO+o= -----END CERTIFICATE-----Generated at Wed Oct 22 23:26:59 2025 by rpki-client