$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86df3606-9c38-3727-9c8b-256389082390.roa File: 86df3606-9c38-3727-9c8b-256389082390.roa (raw, json) Hash identifier: bZtTMA96PSy8mp9ogH0iRrc900XfnSjfY3rcwU6VzS0= Subject key identifier: 66:03:72:91:E4:CF:0C:CD:13:BA:55:E9:E0:78:4C:C5:D4:C1:2F:51 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B48E2061A79F15188066F83A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86df3606-9c38-3727-9c8b-256389082390.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 139190 IP address blocks: 34.1.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:06:1a:79:f1:51:88:06:6f:83:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=532325b7-1c2d-4638-9807-2c4923f7643d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:b1:ae:5c:06:23:51:9e:ad:cd:33:92:2d: 19:65:f7:c7:92:ef:cd:6c:2c:53:e5:23:a4:77:03: f0:dd:5c:1d:70:ed:b9:15:7b:71:7c:73:a0:c5:f8: bd:46:61:50:5d:a4:11:1e:af:36:6e:4e:23:5e:b0: 38:26:bf:2c:45:66:50:dc:ad:77:eb:d3:32:98:81: 47:89:67:39:55:eb:fb:f4:cd:09:8c:aa:3c:fa:51: e9:98:73:ec:f8:a7:5d:b0:bf:d7:78:16:c0:fb:0d: b5:87:2f:49:c5:98:0c:1f:ce:eb:81:2a:2c:83:27: a5:6c:b6:01:8a:74:a9:70:7d:ba:da:0e:7a:8a:cf: a8:1d:85:c2:d7:b4:95:43:ae:24:ff:26:4b:b4:70: 1d:29:54:df:e5:8e:aa:f6:52:65:46:59:0b:41:75: 69:c9:cd:91:d2:59:48:fd:6c:db:35:56:23:ff:ee: b3:f3:14:2c:98:a1:43:72:89:db:82:f4:d9:57:1b: 11:25:9c:09:db:a5:5e:d7:1a:24:c6:d4:88:3f:2f: 6b:ea:ce:b6:ea:a8:71:43:16:0e:ce:2b:d2:3c:5c: 36:eb:be:b7:6c:ab:89:bf:aa:66:fa:a7:db:b4:62: 0a:b1:bc:ec:4b:fb:46:82:6c:64:87:81:6a:74:a3: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:03:72:91:E4:CF:0C:CD:13:BA:55:E9:E0:78:4C:C5:D4:C1:2F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86df3606-9c38-3727-9c8b-256389082390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:be:16:79:4c:48:51:84:33:9d:c6:9d:ca:8a:ac:13:66:c8: 7e:52:da:3e:73:f3:1d:48:1e:2d:e8:9c:4d:88:1d:70:c1:ff: 81:b8:48:a3:53:a8:2f:6b:87:85:1e:0c:5e:86:52:67:9e:4f: a0:e7:81:6c:60:e5:a2:ef:f8:6d:2b:9e:f7:d8:10:99:29:b4: 93:d9:43:b6:cb:1c:d7:5b:0c:25:cf:0b:e6:f1:65:16:47:1f: 5e:37:d0:8e:72:f7:46:48:d7:bf:eb:2f:d9:4d:53:4f:55:28: 16:39:40:03:f2:55:c0:0f:9a:84:ce:11:6e:c1:1a:be:47:75: a3:ae:1a:fd:c9:05:76:13:12:65:05:4e:68:f8:07:ac:6d:04: 5a:5f:0a:f5:59:79:31:0c:fb:48:49:85:ee:da:2b:e6:8d:40: 04:1c:d6:69:a9:a9:6f:ac:f6:3d:43:fd:08:dd:72:8c:75:d5: e6:11:0b:4f:e7:3d:62:15:5f:f3:e0:3e:2f:c6:8b:81:11:86: ac:f1:d5:c5:1f:76:41:b3:2a:21:59:0a:c6:05:f9:c9:ca:05: 17:50:72:d1:44:96:b6:f9:cb:8e:cf:95:4d:af:04:49:ed:d6: 66:0a:08:49:5e:7e:3b:cc:60:d9:ae:ac:90:d1:35:93:34:39: ef:c4:83:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gYaefFRiAZvg6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTMyMzI1YjctMWMyZC00NjM4LTk4MDctMmM0OTIzZjc2NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvexrlwGI1Gerc0zki0ZZffHku/NbCxT5SOk dwPw3VwdcO25FXtxfHOgxfi9RmFQXaQRHq82bk4jXrA4Jr8sRWZQ3K1369MymIFH iWc5Vev79M0JjKo8+lHpmHPs+KddsL/XeBbA+w21hy9JxZgMH87rgSosgyelbLYB inSpcH262g56is+oHYXC17SVQ64k/yZLtHAdKVTf5Y6q9lJlRlkLQXVpyc2R0llI /WzbNVYj/+6z8xQsmKFDconbgvTZVxsRJZwJ26Ve1xokxtSIPy9r6s626qhxQxYO zivSPFw26763bKuJv6pm+qfbtGIKsbzsS/tGgmxkh4FqdKMz9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYDcpHkzwzNE7pV6eB4TMXUwS9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZkZjM2MDYtOWMzOC0z NzI3LTljOGItMjU2Mzg5MDgyMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS+FnlMSFGEM53GncqKrBNmyH5S2j5z8x1IHi3onE2IHXDB/4G4SKNT qC9rh4UeDF6GUmeeT6DngWxg5aLv+G0rnvfYEJkptJPZQ7bLHNdbDCXPC+bxZRZH H1430I5y90ZI17/rL9lNU09VKBY5QAPyVcAPmoTOEW7BGr5HdaOuGv3JBXYTEmUF Tmj4B6xtBFpfCvVZeTEM+0hJhe7aK+aNQAQc1mmpqW+s9j1D/Qjdcox11eYRC0/n PWIVX/PgPi/Gi4ERhqzx1cUfdkGzKiFZCsYF+cnKBRdQctFElrb5y47PlU2vBEnt 1mYKCElefjvMYNmurJDRNZM0Oe/Egxg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:01 2025 by rpki-client