$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f2fed3f-7e54-3e1a-abe2-c205f27df836.roa File: 7f2fed3f-7e54-3e1a-abe2-c205f27df836.roa (raw, json) Hash identifier: PqKTDw+Oc/cJSm1lfUg+gOh4oWxE5EmPaJOmtIC23+k= Subject key identifier: 31:EE:E5:4D:A8:40:19:63:27:DA:D6:55:B3:51:C5:8E:35:2C:AB:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B9EEF87D5BF6E2654BAE57CC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f2fed3f-7e54-3e1a-abe2-c205f27df836.roa Signing time: Thu 23 Oct 2025 20:48:03 +0000 ROA not before: Thu 23 Oct 2025 20:48:03 +0000 ROA not after: Wed 21 Jan 2026 21:48:03 +0000 asID: 15169 IP address blocks: 34.2.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:ef:87:d5:bf:6e:26:54:ba:e5:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 23 20:48:03 2025 GMT Not After : Jan 21 21:48:03 2026 GMT Subject: CN=3279afb5-6009-4abb-9bae-ab5d461913e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:c3:6d:f2:5d:04:b2:ad:93:cf:3b:75:15: bb:a1:27:f1:7d:e9:e7:8d:eb:bf:1a:67:bc:af:51: 15:28:3d:8b:66:da:5d:52:3e:62:e4:ac:61:51:71: af:9a:f5:89:df:74:f2:ea:01:a8:57:1d:5b:05:0d: 32:be:d4:6e:1c:f9:e0:4f:ad:ad:0a:a2:a3:39:92: 87:af:e5:88:0e:9d:28:03:7d:2a:d6:d7:6e:21:30: ab:07:28:39:55:17:f2:75:3d:10:82:fd:1d:1e:e0: 5b:41:74:1e:5a:86:3d:f5:d3:05:94:b0:80:7a:52: 04:1e:24:6e:76:82:47:dd:4f:40:fa:41:e9:8b:f5: 35:c5:38:cd:32:20:3f:18:84:5d:64:aa:09:6c:e4: f3:a7:1a:9d:2c:93:2a:92:fc:0e:44:9a:3e:a2:cf: ab:e2:a0:35:80:e7:1c:1d:85:a5:fc:2b:99:dc:49: 6d:2c:74:e6:46:40:7c:e5:7e:df:fb:d7:36:40:00: 12:84:a5:f1:e6:63:c4:79:7a:49:74:37:1e:06:be: 9c:ce:87:b0:50:08:45:0e:76:c9:90:ab:7e:53:13: 6f:3e:1b:bc:60:e8:59:3f:f5:08:8a:b7:5e:07:eb: 11:13:ce:ab:e3:13:b4:99:5a:76:a8:95:f1:a9:44: 18:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EE:E5:4D:A8:40:19:63:27:DA:D6:55:B3:51:C5:8E:35:2C:AB:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f2fed3f-7e54-3e1a-abe2-c205f27df836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:dc:13:3f:85:8d:f8:0d:6f:f3:79:9f:3c:81:aa:0a:e8:d4: 12:69:8f:b0:36:c1:61:9c:e9:b3:b7:4f:df:cf:56:a5:10:d1: c2:58:24:15:e4:4e:b4:67:00:52:44:61:99:42:4a:59:e4:ff: 76:c2:98:f6:f6:3f:43:c2:a6:d2:d7:da:ee:02:e8:31:de:b0: 3b:61:69:67:bd:29:9d:c0:a9:1e:25:9f:ce:5b:30:a5:22:6e: c8:a3:64:07:a2:1f:28:16:b3:fd:0c:6f:7c:8c:88:72:ad:0b: a0:9c:c4:c5:d6:9b:44:6c:e8:14:f0:d9:7f:a8:e6:1c:27:6a: f1:91:1d:34:93:cb:55:18:42:f5:18:b4:d5:5a:3c:0d:e5:1f: 47:a5:5c:8e:1a:98:b3:9e:52:56:43:ac:e8:d3:44:f6:7b:3a: 69:44:69:c7:33:83:cb:54:1c:d0:b8:c1:56:0d:f7:25:50:13: 1d:15:48:7d:f7:9d:9e:bd:19:f5:79:bb:0c:14:da:d6:3a:3b: 58:3f:e5:da:3f:b8:21:3a:86:16:d2:31:99:44:6a:af:f2:81: c5:a2:51:dc:0f:3e:2f:83:e4:db:9f:b0:36:4f:c4:59:a6:68: 63:7e:e4:7f:a9:0a:bb:2d:c5:d5:90:fc:a1:48:b5:74:9a:bb: f9:2c:26:c7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEue74fVv24mVLrlfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyMzIwNDgwM1oXDTI2MDEyMTIxNDgwM1owLzEtMCsGA1UEAxMk MzI3OWFmYjUtNjAwOS00YWJiLTliYWUtYWI1ZDQ2MTkxM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVLDbfJdBLKtk887dRW7oSfxfennjeu/Gme8 r1EVKD2LZtpdUj5i5KxhUXGvmvWJ33Ty6gGoVx1bBQ0yvtRuHPngT62tCqKjOZKH r+WIDp0oA30q1tduITCrByg5VRfydT0Qgv0dHuBbQXQeWoY99dMFlLCAelIEHiRu doJH3U9A+kHpi/U1xTjNMiA/GIRdZKoJbOTzpxqdLJMqkvwORJo+os+r4qA1gOcc HYWl/CuZ3EltLHTmRkB85X7f+9c2QAAShKXx5mPEeXpJdDceBr6czoewUAhFDnbJ kKt+UxNvPhu8YOhZP/UIirdeB+sRE86r4xO0mVp2qJXxqUQYVQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDHu5U2oQBljJ9rWVbNRxY41LKvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2YyZmVkM2YtN2U1NC0z ZTFhLWFiZTItYzIwNWYyN2RmODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIgIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMNwTP4WN+A1v83mfPIGqCujUEmmPsDbBYZzps7dP389WpRDRwlgkFeRO tGcAUkRhmUJKWeT/dsKY9vY/Q8Km0tfa7gLoMd6wO2FpZ70pncCpHiWfzlswpSJu yKNkB6IfKBaz/QxvfIyIcq0LoJzExdabRGzoFPDZf6jmHCdq8ZEdNJPLVRhC9Ri0 1Vo8DeUfR6VcjhqYs55SVkOs6NNE9ns6aURpxzODy1Qc0LjBVg33JVATHRVIffed nr0Z9Xm7DBTa1jo7WD/l2j+4ITqGFtIxmURqr/KBxaJR3A8+L4Pk25+wNk/EWaZo Y37kf6kKuy3F1ZD8oUi1dJq7+Swmxw== -----END CERTIFICATE-----Generated at Tue Nov 4 23:00:44 2025 by rpki-client