$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f437b64-3b4e-3685-84cf-90c254ccd35c.roa File: 0f437b64-3b4e-3685-84cf-90c254ccd35c.roa (raw, json) Hash identifier: gSyE1qsge6dCe+F0A8WXGs3jouRW1FkGidw+4r4IMTA= Subject key identifier: 0E:B7:F1:85:08:53:D7:B9:6A:07:59:66:DE:CF:FB:9C:E8:DA:D9:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679783521F6B86AFE6BF7000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f437b64-3b4e-3685-84cf-90c254ccd35c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.128.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:83:52:1f:6b:86:af:e6:bf:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=43af91da-ab66-4fa5-8fca-09286c0fd50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:38:1d:a9:03:bb:bc:5e:65:2b:74:1b:f2:43: a7:96:fc:ee:17:dc:cc:00:da:de:e0:50:07:63:3c: e7:fc:f5:1a:fc:d0:37:c6:ed:89:09:20:91:85:db: d9:1a:08:a5:f4:a8:80:08:ce:eb:6a:e5:b5:0e:e7: b0:ac:e4:c9:cd:68:c3:c4:ab:ac:c4:b7:e9:08:5e: fb:53:6b:e3:48:32:3a:ba:a8:2c:3f:34:4a:7a:dd: 28:fc:72:3c:9c:45:98:f8:cb:7a:10:c2:bd:f0:73: d3:6d:9a:04:2d:58:a7:17:b7:80:ad:e1:0b:67:d1: b1:24:d6:fe:fc:b0:67:69:ff:f7:6d:c3:6c:16:6c: 01:d6:47:b3:42:9a:e9:da:e3:82:ac:ac:ac:e9:3d: 78:75:67:57:a6:5c:ff:d6:1b:b5:8f:79:e1:f9:c3: 11:f9:b2:e7:9e:a0:bf:f9:86:82:63:d2:1b:d8:30: b5:a0:50:7a:7d:78:1f:df:9a:91:48:87:f2:db:e4: 8f:a4:16:b9:15:08:d1:82:8e:3e:cc:97:b8:41:51: ad:38:9d:fb:96:e8:91:7e:1a:42:a7:6d:5c:68:a1: b1:88:30:ca:b9:28:81:e6:e3:c2:a1:d6:fc:a4:d8: 2f:d5:b8:ee:bc:c0:12:26:d4:d0:7f:34:3b:57:9d: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B7:F1:85:08:53:D7:B9:6A:07:59:66:DE:CF:FB:9C:E8:DA:D9:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f437b64-3b4e-3685-84cf-90c254ccd35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:36:fb:ad:f7:79:90:fa:3b:a5:79:74:42:27:2b:64:1d:25: 0b:bc:29:e9:53:7e:a8:7d:f9:b5:13:6f:04:ee:51:03:f7:2b: 10:b4:7f:9f:18:7b:45:ba:81:33:58:4d:b2:1b:8f:26:18:94: 2e:6b:e4:df:25:5f:06:46:db:10:43:40:fa:66:ad:b2:2d:1d: c5:84:f9:6d:c2:a1:d4:63:df:d2:40:27:97:03:7d:51:27:0a: 7a:09:f6:76:48:a8:ab:c8:f2:34:3e:3e:a2:b1:35:b4:24:fa: 7f:6e:f3:a9:9b:a0:a6:63:52:dc:49:fc:b9:07:2b:1b:07:29: 54:c5:e5:ac:1f:d6:c2:31:59:55:7a:d7:5a:f7:d6:74:58:de: 81:6a:85:4a:df:f4:70:22:15:71:ac:79:69:4a:57:52:7c:16: 36:a0:1f:01:89:3a:79:82:ab:da:ad:03:d6:4e:90:5a:52:61: 09:85:aa:58:55:98:e4:24:98:a6:29:a8:0a:b5:f1:64:27:1b: a5:f1:41:37:e7:70:7e:9b:66:ec:96:83:65:2d:a9:fa:32:99: 1b:94:05:0d:83:8e:0c:15:48:e0:98:a7:c1:db:39:55:7e:83: e3:70:14:0d:c6:39:b4:74:4e:15:0f:95:02:de:cc:0a:87:f6: 4f:c7:b8:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4NSH2uGr+a/cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDNhZjkxZGEtYWI2Ni00ZmE1LThmY2EtMDkyODZjMGZkNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjgdqQO7vF5lK3Qb8kOnlvzuF9zMANre4FAH Yzzn/PUa/NA3xu2JCSCRhdvZGgil9KiACM7rauW1DuewrOTJzWjDxKusxLfpCF77 U2vjSDI6uqgsPzRKet0o/HI8nEWY+Mt6EMK98HPTbZoELVinF7eAreELZ9GxJNb+ /LBnaf/3bcNsFmwB1kezQprp2uOCrKys6T14dWdXplz/1hu1j3nh+cMR+bLnnqC/ +YaCY9Ib2DC1oFB6fXgf35qRSIfy2+SPpBa5FQjRgo4+zJe4QVGtOJ37luiRfhpC p21caKGxiDDKuSiB5uPCodb8pNgv1bjuvMASJtTQfzQ7V50NVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA638YUIU9e5agdZZt7P+5zo2tnOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY0MzdiNjQtM2I0ZS0z Njg1LTg0Y2YtOTBjMjU0Y2NkMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoD9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs2+633eZD6O6V5dEInK2QdJQu8KelTfqh9+bUTbwTuUQP3KxC0f58Y e0W6gTNYTbIbjyYYlC5r5N8lXwZG2xBDQPpmrbItHcWE+W3CodRj39JAJ5cDfVEn CnoJ9nZIqKvI8jQ+PqKxNbQk+n9u86mboKZjUtxJ/LkHKxsHKVTF5awf1sIxWVV6 11r31nRY3oFqhUrf9HAiFXGseWlKV1J8FjagHwGJOnmCq9qtA9ZOkFpSYQmFqlhV mOQkmKYpqAq18WQnG6XxQTfncH6bZuyWg2UtqfoymRuUBQ2DjgwVSOCYp8HbOVV+ g+NwFA3GObR0ThUPlQLezAqH9k/HuIY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:00:23 2025 by rpki-client