$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76df2acd-38f5-356c-aaba-2af855fdbdc2.roa File: 76df2acd-38f5-356c-aaba-2af855fdbdc2.roa (raw, json) Hash identifier: CAcaRDYIgR1BGXzgBDqEk/OnyaMn85CXiBqfFhphFDo= Subject key identifier: 96:BA:47:17:4E:83:C3:31:FC:E8:82:8C:71:69:5F:09:C0:7F:E0:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B2496E17095359BDF101A6180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76df2acd-38f5-356c-aaba-2af855fdbdc2.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 34.1.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:e1:70:95:35:9b:df:10:1a:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=568a741f-e47d-4034-8ab2-5f3eeb4d9bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:41:c4:3f:cd:9f:e6:78:8e:03:0f:b3:b0: e5:5d:32:9b:d6:29:88:d0:61:0f:78:01:76:85:58: 99:54:3c:c1:ee:40:30:43:09:a1:a1:eb:76:4b:f6: 54:a8:e2:4a:06:4b:05:9d:f5:96:68:eb:88:0a:65: 33:b4:59:4a:e2:c2:3a:20:9b:76:8b:00:97:aa:c4: 99:fa:80:3a:13:71:65:2d:99:03:0b:6e:54:9c:11: 5f:03:88:f3:fa:57:3b:b9:25:f0:b0:99:9a:1f:5c: 85:ba:00:66:b3:9a:3c:90:b5:27:72:cf:6c:ea:8f: 7a:da:e3:f1:c2:c9:35:1a:aa:2f:47:a4:e0:8f:63: c9:74:16:de:67:ed:57:b0:2a:7c:6f:dd:3d:63:cb: da:da:a4:e4:aa:3e:69:e7:10:fa:10:83:d2:64:e6: b7:27:e7:cb:11:cc:4f:21:3c:b1:6e:cd:15:0f:67: 20:3a:46:f3:9b:c9:ec:71:c9:c7:69:65:49:bf:24: 41:b6:e7:0a:38:2d:fa:8c:0e:99:83:03:0d:e5:91: 80:92:ba:f8:23:1c:9d:24:73:49:ee:70:4e:40:cc: 56:35:83:a3:ba:b6:41:e7:a8:3b:69:70:5b:31:68: d8:26:99:df:e6:fb:4b:c3:3a:1c:12:1a:85:d6:ad: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BA:47:17:4E:83:C3:31:FC:E8:82:8C:71:69:5F:09:C0:7F:E0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76df2acd-38f5-356c-aaba-2af855fdbdc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:1b:bc:23:8d:74:91:98:89:60:4c:a3:fb:7b:a8:6d:8c:d7: 6e:64:cc:97:27:23:26:00:86:9a:be:ae:49:0e:5b:06:74:ee: 2e:b7:ff:6e:66:0e:25:ec:10:ba:ae:61:95:d7:67:e6:ae:92: 94:e5:b8:cf:b6:2f:7e:6b:13:28:d4:83:b1:a1:1a:f2:49:10: 1e:c7:91:88:be:aa:ea:7d:cb:c7:be:58:db:d3:2e:a4:3d:69: b5:b5:5e:cd:37:65:50:4c:ea:db:f3:d0:13:e7:45:85:ee:f9: 3d:5f:7e:38:47:de:42:bd:0e:f5:19:03:72:5d:12:de:a6:35: 77:42:25:48:b4:ee:9d:9e:cd:46:ce:5f:b6:71:63:4c:55:b5: 19:bb:ee:3e:dd:55:a4:5d:b8:06:6b:de:40:80:c2:7d:98:ba: b0:13:77:68:cc:ce:f2:32:6d:34:5b:e4:ff:87:ef:f6:99:c8: 4a:7d:d1:ac:1e:f9:1f:3b:f1:fe:aa:86:61:1f:18:9a:9d:34: 82:b6:d6:dc:22:cb:ab:51:d4:1e:0d:ab:10:fb:07:89:81:ae: cc:4e:3e:19:85:e6:fe:94:fa:dd:81:9d:85:a0:51:0d:c8:99: c9:f4:c5:62:63:b8:4e:db:7b:f4:c1:85:d7:e0:c5:3c:6a:c4: 58:64:30:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskluFwlTWb3xAaYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NTY4YTc0MWYtZTQ3ZC00MDM0LThhYjItNWYzZWViNGQ5YmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3BBxD/Nn+Z4jgMPs7DlXTKb1imI0GEPeAF2 hViZVDzB7kAwQwmhoet2S/ZUqOJKBksFnfWWaOuICmUztFlK4sI6IJt2iwCXqsSZ +oA6E3FlLZkDC25UnBFfA4jz+lc7uSXwsJmaH1yFugBms5o8kLUncs9s6o962uPx wsk1GqovR6Tgj2PJdBbeZ+1XsCp8b909Y8va2qTkqj5p5xD6EIPSZOa3J+fLEcxP ITyxbs0VD2cgOkbzm8nsccnHaWVJvyRBtucKOC36jA6ZgwMN5ZGAkrr4IxydJHNJ 7nBOQMxWNYOjurZB56g7aXBbMWjYJpnf5vtLwzocEhqF1q287QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa6RxdOg8Mx/OiCjHFpXwnAf+D3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzZkZjJhY2QtMzhmNS0z NTZjLWFhYmEtMmFmODU1ZmRiZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8bvCONdJGYiWBMo/t7qG2M125kzJcnIyYAhpq+rkkOWwZ07i63/25m DiXsELquYZXXZ+aukpTluM+2L35rEyjUg7GhGvJJEB7HkYi+qup9y8e+WNvTLqQ9 abW1Xs03ZVBM6tvz0BPnRYXu+T1ffjhH3kK9DvUZA3JdEt6mNXdCJUi07p2ezUbO X7ZxY0xVtRm77j7dVaRduAZr3kCAwn2YurATd2jMzvIybTRb5P+H7/aZyEp90awe +R878f6qhmEfGJqdNIK21twiy6tR1B4NqxD7B4mBrsxOPhmF5v6U+t2BnYWgUQ3I mcn0xWJjuE7be/TBhdfgxTxqxFhkMEM= -----END CERTIFICATE-----Generated at Tue Nov 4 18:49:19 2025 by rpki-client