$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08ed88fd-dcbe-34a0-8465-999477041b5a.roa File: 08ed88fd-dcbe-34a0-8465-999477041b5a.roa (raw, json) Hash identifier: USN52CPKqXDXDfgLxAIuYwwUWl62tN8XBwR4rh8ZjHw= Subject key identifier: 1E:6C:29:94:56:A3:F0:7A:37:53:08:AE:6A:6B:1A:73:87:11:A2:79 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797CF097E6DFD2EDFD58280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08ed88fd-dcbe-34a0-8465-999477041b5a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.32.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:cf:09:7e:6d:fd:2e:df:d5:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=48a5302c-1414-4632-a4a4-72b20f1c3b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:19:be:0a:47:25:df:34:68:21:5a:ea:c8:d3: 91:a3:ac:8c:ff:46:b9:20:ec:a2:d0:6f:db:a2:34: 88:db:ca:61:a2:88:04:20:49:cc:f2:d7:6a:4f:07: 32:69:09:1c:22:f0:9f:f1:ff:af:71:a9:34:a3:46: ec:70:08:0c:ca:fc:54:3b:fd:e6:3e:90:c1:e2:00: 1e:af:36:4c:00:93:65:90:dd:bf:01:05:4a:de:fc: c9:87:cf:05:5a:97:eb:c8:3b:dd:1b:72:27:26:ed: 49:c0:fe:21:e6:9f:ca:bc:7e:fa:be:e1:93:bf:93: 8b:ac:77:5d:9c:73:ab:d4:10:c6:7d:8f:68:48:0e: 0c:04:01:24:89:b2:24:0d:7f:0e:73:88:1d:7a:03: 0a:9b:07:f3:41:5e:4b:4f:20:78:b9:6b:82:79:8e: c4:f4:e8:7d:7b:f6:8f:f1:7f:21:e0:53:fe:00:5d: 75:ef:f5:e3:08:b6:0a:70:69:7d:83:ad:aa:85:8e: 17:8a:fd:7d:11:e4:d6:6b:5e:ad:1d:02:fc:57:f7: cd:c3:a7:a0:a5:e5:37:b6:4f:98:ec:9a:48:93:47: ce:67:3d:3b:80:c8:3a:c8:34:5d:37:dc:16:0e:98: 7c:af:0b:3b:a6:3d:44:95:e9:4a:dd:8a:99:91:60: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6C:29:94:56:A3:F0:7A:37:53:08:AE:6A:6B:1A:73:87:11:A2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08ed88fd-dcbe-34a0-8465-999477041b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.32.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ee:79:4f:f0:94:48:f5:1c:9e:e3:03:70:ef:1e:85:31:cf: 46:c4:96:bf:7d:50:9d:5f:cc:0d:8d:3a:41:2e:d3:c6:85:48: 7d:be:cf:3f:a6:3a:ab:fb:c7:d5:11:fc:ad:c6:d6:06:7c:67: 58:03:a4:75:04:83:b7:56:d6:ba:12:81:ba:e5:66:b2:2e:3e: 5f:db:7d:e5:96:b2:a6:fc:cf:4a:0f:13:71:07:5b:b0:50:2f: ec:51:17:a3:2f:51:f6:ab:34:0c:cd:71:6d:37:20:04:36:72: c8:b6:6d:85:ed:f1:16:96:52:e3:66:77:bb:fa:84:98:82:14: 0b:36:47:76:82:66:ff:c1:bb:61:63:10:d7:30:f4:91:52:c3: 60:3e:43:4a:8e:fe:8f:c0:7f:20:e5:93:16:b5:11:94:eb:23: 7e:ce:f7:f1:41:83:96:78:20:26:59:ad:c0:24:1c:59:cf:04: 0b:c0:b9:4d:5c:a6:7e:92:33:20:c3:60:e9:3a:a7:60:4e:ec: 77:21:56:4b:6f:10:67:b9:0f:de:2e:6d:f2:15:c7:9a:30:30: 72:78:c0:ab:08:54:d1:90:64:bb:50:18:bf:21:e4:bc:ac:0b: 1a:07:1e:e7:7e:61:d9:0e:e8:95:8a:35:ca:84:05:35:3d:51: 30:b2:be:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl88Jfm39Lt/VgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDhhNTMwMmMtMTQxNC00NjMyLWE0YTQtNzJiMjBmMWMzYjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRm+Ckcl3zRoIVrqyNORo6yM/0a5IOyi0G/b ojSI28phoogEIEnM8tdqTwcyaQkcIvCf8f+vcak0o0bscAgMyvxUO/3mPpDB4gAe rzZMAJNlkN2/AQVK3vzJh88FWpfryDvdG3InJu1JwP4h5p/KvH76vuGTv5OLrHdd nHOr1BDGfY9oSA4MBAEkibIkDX8Oc4gdegMKmwfzQV5LTyB4uWuCeY7E9Oh9e/aP 8X8h4FP+AF117/XjCLYKcGl9g62qhY4Xiv19EeTWa16tHQL8V/fNw6egpeU3tk+Y 7JpIk0fOZz07gMg6yDRdN9wWDph8rws7pj1ElelK3YqZkWBN2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5sKZRWo/B6N1MIrmprGnOHEaJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDhlZDg4ZmQtZGNiZS0z NGEwLTg0NjUtOTk5NDc3MDQxYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/ueU/wlEj1HJ7jA3DvHoUxz0bElr99UJ1fzA2NOkEu08aFSH2+zz+m Oqv7x9UR/K3G1gZ8Z1gDpHUEg7dW1roSgbrlZrIuPl/bfeWWsqb8z0oPE3EHW7BQ L+xRF6MvUfarNAzNcW03IAQ2csi2bYXt8RaWUuNmd7v6hJiCFAs2R3aCZv/Bu2Fj ENcw9JFSw2A+Q0qO/o/AfyDlkxa1EZTrI37O9/FBg5Z4ICZZrcAkHFnPBAvAuU1c pn6SMyDDYOk6p2BO7HchVktvEGe5D94ubfIVx5owMHJ4wKsIVNGQZLtQGL8h5Lys CxoHHud+YdkO6JWKNcqEBTU9UTCyvuU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:06 2025 by rpki-client