$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/34d249c2-ff02-3617-9829-9253b682e85d.roa File: 34d249c2-ff02-3617-9829-9253b682e85d.roa (raw, json) Hash identifier: hLjZZ8i5MatFIWZCA7FjfUXrP2IVq3joozeZduHNwuE= Subject key identifier: BE:64:42:6B:A9:E9:48:00:CE:DF:B8:BC:9B:CA:E6:F5:33:48:66:24 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584BB1C1B43D1E5A66A86A6C11A0 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/34d249c2-ff02-3617-9829-9253b682e85d.roa Signing time: Thu 30 Oct 2025 14:36:04 +0000 ROA not before: Thu 30 Oct 2025 14:36:04 +0000 ROA not after: Wed 28 Jan 2026 15:36:04 +0000 asID: 812 IP address blocks: 74.198.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:c1:b4:3d:1e:5a:66:a8:6a:6c:11:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Oct 30 14:36:04 2025 GMT Not After : Jan 28 15:36:04 2026 GMT Subject: CN=b9378b00-70d7-44c6-bde6-8f7488db6a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:28:69:f4:1f:65:2e:eb:76:20:7a:18:0e: d3:b2:0d:29:3b:c3:73:2a:86:b3:9f:f0:8e:d7:b3: ff:8f:d2:94:c3:08:7c:3a:cd:56:0c:5e:d5:5d:64: ac:c4:f0:fb:74:3a:fe:ba:3d:56:90:03:46:9c:aa: 23:5a:29:b1:72:97:bd:3a:6c:08:85:5c:7f:bc:51: 51:4a:c9:1a:13:47:a1:bc:16:1b:cf:93:26:bd:91: 78:c8:03:63:c1:54:ef:5d:7a:9d:d2:ff:b8:63:76: ba:bf:05:5f:d0:58:ce:27:eb:32:77:31:7f:eb:dc: 3a:31:7a:b8:3a:d3:a9:70:d3:0b:9a:87:c1:fd:aa: ee:b0:82:2b:2f:20:68:4c:ba:b9:37:43:a1:81:3c: 79:a6:4f:3c:aa:36:1b:97:37:5c:9f:d4:45:79:cd: 50:69:f7:52:2a:5e:1b:6a:23:d7:e5:e0:b7:d0:7f: c5:63:f6:02:fc:43:94:44:7f:8a:89:85:31:12:e9: 17:fc:85:9e:11:d2:8b:57:f7:27:31:d4:f3:c6:c1: 79:ef:39:66:45:10:bd:0f:9c:0c:f5:99:b5:22:d7: 35:16:bd:4f:5d:1e:11:18:36:1b:d0:62:30:8d:c4: 0c:cd:8e:5d:be:f8:ea:13:d3:cf:d2:e4:e2:3f:af: b3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:64:42:6B:A9:E9:48:00:CE:DF:B8:BC:9B:CA:E6:F5:33:48:66:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/34d249c2-ff02-3617-9829-9253b682e85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:22:14:09:44:51:7f:da:d8:dc:2c:da:31:ff:ca:eb:d1:b6: bf:95:67:58:ae:3b:cc:c5:a8:06:0d:b6:8f:28:32:2d:ce:f8: d6:bd:fa:6c:fb:fb:5a:7d:6a:e7:b4:61:af:99:46:ae:95:e0: 0f:b2:78:c5:f3:a9:92:ce:f3:d8:55:71:e9:a5:a5:5e:ed:5a: d4:a2:89:d3:d7:d3:d1:e9:c7:2e:21:5f:41:ff:b9:0e:74:8a: 60:1f:05:2a:c1:b0:56:af:1a:fc:2c:b1:f1:63:ba:99:35:af: ac:c6:56:23:dd:7b:85:cd:2e:73:fc:ec:63:bc:b3:2a:ba:db: 64:5e:79:a5:f3:e7:0a:60:55:b8:48:3e:eb:d6:33:62:31:89: ce:09:23:e9:53:2a:02:8b:9c:9f:bc:15:0c:85:56:af:72:b5: 2d:42:47:24:14:57:fd:26:3d:d0:9f:aa:9a:0e:bc:58:77:1e: db:48:7e:eb:42:da:72:bf:4b:d2:70:f5:7c:6b:bb:1f:9f:c5: 7a:ab:46:59:98:8e:56:b9:12:fc:83:b7:de:a5:19:3b:90:17: eb:55:4c:62:cd:f4:cc:16:4a:75:72:a4:47:3a:9c:e0:9f:05: 2f:c1:1e:70:44:2b:75:34:9e:6f:51:ea:b3:1e:e8:11:88:0a: a9:09:63:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxwbQ9HlpmqGpsEaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI1MTAzMDE0MzYwNFoXDTI2MDEyODE1MzYwNFowLzEtMCsGA1UEAxMk YjkzNzhiMDAtNzBkNy00NGM2LWJkZTYtOGY3NDg4ZGI2YTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFcoafQfZS7rdiB6GA7Tsg0pO8NzKoazn/CO 17P/j9KUwwh8Os1WDF7VXWSsxPD7dDr+uj1WkANGnKojWimxcpe9OmwIhVx/vFFR SskaE0ehvBYbz5MmvZF4yANjwVTvXXqd0v+4Y3a6vwVf0FjOJ+sydzF/69w6MXq4 OtOpcNMLmofB/arusIIrLyBoTLq5N0OhgTx5pk88qjYblzdcn9RFec1QafdSKl4b aiPX5eC30H/FY/YC/EOURH+KiYUxEukX/IWeEdKLV/cnMdTzxsF57zlmRRC9D5wM 9Zm1Itc1Fr1PXR4RGDYb0GIwjcQMzY5dvvjqE9PP0uTiP6+zJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5kQmup6UgAzt+4vJvK5vUzSGYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMzRkMjQ5YzItZmYwMi0z NjE3LTk4MjktOTI1M2I2ODJlODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESsbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwiFAlEUX/a2Nws2jH/yuvRtr+VZ1iuO8zFqAYNto8oMi3O+Na9+mz7 +1p9aue0Ya+ZRq6V4A+yeMXzqZLO89hVcemlpV7tWtSiidPX09Hpxy4hX0H/uQ50 imAfBSrBsFavGvwssfFjupk1r6zGViPde4XNLnP87GO8syq622ReeaXz5wpgVbhI PuvWM2Ixic4JI+lTKgKLnJ+8FQyFVq9ytS1CRyQUV/0mPdCfqpoOvFh3HttIfutC 2nK/S9Jw9Xxrux+fxXqrRlmYjla5EvyDt96lGTuQF+tVTGLN9MwWSnVypEc6nOCf BS/BHnBEK3U0nm9R6rMe6BGICqkJY1M= -----END CERTIFICATE-----Generated at Wed Nov 5 03:07:57 2025 by rpki-client