$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5af1dda9-4000-3331-926b-66e2b41f8d24.roa File: 5af1dda9-4000-3331-926b-66e2b41f8d24.roa (raw, json) Hash identifier: CDqAKITk8uR8n1rcM0I73hERByfBSL8RFMZ439f3NwM= Subject key identifier: 74:25:40:34:46:71:A6:41:A9:D7:9C:49:05:6C:F0:30:1F:B0:40:15 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BA0D270BEA9280B39A70CFB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5af1dda9-4000-3331-926b-66e2b41f8d24.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 34.186.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:70:be:a9:28:0b:39:a7:0c:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=c5dcc0e5-4423-41c8-9032-743899361331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:06:2f:a6:7e:46:66:5c:df:d4:f3:1b:76: 25:6f:09:47:aa:bc:4f:5c:ec:e1:22:11:33:15:79: 1d:23:ce:68:e6:55:dc:c7:77:09:27:55:13:f8:53: 02:25:17:00:de:18:3d:aa:69:c3:15:4c:b4:77:92: 4c:89:e7:d0:49:1e:2d:72:54:75:6a:94:43:4a:2f: 87:03:e6:c5:71:f6:ed:84:7d:04:45:dc:3b:a3:e1: 65:83:37:b9:aa:e7:a6:f8:d4:f1:13:de:be:32:cc: 97:19:65:27:83:70:5d:2c:7e:2e:ff:1a:db:f1:a1: 56:51:b9:7f:4e:2c:0f:ff:cc:8d:ff:9f:c0:b3:76: 6a:d0:46:0f:84:f6:dc:c6:98:a6:1b:2a:9e:9b:06: 8e:30:ba:0c:23:81:a8:04:4d:51:b3:5a:52:2c:d9: 1d:36:b5:5b:2d:c7:bd:60:5b:79:96:42:11:b3:8b: c5:22:0f:43:ff:6d:ba:20:90:c9:b4:f8:ea:6e:94: 1f:cc:ad:f3:93:a2:c0:f8:da:d6:43:ce:5f:68:d3: c1:aa:0b:24:4f:74:54:8e:1f:5c:16:53:a8:28:b0: 79:ef:65:2a:00:78:ee:35:32:1a:5a:55:d6:22:ed: 07:67:56:fe:32:43:00:57:2c:c2:c8:22:ab:64:69: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:25:40:34:46:71:A6:41:A9:D7:9C:49:05:6C:F0:30:1F:B0:40:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5af1dda9-4000-3331-926b-66e2b41f8d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.186.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d2:a7:b0:b2:a7:b5:91:e5:c3:fb:2c:74:35:8a:15:01:7f: b2:14:db:77:2d:bd:7a:50:9c:f5:53:e8:19:17:c2:ff:c5:91: 04:84:0e:f8:33:a5:a1:e8:88:e7:78:b2:b4:a4:65:45:94:5f: 4e:55:0b:30:1d:c2:f2:1d:c4:b3:15:b1:95:d7:1e:c3:4b:0e: 86:ce:de:5f:14:71:34:27:e5:b5:f4:bf:52:c7:7c:ac:ce:79: fe:60:93:48:da:0a:3f:0a:4d:2a:38:3d:7d:19:ca:82:a8:33: 9a:ae:27:59:05:73:21:5d:3f:ae:fb:81:90:70:99:8d:57:cc: 10:17:42:18:96:d5:a1:77:20:83:ab:de:e7:56:46:74:33:36: 38:7d:dc:fc:26:99:62:99:e9:b2:79:b4:8c:18:98:0a:48:e9: df:9e:03:d6:3c:5e:87:46:16:ea:02:f1:69:37:53:a9:a2:75: 4f:63:51:a1:07:16:f9:ea:34:16:6d:0b:01:59:22:6d:f7:3f: 07:5c:96:68:96:02:88:71:7a:ea:72:09:54:26:78:0d:08:7d: df:3b:da:03:bf:8e:c6:87:dc:a5:bd:89:86:38:53:80:07:a3: d8:2e:ce:3a:9b:e8:66:8b:d7:3e:98:49:be:23:de:b9:f9:12: 98:75:80:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nC+qSgLOacM+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YzVkY2MwZTUtNDQyMy00MWM4LTkwMzItNzQzODk5MzYxMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZsGL6Z+RmZc39TzG3YlbwlHqrxPXOzhIhEz FXkdI85o5lXcx3cJJ1UT+FMCJRcA3hg9qmnDFUy0d5JMiefQSR4tclR1apRDSi+H A+bFcfbthH0ERdw7o+Flgze5quem+NTxE96+MsyXGWUng3BdLH4u/xrb8aFWUbl/ TiwP/8yN/5/As3Zq0EYPhPbcxpimGyqemwaOMLoMI4GoBE1Rs1pSLNkdNrVbLce9 YFt5lkIRs4vFIg9D/226IJDJtPjqbpQfzK3zk6LA+NrWQ85faNPBqgskT3RUjh9c FlOoKLB572UqAHjuNTIaWlXWIu0HZ1b+MkMAVyzCyCKrZGlVQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQlQDRGcaZBqdecSQVs8DAfsEAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWFmMWRkYTktNDAwMC0z MzMxLTkyNmItNjZlMmI0MWY4ZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIroAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/Sp7Cyp7WR5cP7LHQ1ihUBf7IU23ctvXpQnPVT6BkXwv/FkQSEDvgz paHoiOd4srSkZUWUX05VCzAdwvIdxLMVsZXXHsNLDobO3l8UcTQn5bX0v1LHfKzO ef5gk0jaCj8KTSo4PX0ZyoKoM5quJ1kFcyFdP677gZBwmY1XzBAXQhiW1aF3IIOr 3udWRnQzNjh93PwmmWKZ6bJ5tIwYmApI6d+eA9Y8XodGFuoC8Wk3U6midU9jUaEH FvnqNBZtCwFZIm33PwdclmiWAohxeupyCVQmeA0Ifd872gO/jsaH3KW9iYY4U4AH o9guzjqb6GaL1z6YSb4j3rn5Eph1gGo= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:22 2025 by rpki-client