$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1096882e-5e49-33de-996c-39292de3d126.roa File: 1096882e-5e49-33de-996c-39292de3d126.roa (raw, json) Hash identifier: Mb42X90UGdZ1Zn1d0kDqVUL9xa89FcxhoG8fcTX0wpE= Subject key identifier: 3B:98:B0:4D:26:B7:53:3E:A1:4F:0D:15:14:D9:57:BE:8E:3C:98:0E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C6AC2DAC8028DE429340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1096882e-5e49-33de-996c-39292de3d126.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c6:ac:2d:ac:80:28:de:42:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=321c4af6-0eaa-4d67-8db9-0208804b4e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:ae:da:9a:ce:2a:71:6f:3d:ae:fc:de:bb: 6e:e5:31:f6:c5:64:94:0e:51:67:a9:2e:a9:ed:01: 81:7a:ee:c5:d5:3a:bd:1c:d8:0f:49:4a:4d:68:5b: 3e:60:f3:2b:e4:0a:cb:3b:30:52:e8:02:62:e8:cc: 70:4a:69:b3:02:95:c8:0b:5b:e9:2b:84:f1:3d:9c: 03:2d:64:13:16:e9:99:dc:a2:71:62:c6:1f:01:29: d7:82:7a:c8:d4:99:e8:e0:e8:74:70:c5:b9:17:bd: 87:3b:42:46:96:6b:f6:d8:00:d6:a4:4f:0d:2d:7b: fb:b0:fe:a9:e4:d1:aa:93:ef:21:0e:b8:46:2b:80: be:e9:9d:e5:fe:f4:0f:64:0c:62:83:5f:fa:a8:78: 31:2e:a6:7f:62:70:c8:4e:04:4c:26:41:44:91:59: ce:02:5c:c6:8d:9d:d6:86:d6:e4:a5:b8:f0:14:26: cb:d2:be:30:01:4a:57:c0:8d:7e:05:c0:5a:59:ab: e3:56:1d:89:4a:fd:60:8f:80:20:2a:46:e3:0c:7e: ec:c0:62:58:06:7e:1e:c2:e7:fd:c5:66:e0:74:bb: 1a:ad:25:6b:0a:10:5a:86:ba:0c:ab:5b:9f:3a:1c: 63:7d:46:43:49:ff:d9:0f:13:5b:f9:99:53:56:26: d1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:98:B0:4D:26:B7:53:3E:A1:4F:0D:15:14:D9:57:BE:8E:3C:98:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1096882e-5e49-33de-996c-39292de3d126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b0:27:66:69:7e:73:d1:0c:28:f1:79:d3:dd:1f:08:39:c2: 4c:bf:3f:d7:e9:9d:11:93:3b:ff:58:9b:d7:27:0e:07:63:d1: a3:25:ee:0d:20:08:76:3a:f7:6d:19:ca:c3:80:bf:aa:58:1d: cc:c5:93:92:bb:e4:cb:f7:37:b6:76:23:cb:ee:ae:ba:64:25: 7e:d0:7f:0d:ba:85:f5:8e:69:56:5f:df:76:99:69:f7:02:b6: 46:a9:f6:a4:8c:00:0a:0d:8e:e3:3b:7d:37:69:30:d4:dc:8d: 8f:80:30:e5:1e:f8:aa:38:04:ed:76:b6:36:db:8b:f1:e8:0c: 94:0f:da:62:aa:66:8e:80:98:71:ed:cb:59:95:e3:45:52:b7: be:56:ee:a3:c3:4d:8a:fd:03:ba:b0:06:7f:dd:b4:22:51:a7: fa:3c:1a:87:a8:cd:b1:04:f8:5f:03:52:04:82:86:e9:1b:58: 04:bf:3a:7e:61:2d:bf:d9:44:88:e4:b3:1e:4a:f3:04:8c:9d: 22:df:b6:d6:04:90:e4:83:38:3f:8d:1d:00:e1:59:eb:bb:02: dd:c8:0a:da:21:77:0f:9d:ae:db:21:fe:0a:88:8a:74:52:95: 62:59:89:71:6f:f0:5b:d1:ca:75:f8:7c:8e:80:7f:a0:1a:1b: a0:d2:02:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8asLayAKN5Ck0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MzIxYzRhZjYtMGVhYS00ZDY3LThkYjktMDIwODgwNGI0ZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUKu2prOKnFvPa783rtu5TH2xWSUDlFnqS6p 7QGBeu7F1Tq9HNgPSUpNaFs+YPMr5ArLOzBS6AJi6MxwSmmzApXIC1vpK4TxPZwD LWQTFumZ3KJxYsYfASnXgnrI1Jno4Oh0cMW5F72HO0JGlmv22ADWpE8NLXv7sP6p 5NGqk+8hDrhGK4C+6Z3l/vQPZAxig1/6qHgxLqZ/YnDITgRMJkFEkVnOAlzGjZ3W htbkpbjwFCbL0r4wAUpXwI1+BcBaWavjVh2JSv1gj4AgKkbjDH7swGJYBn4ewuf9 xWbgdLsarSVrChBahroMq1ufOhxjfUZDSf/ZDxNb+ZlTVibR8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuYsE0mt1M+oU8NFRTZV76OPJgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTA5Njg4MmUtNWU0OS0z M2RlLTk5NmMtMzkyOTJkZTNkMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIooQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmwJ2ZpfnPRDCjxedPdHwg5wky/P9fpnRGTO/9Ym9cnDgdj0aMl7g0g CHY6920ZysOAv6pYHczFk5K75Mv3N7Z2I8vurrpkJX7Qfw26hfWOaVZf33aZafcC tkap9qSMAAoNjuM7fTdpMNTcjY+AMOUe+Ko4BO12tjbbi/HoDJQP2mKqZo6AmHHt y1mV40VSt75W7qPDTYr9A7qwBn/dtCJRp/o8GoeozbEE+F8DUgSChukbWAS/On5h Lb/ZRIjksx5K8wSMnSLfttYEkOSDOD+NHQDhWeu7At3ICtohdw+drtsh/gqIinRS lWJZiXFv8FvRynX4fI6Af6AaG6DSAgM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:00:59 2025 by rpki-client