$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09632844-9c41-3193-b58c-7e1dd982b169.roa File: 09632844-9c41-3193-b58c-7e1dd982b169.roa (raw, json) Hash identifier: QEVvG8XpEv1A4NccQwQQzRGsr3wD2TB7VfvZjd2An74= Subject key identifier: FF:77:6E:79:43:4A:F9:C8:61:33:94:6B:B4:D8:B3:C5:26:6D:53:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B864CB093796669660BA94380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09632844-9c41-3193-b58c-7e1dd982b169.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 34.190.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b0:93:79:66:69:66:0b:a9:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=e33b3ad3-e5ab-404b-bee0-0650f644d0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d5:ec:5b:8c:9b:6a:ea:30:7d:bb:70:dd:72: 2c:35:2f:e0:20:56:ba:e6:21:a9:a5:62:ca:55:c9: 6f:c6:50:e7:c1:c5:01:4d:8a:1e:36:c6:97:1b:94: 35:05:1d:5b:dd:2b:b8:b8:a1:6a:7a:17:99:b6:c6: ee:44:49:a1:a2:8f:95:f1:15:ff:62:18:4e:33:f0: 34:b1:d4:ea:84:1d:91:94:48:31:1b:8a:03:2d:55: fe:93:27:7d:61:9e:b0:13:d2:35:8a:45:3b:07:47: fb:ac:3c:83:68:1a:a6:60:47:ca:5b:75:40:c0:b0: b5:79:d5:ba:93:8e:44:86:45:37:b5:7a:e7:19:85: a3:4d:75:2a:55:13:d1:1f:5d:8f:3d:33:5e:c7:5e: c8:b4:da:7d:be:82:25:62:4e:51:8c:41:46:1e:46: 33:2b:01:e4:9f:c0:01:09:38:00:b3:b9:59:32:20: 19:0d:89:b4:42:96:ea:8a:48:fa:33:60:35:70:4e: 19:13:9b:16:7c:53:fc:ad:5f:8f:a0:14:70:06:b8: 62:b3:27:ad:d4:61:5e:7e:d4:e4:a7:42:51:bc:79: ae:2c:35:88:87:3c:c0:88:5c:dc:47:b7:f5:52:19: c1:06:9f:9a:88:b7:da:52:a2:23:93:6e:b6:b2:39: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:77:6E:79:43:4A:F9:C8:61:33:94:6B:B4:D8:B3:C5:26:6D:53:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09632844-9c41-3193-b58c-7e1dd982b169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:21:45:14:27:03:9e:88:7d:52:38:fc:90:33:50:b9:4d:dd: 02:e2:f8:f4:a9:31:cd:4f:53:cf:55:48:95:67:ec:62:d2:4b: ba:d6:06:a6:e4:29:f7:be:00:e7:fe:ea:c6:6d:46:9c:0c:72: 98:5d:f5:28:90:07:82:11:92:b0:87:af:27:bd:0a:c7:c7:70: b3:bf:03:79:a4:b9:70:6b:0a:98:8a:55:e7:64:d1:fa:9a:44: 74:aa:f0:20:1a:4b:18:6a:66:2c:ac:a8:0b:5d:f7:1b:ec:4b: 21:01:f7:d0:4e:10:36:bd:b8:c2:dd:21:be:d3:04:61:db:8c: 76:4c:89:a4:81:ce:61:43:f5:9a:4f:5b:ac:3e:8a:06:52:23: d4:3e:c1:61:ee:ce:6e:31:a3:c4:05:a3:a8:c1:c0:df:30:b8: b7:dd:d8:92:97:54:59:15:f8:12:ab:1e:4f:f9:ce:16:d7:f7: aa:3b:26:3e:2b:b7:2b:89:26:fb:1b:7c:8f:67:15:b7:a9:67: 89:50:c2:57:5c:fa:41:6f:8d:2e:86:f4:64:d6:ac:e0:71:fa: a0:c0:cc:39:1e:be:99:af:c7:c9:86:f6:66:5e:83:97:16:59: ad:ec:a9:94:36:cf:26:37:2d:a2:f4:5d:76:bb:99:45:93:10: 67:ba:7b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTLCTeWZpZgupQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk ZTMzYjNhZDMtZTVhYi00MDRiLWJlZTAtMDY1MGY2NDRkMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNXsW4ybauowfbtw3XIsNS/gIFa65iGppWLK VclvxlDnwcUBTYoeNsaXG5Q1BR1b3Su4uKFqeheZtsbuREmhoo+V8RX/YhhOM/A0 sdTqhB2RlEgxG4oDLVX+kyd9YZ6wE9I1ikU7B0f7rDyDaBqmYEfKW3VAwLC1edW6 k45EhkU3tXrnGYWjTXUqVRPRH12PPTNex17ItNp9voIlYk5RjEFGHkYzKwHkn8AB CTgAs7lZMiAZDYm0Qpbqikj6M2A1cE4ZE5sWfFP8rV+PoBRwBrhisyet1GFeftTk p0JRvHmuLDWIhzzAiFzcR7f1UhnBBp+aiLfaUqIjk262sjkIjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP93bnlDSvnIYTOUa7TYs8UmbVOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDk2MzI4NDQtOWM0MS0z MTkzLWI1OGMtN2UxZGQ5ODJiMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIhRRQnA56IfVI4/JAzULlN3QLi+PSpMc1PU89VSJVn7GLSS7rWBqbk Kfe+AOf+6sZtRpwMcphd9SiQB4IRkrCHrye9CsfHcLO/A3mkuXBrCpiKVedk0fqa RHSq8CAaSxhqZiysqAtd9xvsSyEB99BOEDa9uMLdIb7TBGHbjHZMiaSBzmFD9ZpP W6w+igZSI9Q+wWHuzm4xo8QFo6jBwN8wuLfd2JKXVFkV+BKrHk/5zhbX96o7Jj4r tyuJJvsbfI9nFbepZ4lQwldc+kFvjS6G9GTWrOBx+qDAzDkevpmvx8mG9mZeg5cW Wa3sqZQ2zyY3LaL0XXa7mUWTEGe6e9Y= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:01 2025 by rpki-client