$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c80a2d99-fbcb-3504-aa89-f5c8352f4af2.roa File: c80a2d99-fbcb-3504-aa89-f5c8352f4af2.roa (raw, json) Hash identifier: nC7SlQzpkHDSvPEmDeoSbUnmkPe1x4qW4kEemE7wGFs= Subject key identifier: FB:9A:B5:C0:1C:4B:B2:F3:8F:34:E5:FF:49:EE:BE:A5:FD:E0:8C:E0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976267B64B062E4BD65A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c80a2d99-fbcb-3504-aa89-f5c8352f4af2.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.135.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:62:67:b6:4b:06:2e:4b:d6:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3c86ffd5-abb4-4ce1-98fe-df695331aa61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:11:30:ba:bc:1b:fd:d3:b3:65:9c:4f:d9: b3:db:94:af:81:51:81:1a:0a:1d:c5:a3:2b:63:dc: f1:8b:2b:bf:ab:83:04:83:37:2e:7f:e1:1c:14:85: 1f:36:75:f1:68:fc:03:75:83:f6:ac:06:4b:41:3b: 59:d1:83:bc:ce:31:56:05:66:20:08:04:28:48:21: ff:45:17:41:4a:7a:f0:d1:55:3d:05:5a:84:6c:ca: 77:34:bf:9e:92:22:a4:fa:12:0f:c2:d6:0c:ea:fd: ca:50:f1:01:37:06:63:03:d2:34:a0:cd:9f:49:1f: b7:22:c7:d6:1a:38:4f:d9:4d:9a:e2:9c:55:fb:16: 2e:ef:94:b1:0f:62:6c:42:f1:09:54:9e:7e:be:5a: 8d:5e:80:b7:94:e6:ba:3e:e5:2e:0d:9b:18:7a:0e: d7:a0:af:50:18:af:1a:bd:6e:72:b4:6b:3a:a3:9f: 2f:cc:ab:d2:dc:82:2a:7b:cb:c2:6f:23:ce:99:65: b5:02:45:e7:0d:a9:ba:ac:3c:01:97:22:ba:f0:8a: 6b:53:fd:d0:0f:bc:d2:42:82:fc:06:2e:c7:61:65: 8e:ca:82:4f:9b:2e:19:c2:48:3c:4a:39:18:55:85: 52:4c:96:a2:0b:94:97:c4:22:c3:5e:92:9d:43:e7: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9A:B5:C0:1C:4B:B2:F3:8F:34:E5:FF:49:EE:BE:A5:FD:E0:8C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c80a2d99-fbcb-3504-aa89-f5c8352f4af2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a1:2d:d5:68:87:12:02:34:2d:d7:02:d7:7f:8d:11:21:4e: 53:f0:26:2a:ee:0f:0d:ba:3b:c7:cc:78:52:d9:1e:55:c4:69: 15:1b:a2:25:fe:f4:5a:95:7a:8d:19:b6:da:5d:53:63:27:44: 68:29:be:5d:5a:86:3c:9f:dc:f2:51:34:11:83:9b:b3:6d:e2: a5:50:38:5d:e0:e4:8a:be:ad:39:7d:e1:58:7e:da:11:bd:68: f6:e5:aa:5b:cb:99:6c:fb:7a:54:82:85:85:cf:5a:99:a6:70: 59:d6:6f:c5:c9:8a:96:4d:57:71:86:5e:5c:61:a7:60:7f:bd: ab:10:2f:f2:99:ba:87:bb:17:e9:b2:05:99:f0:5d:c8:64:38: 6b:03:8f:08:32:0b:f9:93:83:ee:ff:2d:68:f4:dc:67:7b:3c: 12:4e:36:9b:5f:4f:c6:7f:5d:ee:0c:7d:0c:86:6c:fd:bd:1c: 86:9d:ef:bf:d5:a2:63:d3:e0:5d:78:15:10:4a:35:8a:8b:b9: 5c:52:af:3f:22:13:86:69:c9:93:63:51:31:76:d6:81:f5:ce: 46:55:82:45:51:a8:07:72:b6:4e:66:f2:a6:fa:97:e6:53:cc: 19:3a:17:20:d1:2b:2c:c6:7f:ee:d3:9b:cb:92:e7:8f:f1:6e: 84:a5:86:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2JntksGLkvWWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2M4NmZmZDUtYWJiNC00Y2UxLTk4ZmUtZGY2OTUzMzFhYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIQRMLq8G/3Ts2WcT9mz25SvgVGBGgodxaMr Y9zxiyu/q4MEgzcuf+EcFIUfNnXxaPwDdYP2rAZLQTtZ0YO8zjFWBWYgCAQoSCH/ RRdBSnrw0VU9BVqEbMp3NL+ekiKk+hIPwtYM6v3KUPEBNwZjA9I0oM2fSR+3IsfW GjhP2U2a4pxV+xYu75SxD2JsQvEJVJ5+vlqNXoC3lOa6PuUuDZsYeg7XoK9QGK8a vW5ytGs6o58vzKvS3IIqe8vCbyPOmWW1AkXnDam6rDwBlyK68IprU/3QD7zSQoL8 Bi7HYWWOyoJPmy4Zwkg8SjkYVYVSTJaiC5SXxCLDXpKdQ+dvTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuatcAcS7LzjzTl/0nuvqX94IzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzgwYTJkOTktZmJjYi0z NTA0LWFhODktZjVjODM1MmY0YWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIofAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKhLdVohxICNC3XAtd/jREhTlPwJiruDw26O8fMeFLZHlXEaRUboiX+ 9FqVeo0ZttpdU2MnRGgpvl1ahjyf3PJRNBGDm7Nt4qVQOF3g5Iq+rTl94Vh+2hG9 aPblqlvLmWz7elSChYXPWpmmcFnWb8XJipZNV3GGXlxhp2B/vasQL/KZuoe7F+my BZnwXchkOGsDjwgyC/mTg+7/LWj03Gd7PBJONptfT8Z/Xe4MfQyGbP29HIad77/V omPT4F14FRBKNYqLuVxSrz8iE4ZpyZNjUTF21oH1zkZVgkVRqAdytk5m8qb6l+ZT zBk6FyDRKyzGf+7Tm8uS54/xboSlhh0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:32 2025 by rpki-client