$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/001a7557-900b-365d-8a59-93244c9e7355.roa File: 001a7557-900b-365d-8a59-93244c9e7355.roa (raw, json) Hash identifier: /fa++/uRBOCjXxC01cz80Z7rcclCjqyMb67qiP1xahU= Subject key identifier: D2:7C:26:CC:73:2A:6B:7F:1D:A2:BE:45:02:04:3E:00:4C:5B:D5:C7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B40B2A16C645AFBF58FD26A20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/001a7557-900b-365d-8a59-93244c9e7355.roa Signing time: Sat 20 Sep 2025 02:39:21 +0000 ROA not before: Sat 20 Sep 2025 02:39:21 +0000 ROA not after: Fri 19 Dec 2025 03:39:21 +0000 asID: 36040 IP address blocks: 34.152.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:b2:a1:6c:64:5a:fb:f5:8f:d2:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 20 02:39:21 2025 GMT Not After : Dec 19 03:39:21 2025 GMT Subject: CN=b13ea8ad-d43c-42a4-a114-4286c2f1310d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:93:40:a7:b9:7a:eb:b3:03:5f:c7:0b:54: 54:e3:7a:00:93:bf:18:2f:98:73:34:dc:42:e2:d3: 04:2e:70:58:c7:d7:a2:f2:8b:01:2c:a9:02:4a:be: 16:d5:c5:63:5c:cf:69:d7:c7:e9:9b:70:a0:11:72: b9:24:a4:6f:43:61:17:cf:62:45:d5:91:be:c2:fd: 49:50:30:bd:93:c4:20:b6:60:4d:fa:e3:c8:85:50: b2:be:de:d2:f7:c3:94:e5:df:14:92:1f:c5:3c:89: 02:80:61:95:d7:c0:01:8f:54:75:b0:88:9e:b7:68: 89:54:2a:9a:f0:c5:d8:85:85:ab:a7:92:06:07:83: 73:3b:6c:07:13:6d:a7:2e:fb:58:97:5a:bc:9d:1c: 6e:e5:64:bd:76:cd:d0:a8:fc:ab:b5:29:58:ac:ee: ca:09:cb:8a:b2:35:e8:d0:6f:b8:b5:82:62:83:d3: 74:6b:89:6a:ad:b6:90:73:01:62:d7:78:6a:27:85: a9:53:99:ff:b0:e3:79:76:dc:7f:1c:16:2a:dd:94: 0b:16:9b:86:3b:b7:3f:b7:07:bf:87:aa:2a:59:b2: e5:b6:21:4c:c8:9f:bf:78:41:5f:e5:20:06:e4:33: 02:35:82:30:4f:62:66:b3:f6:55:26:16:c8:96:1f: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7C:26:CC:73:2A:6B:7F:1D:A2:BE:45:02:04:3E:00:4C:5B:D5:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/001a7557-900b-365d-8a59-93244c9e7355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ac:d9:d2:96:00:e7:06:8d:b0:f5:a4:55:fb:21:c5:57:d0: c3:1b:46:39:b4:0b:b9:df:1b:41:b0:16:fe:89:86:ef:9e:50: 2d:75:42:19:6b:e4:6e:93:42:29:7c:2c:82:d3:4e:70:eb:2e: 22:3e:6e:b8:a5:bf:97:ec:a4:1c:a6:e3:b3:79:25:b1:b1:cc: 25:4b:d0:24:ef:ee:c4:fc:5b:76:8c:b5:00:91:6e:a4:18:8d: b1:24:86:ec:3f:f3:8d:da:1a:b7:9a:46:9a:1d:5a:ca:97:b0: 50:f2:74:24:bb:1f:47:08:a2:8b:a2:bc:31:60:5a:55:a6:2b: f1:28:ba:cc:47:50:b7:da:2d:76:05:e9:30:7f:c6:38:9d:e0: e1:a2:73:c4:d5:4c:69:49:7e:6b:5c:44:d9:f2:49:41:c2:f2: c4:67:fe:9a:87:ed:ee:8b:81:6c:25:0d:64:95:26:10:ae:c5: 33:f9:3e:3e:c3:62:26:e1:6a:e6:b6:8b:ce:31:8a:16:83:cf: cb:49:2c:b8:5c:41:1c:68:10:99:ad:99:3b:8d:34:ec:28:cb: 62:d5:86:b1:f4:1e:ae:fb:ca:21:9a:8d:d7:8d:24:de:e3:52: 81:ed:6e:0c:bd:d7:3d:03:85:82:c5:b7:ca:34:9f:2a:8e:ab: a4:72:8d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAsqFsZFr79Y/SaiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkyMDAyMzkyMVoXDTI1MTIxOTAzMzkyMVowLzEtMCsGA1UEAxMk YjEzZWE4YWQtZDQzYy00MmE0LWExMTQtNDI4NmMyZjEzMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFmTQKe5euuzA1/HC1RU43oAk78YL5hzNNxC 4tMELnBYx9ei8osBLKkCSr4W1cVjXM9p18fpm3CgEXK5JKRvQ2EXz2JF1ZG+wv1J UDC9k8QgtmBN+uPIhVCyvt7S98OU5d8Ukh/FPIkCgGGV18ABj1R1sIiet2iJVCqa 8MXYhYWrp5IGB4NzO2wHE22nLvtYl1q8nRxu5WS9ds3QqPyrtSlYrO7KCcuKsjXo 0G+4tYJig9N0a4lqrbaQcwFi13hqJ4WpU5n/sON5dtx/HBYq3ZQLFpuGO7c/twe/ h6oqWbLltiFMyJ+/eEFf5SAG5DMCNYIwT2Jms/ZVJhbIlh8VnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJ8JsxzKmt/HaK+RQIEPgBMW9XHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDAxYTc1NTctOTAwYi0z NjVkLThhNTktOTMyNDRjOWU3MzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIphYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6s2dKWAOcGjbD1pFX7IcVX0MMbRjm0C7nfG0GwFv6Jhu+eUC11Qhlr 5G6TQil8LILTTnDrLiI+brilv5fspBym47N5JbGxzCVL0CTv7sT8W3aMtQCRbqQY jbEkhuw/843aGreaRpodWsqXsFDydCS7H0cIoouivDFgWlWmK/EousxHULfaLXYF 6TB/xjid4OGic8TVTGlJfmtcRNnySUHC8sRn/pqH7e6LgWwlDWSVJhCuxTP5Pj7D Yibhaua2i84xihaDz8tJLLhcQRxoEJmtmTuNNOwoy2LVhrH0Hq77yiGajdeNJN7j UoHtbgy91z0DhYLFt8o0nyqOq6Ryjcs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:40:23 2025 by rpki-client