$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa File: 0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa (raw, json) Hash identifier: Tizcfofz+3nTGuNID9pcA+OHS6CIm82Oed226xEu55I= Subject key identifier: 4C:F4:EA:B3:12:A7:0F:41:3A:4E:DC:C8:69:37:28:2E:B0:0F:0F:7F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD73653F7D82E6AB996580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.121.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:73:65:3f:7d:82:e6:ab:99:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=73d9ebac-ff6f-4031-9c14-0d623bf6d28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:11:59:84:21:85:f9:22:c9:8a:90:53:cf: b1:37:27:f2:b1:d5:1c:bd:6d:fb:d3:74:c7:c3:31: 6f:9c:7b:4d:8b:29:79:55:e7:80:35:6d:60:b7:71: ff:79:e7:9e:08:13:a8:52:b6:fc:bd:0f:32:df:57: 75:81:b7:4c:2c:df:52:da:69:0b:fc:5c:5c:67:45: 49:ce:00:42:d9:7f:2b:4f:96:26:0a:4c:5a:fd:c8: aa:95:1c:5e:0e:a5:90:fd:7f:04:56:f4:f9:9b:7b: 42:95:ab:26:e7:a0:e6:c3:2c:f5:5a:dc:6d:86:ba: cf:0f:b1:86:d6:8b:a1:f2:9c:7a:5d:73:3f:b4:2c: d6:97:7d:3f:4c:80:a3:bc:43:26:8a:66:74:c0:35: 86:56:d2:65:2c:4d:0e:46:bc:45:48:38:b9:73:bc: 4e:4d:01:20:61:b3:87:14:53:b1:9d:ff:13:09:bc: c9:80:71:cf:27:bd:8a:a0:99:15:47:f6:e0:65:93: b3:de:4b:a7:53:23:67:47:95:f5:68:65:a6:b2:9f: a5:2c:4a:57:e7:1e:97:fb:61:d4:21:b5:b2:2e:7d: ad:44:ac:99:3d:74:66:ad:8a:39:b0:11:46:a5:d6: 54:bf:0c:82:79:92:90:2c:61:71:a0:4b:e1:86:cc: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F4:EA:B3:12:A7:0F:41:3A:4E:DC:C8:69:37:28:2E:B0:0F:0F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4a:2b:da:99:c7:7e:32:0e:2c:d2:45:01:b0:2b:7a:99:74: b4:1a:53:9c:aa:4e:87:8f:23:d3:04:b4:86:46:c0:1d:2e:d5: e2:72:6a:52:18:6a:fe:8e:54:b6:db:bb:13:5e:5c:39:60:1e: 00:bc:0c:f7:54:84:c5:13:e8:10:da:0d:e3:ff:89:ee:d2:00: e9:ec:7b:11:40:48:7c:e0:b1:f5:2b:d5:60:bb:4b:10:c3:95: a7:c9:f3:71:66:8b:0c:44:61:c3:df:4e:5e:10:47:46:f0:64: e1:43:a8:53:b6:67:f0:8b:d5:35:e3:d7:16:b4:e5:73:22:22: f4:bd:b5:84:49:72:97:b4:33:ce:34:bf:4b:47:40:0c:bd:db: 2e:b1:d8:9f:a4:6f:32:f0:a2:e8:42:d0:76:a9:1a:f6:d1:43: d3:9b:61:e7:32:64:a1:83:40:c9:02:a0:1b:4f:0b:f4:c5:76: e4:26:f9:97:8c:5e:e8:9e:a0:e9:26:b1:45:10:eb:58:ee:18: cb:98:7c:3d:70:de:34:64:27:9a:21:33:14:72:22:cd:25:53: ff:93:0f:1a:88:be:db:e5:5b:40:0c:ff:a8:d3:ab:b2:da:d1: 63:b9:55:fa:53:47:6b:35:e3:b9:b7:e3:ba:36:c8:06:1a:fe: dc:2d:3e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXNlP32C5quZZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzNkOWViYWMtZmY2Zi00MDMxLTljMTQtMGQ2MjNiZjZkMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TERWYQhhfkiyYqQU8+xNyfysdUcvW3703TH wzFvnHtNiyl5VeeANW1gt3H/eeeeCBOoUrb8vQ8y31d1gbdMLN9S2mkL/FxcZ0VJ zgBC2X8rT5YmCkxa/ciqlRxeDqWQ/X8EVvT5m3tClasm56Dmwyz1WtxthrrPD7GG 1ouh8px6XXM/tCzWl30/TICjvEMmimZ0wDWGVtJlLE0ORrxFSDi5c7xOTQEgYbOH FFOxnf8TCbzJgHHPJ72KoJkVR/bgZZOz3kunUyNnR5X1aGWmsp+lLEpX5x6X+2HU IbWyLn2tRKyZPXRmrYo5sBFGpdZUvwyCeZKQLGFxoEvhhsx2QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz06rMSpw9BOk7cyGk3KC6wDw9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGZhOGY5NDQtMDBkMS0z ZmJjLThjZDctOWE2Zjg3OWZkYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9KK9qZx34yDizSRQGwK3qZdLQaU5yqToePI9MEtIZGwB0u1eJyalIY av6OVLbbuxNeXDlgHgC8DPdUhMUT6BDaDeP/ie7SAOnsexFASHzgsfUr1WC7SxDD lafJ83FmiwxEYcPfTl4QR0bwZOFDqFO2Z/CL1TXj1xa05XMiIvS9tYRJcpe0M840 v0tHQAy92y6x2J+kbzLwouhC0HapGvbRQ9ObYecyZKGDQMkCoBtPC/TFduQm+ZeM XuieoOkmsUUQ61juGMuYfD1w3jRkJ5ohMxRyIs0lU/+TDxqIvtvlW0AM/6jTq7La 0WO5VfpTR2s147m347o2yAYa/twtPrA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:49 2025 by rpki-client