$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01ecb3b6-446e-3c80-ada3-5ce0b535c48d.roa File: 01ecb3b6-446e-3c80-ada3-5ce0b535c48d.roa (raw, json) Hash identifier: d/SWji7RWp/DP3Zn34D+nCezuw+ktDUdKDD9gFou1cA= Subject key identifier: 08:E0:66:35:4A:B8:4A:7F:56:54:D8:F8:EE:4C:41:92:1B:4D:EC:E6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D2D3484A4285230BBE94 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01ecb3b6-446e-3c80-ada3-5ce0b535c48d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.95.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d2:d3:48:4a:42:85:23:0b:be:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=8bfa4670-8289-40b9-ac01-d597f525dacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:58:dc:fd:49:a3:b7:2c:2b:c3:10:f5:42: 7d:57:80:51:66:1b:df:ec:33:3a:83:7b:49:34:c3: dd:68:fc:a6:66:d4:22:f6:2c:60:0f:8f:04:21:1b: 7f:59:5e:8f:33:fd:83:0b:20:b6:a8:fb:90:4c:f3: b4:23:ef:a8:77:8d:c9:71:69:7f:33:fc:2e:19:e0: a9:33:ee:71:08:d9:63:db:ca:e5:95:a4:c3:9e:89: 8c:4c:ce:8a:d5:ae:24:73:b9:cb:92:95:b7:3d:dc: b7:42:3e:86:15:1a:52:2d:cd:76:9e:7c:37:bc:b0: 01:c3:3e:e4:6d:d3:94:50:ee:ec:10:51:f7:91:e9: 1c:4d:24:f6:b3:75:3a:2f:ef:3b:2e:ec:bc:52:f0: 51:b5:0f:94:32:d8:b3:42:45:41:7a:97:90:73:b0: 50:da:29:0d:90:51:7f:27:d8:de:ca:6a:b2:23:39: db:3d:4d:34:33:55:65:78:ae:20:61:f8:81:7d:1b: 79:a9:66:0a:6f:ea:e0:1f:38:02:72:8e:3d:43:32: 90:05:48:0a:23:60:e1:b1:08:b6:73:f7:d4:97:1a: 69:e7:70:c6:22:c2:c3:91:88:d3:02:dc:03:83:84: 4c:c2:3a:fe:d1:49:e3:e0:e9:37:f3:63:c9:66:02: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E0:66:35:4A:B8:4A:7F:56:54:D8:F8:EE:4C:41:92:1B:4D:EC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01ecb3b6-446e-3c80-ada3-5ce0b535c48d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f9:61:19:00:2f:e9:6d:d7:fc:f5:c1:46:df:c1:1d:bb:3f: 52:ca:7a:a6:05:61:72:ed:f0:97:d0:51:72:14:bb:8f:89:18: f1:ee:c0:4b:28:31:21:8f:ac:9c:ae:ea:24:ff:73:c5:c5:63: 60:aa:81:53:31:fd:73:36:4e:35:ec:aa:05:4b:21:87:fa:2a: ef:d7:c3:a9:0e:b3:9b:84:25:bb:cb:ff:0b:c6:10:1f:e9:40: 2f:a4:e3:28:ab:31:35:29:d4:e9:3e:9b:c1:e0:be:5a:0e:6a: 87:5d:bd:d4:d8:ec:78:ba:2f:fb:c2:92:db:fe:83:90:3a:14: f2:79:e1:b6:31:bf:6d:c3:76:4b:57:14:21:7b:81:ed:13:d3: a6:7d:89:a7:df:e2:f0:cf:c2:52:d9:4a:63:09:7f:0c:76:25: 10:80:3d:80:b5:44:fd:33:2d:b7:c6:35:4c:73:64:b3:3b:da: ad:39:e7:f6:96:a4:95:db:4b:58:31:1e:89:c2:ce:1a:71:a0: 7e:1c:29:fb:82:80:83:25:10:5c:16:fd:fb:4a:d6:48:09:f9: 38:5d:55:5e:fb:65:3e:ce:03:36:d6:71:5a:3c:8d:f1:7c:6e: b4:73:42:dc:bf:7f:5c:a5:af:94:72:0f:08:7e:34:a0:a7:ee: 41:d6:4f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9LTSEpChSMLvpQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OGJmYTQ2NzAtODI4OS00MGI5LWFjMDEtZDU5N2Y1MjVkYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorFY3P1Jo7csK8MQ9UJ9V4BRZhvf7DM6g3tJ NMPdaPymZtQi9ixgD48EIRt/WV6PM/2DCyC2qPuQTPO0I++od43JcWl/M/wuGeCp M+5xCNlj28rllaTDnomMTM6K1a4kc7nLkpW3Pdy3Qj6GFRpSLc12nnw3vLABwz7k bdOUUO7sEFH3kekcTST2s3U6L+87Luy8UvBRtQ+UMtizQkVBepeQc7BQ2ikNkFF/ J9jeymqyIznbPU00M1VleK4gYfiBfRt5qWYKb+rgHzgCco49QzKQBUgKI2DhsQi2 c/fUlxpp53DGIsLDkYjTAtwDg4RMwjr+0Unj4Ok382PJZgIcqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjgZjVKuEp/VlTY+O5MQZIbTezmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDFlY2IzYjYtNDQ2ZS0z YzgwLWFkYTMtNWNlMGI1MzVjNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr5YRkAL+lt1/z1wUbfwR27P1LKeqYFYXLt8JfQUXIUu4+JGPHuwEso MSGPrJyu6iT/c8XFY2CqgVMx/XM2TjXsqgVLIYf6Ku/Xw6kOs5uEJbvL/wvGEB/p QC+k4yirMTUp1Ok+m8HgvloOaoddvdTY7Hi6L/vCktv+g5A6FPJ54bYxv23DdktX FCF7ge0T06Z9iaff4vDPwlLZSmMJfwx2JRCAPYC1RP0zLbfGNUxzZLM72q055/aW pJXbS1gxHonCzhpxoH4cKfuCgIMlEFwW/ftK1kgJ+ThdVV77ZT7OAzbWcVo8jfF8 brRzQty/f1ylr5RyDwh+NKCn7kHWTws= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:39 2025 by rpki-client