$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00b6942d-b198-3aca-b72b-19ee81743956.roa File: 00b6942d-b198-3aca-b72b-19ee81743956.roa (raw, json) Hash identifier: e4kBZrBz87U/UzWAFCv83DnlxqHGwUboDxm1Oebf334= Subject key identifier: F7:27:86:BA:80:C0:7A:D9:74:E8:EC:19:17:BA:8F:51:EC:B3:EE:D7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A8F5F92AE56B761DA900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00b6942d-b198-3aca-b72b-19ee81743956.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.132.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a8:f5:f9:2a:e5:6b:76:1d:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1b7b9a8b-6088-4145-bdc1-bf4a9e25a793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:05:e8:93:eb:3b:72:07:4c:cb:3a:b4:ad: cf:e1:db:1a:3b:99:0b:a5:a7:b7:da:1e:7c:a8:c2: 42:11:55:16:29:ae:e3:9d:96:be:fd:ba:95:cf:22: 1f:0c:f8:69:18:35:8f:b4:e6:39:aa:ed:4d:24:77: ba:82:d4:4e:91:5e:b5:c3:40:50:d3:d2:52:d9:71: cc:db:86:da:ce:25:92:10:c1:e7:e3:63:97:2c:28: 8e:49:ad:07:49:d8:be:33:df:41:f3:09:d4:dc:65: 3f:e7:e9:78:89:f6:3f:e4:7c:5d:ed:74:f1:7d:1d: 4a:ed:c2:86:bf:5e:f5:09:50:74:12:f7:9f:68:5a: a9:0c:1b:e8:28:e0:9f:d3:26:56:ce:6a:eb:b4:ac: 94:c8:66:fb:a3:1a:94:30:2d:94:7b:bb:58:ff:46: 06:34:c6:f0:10:60:c1:1c:c0:1a:65:3c:3b:f2:00: 27:3b:a3:99:67:08:a3:a4:1a:54:f5:79:96:83:14: ba:46:a5:fc:61:b0:d2:fb:4b:e6:d9:99:3b:9b:53: e5:3e:32:21:76:d4:32:af:18:6f:7a:06:c5:58:69: 6d:31:32:76:11:06:c0:ca:a2:fa:d7:ff:97:a1:7d: 65:dd:88:09:07:60:76:74:76:9e:a0:5c:5a:27:21: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:27:86:BA:80:C0:7A:D9:74:E8:EC:19:17:BA:8F:51:EC:B3:EE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00b6942d-b198-3aca-b72b-19ee81743956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e5:29:58:4b:cb:50:3d:a1:ec:66:16:c0:6c:a2:d1:bc:4f: 6f:75:be:53:4c:89:45:57:68:42:52:89:25:19:fa:c4:3e:cc: ad:27:d2:e6:4b:ea:4a:52:bd:aa:06:3c:ca:47:c6:16:64:04: ec:46:9d:d1:a5:f3:3e:a1:83:72:a1:29:b6:a3:0b:1f:41:1f: cb:a6:78:4c:10:63:b4:f5:56:d2:fa:94:fd:e9:52:46:61:ac: 41:f4:05:ee:93:47:ad:de:40:4b:71:cf:4f:2f:3d:69:d4:7d: 00:df:24:30:a4:3a:d8:28:f5:00:cc:fa:57:61:75:2a:e9:1f: 35:e9:60:b4:46:c1:4e:28:47:e2:46:d0:28:e4:8c:a9:b9:53: 08:41:24:a5:ee:a6:bc:94:6a:e4:0a:71:5a:0b:e9:e7:11:f8: 96:f4:9a:f9:66:c4:6c:d8:4c:7f:49:0a:d3:2e:59:ae:65:dc: 1f:37:04:38:54:47:c3:9e:78:1b:82:bd:ec:30:ae:c2:26:7e: 2b:fc:e1:51:d4:c0:16:fb:58:91:41:72:f9:5b:46:7f:1b:53: b0:00:ae:dd:2a:5a:74:8f:ad:41:0b:33:b8:45:d3:ea:67:fa: 38:17:f2:68:e1:9c:25:3a:db:9b:59:b7:3b:23:e9:11:24:38: 0f:7d:0b:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6j1+Srla3YdqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWI3YjlhOGItNjA4OC00MTQ1LWJkYzEtYmY0YTllMjVhNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiMF6JPrO3IHTMs6tK3P4dsaO5kLpae32h58 qMJCEVUWKa7jnZa+/bqVzyIfDPhpGDWPtOY5qu1NJHe6gtROkV61w0BQ09JS2XHM 24baziWSEMHn42OXLCiOSa0HSdi+M99B8wnU3GU/5+l4ifY/5Hxd7XTxfR1K7cKG v171CVB0EvefaFqpDBvoKOCf0yZWzmrrtKyUyGb7oxqUMC2Ue7tY/0YGNMbwEGDB HMAaZTw78gAnO6OZZwijpBpU9XmWgxS6RqX8YbDS+0vm2Zk7m1PlPjIhdtQyrxhv egbFWGltMTJ2EQbAyqL61/+XoX1l3YgJB2B2dHaeoFxaJyG6oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcnhrqAwHrZdOjsGRe6j1Hss+7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDBiNjk0MmQtYjE5OC0z YWNhLWI3MmItMTllZTgxNzQzOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDlKVhLy1A9oexmFsBsotG8T291vlNMiUVXaEJSiSUZ+sQ+zK0n0uZL 6kpSvaoGPMpHxhZkBOxGndGl8z6hg3KhKbajCx9BH8umeEwQY7T1VtL6lP3pUkZh rEH0Be6TR63eQEtxz08vPWnUfQDfJDCkOtgo9QDM+ldhdSrpHzXpYLRGwU4oR+JG 0CjkjKm5UwhBJKXupryUauQKcVoL6ecR+Jb0mvlmxGzYTH9JCtMuWa5l3B83BDhU R8OeeBuCvewwrsImfiv84VHUwBb7WJFBcvlbRn8bU7AArt0qWnSPrUELM7hF0+pn +jgX8mjhnCU625tZtzsj6REkOA99C44= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:54 2025 by rpki-client