$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f642765-9ed8-3858-b1cd-e7d60158139c.roa File: 0f642765-9ed8-3858-b1cd-e7d60158139c.roa (raw, json) Hash identifier: 9s3J8mYab3ot9wNKg/wlshZbeog4GI9DEKjnBmX7x8o= Subject key identifier: 43:5F:EB:36:D5:3A:FD:9E:E1:21:81:A7:54:71:78:A9:0A:0A:D8:4E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797E3054A08E52BE3AE0540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f642765-9ed8-3858-b1cd-e7d60158139c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.85.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e3:05:4a:08:e5:2b:e3:ae:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=592c6b6f-400b-4be0-84ec-2239274a6c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:02:54:64:ab:dd:05:85:2c:5c:61:2e:47:c6: 11:3f:bf:46:bb:d7:37:fb:a2:8c:2c:4f:be:13:c2: 0c:8b:93:f5:6c:ae:42:78:79:41:d2:ea:5e:c4:cf: 0a:29:68:75:f8:e2:37:78:32:86:3f:f1:e2:99:ff: 49:5b:a8:1f:a9:3c:13:f7:92:07:e9:b1:35:d7:1b: 96:ac:a6:54:dd:de:c5:72:97:f2:8b:b7:8a:a0:5c: b7:50:72:05:e1:fa:86:ff:3f:55:82:3b:9d:41:81: aa:a9:9e:db:3b:ee:2b:5d:01:cb:2a:08:04:73:b8: 8b:f5:93:90:9f:c0:2c:34:07:09:ef:fd:1a:b4:46: f2:99:27:da:3c:d3:9a:f5:d6:16:a2:e3:54:fd:6e: cd:5a:74:45:92:9c:ff:5a:ec:32:10:31:23:fe:36: 97:c3:40:24:1b:fd:2a:4e:a9:9d:0f:a7:d9:0b:ed: fd:31:16:3b:49:31:06:b2:7f:2c:1e:70:86:bb:75: 87:63:e9:9a:b9:5b:7d:d6:40:76:e8:8e:09:cf:d2: a5:1c:a2:0d:5f:b9:2e:b7:0f:32:ff:11:ee:89:0d: c2:b1:5c:dc:b8:6d:b1:f3:fb:74:a6:3d:31:90:6c: f4:08:2d:ee:8c:b5:b8:5a:ea:e4:97:e0:c7:d6:4f: 06:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5F:EB:36:D5:3A:FD:9E:E1:21:81:A7:54:71:78:A9:0A:0A:D8:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f642765-9ed8-3858-b1cd-e7d60158139c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fb:5b:89:64:0c:f3:a1:8d:3e:e0:98:db:a3:45:aa:32:79: 05:7e:a8:69:8e:5f:29:92:08:c7:1a:02:b1:76:c2:4b:e7:15: 79:75:e1:59:4b:11:43:b6:07:5f:fb:21:63:d6:e3:17:dd:d0: 4f:72:aa:82:2a:43:ef:29:eb:6e:3b:d4:fe:f0:6d:ef:eb:ae: 00:80:d4:5f:f1:07:ec:3c:38:e0:1c:6a:e0:29:0a:93:0e:7c: a1:23:a2:a9:0b:bf:ab:37:bc:12:2f:61:f0:84:03:5f:bb:33: e0:7f:a6:cc:70:52:0b:10:58:09:2a:83:da:d4:d5:fc:47:b0: 49:7c:aa:a5:1f:b5:ae:29:f3:f8:e4:51:0f:0e:9e:14:3e:0d: 21:79:af:68:c2:56:12:b2:73:91:ad:ca:46:e8:55:70:79:59: 57:0a:42:74:80:63:d9:57:65:52:a2:d7:3e:8d:0f:8b:7e:f3: e1:79:7b:e8:f1:68:73:6c:a1:c8:8d:14:79:42:66:23:2c:38: 44:cc:78:3c:72:a4:a1:54:c4:15:f0:db:38:c6:0d:2e:99:7b: f3:f1:e8:ca:d5:78:5e:06:52:ef:b7:0c:f7:17:3e:ec:eb:0d: 0e:70:be:2b:0b:b7:e9:03:0d:f9:1d:64:8e:ca:fa:f0:5f:53: c8:ce:f6:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+MFSgjlK+OuBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTkyYzZiNmYtNDAwYi00YmUwLTg0ZWMtMjIzOTI3NGE2YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAJUZKvdBYUsXGEuR8YRP79Gu9c3+6KMLE++ E8IMi5P1bK5CeHlB0upexM8KKWh1+OI3eDKGP/Himf9JW6gfqTwT95IH6bE11xuW rKZU3d7Fcpfyi7eKoFy3UHIF4fqG/z9VgjudQYGqqZ7bO+4rXQHLKggEc7iL9ZOQ n8AsNAcJ7/0atEbymSfaPNOa9dYWouNU/W7NWnRFkpz/WuwyEDEj/jaXw0AkG/0q TqmdD6fZC+39MRY7STEGsn8sHnCGu3WHY+mauVt91kB26I4Jz9KlHKINX7kutw8y /xHuiQ3CsVzcuG2x8/t0pj0xkGz0CC3ujLW4Wurkl+DH1k8GtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENf6zbVOv2e4SGBp1RxeKkKCthOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY2NDI3NjUtOWVkOC0z ODU4LWIxY2QtZTdkNjAxNTgxMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr7W4lkDPOhjT7gmNujRaoyeQV+qGmOXymSCMcaArF2wkvnFXl14VlL EUO2B1/7IWPW4xfd0E9yqoIqQ+8p62471P7wbe/rrgCA1F/xB+w8OOAcauApCpMO fKEjoqkLv6s3vBIvYfCEA1+7M+B/psxwUgsQWAkqg9rU1fxHsEl8qqUfta4p8/jk UQ8OnhQ+DSF5r2jCVhKyc5GtykboVXB5WVcKQnSAY9lXZVKi1z6ND4t+8+F5e+jx aHNsociNFHlCZiMsOETMeDxypKFUxBXw2zjGDS6Ze/Px6MrVeF4GUu+3DPcXPuzr DQ5wvisLt+kDDfkdZI7K+vBfU8jO9uo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:41 2025 by rpki-client