$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11633dd0-f047-3ca4-ad66-5de264ce7206.roa File: 11633dd0-f047-3ca4-ad66-5de264ce7206.roa (raw, json) Hash identifier: pxAzbsYMdZp5jXQlvfttRKoOaBDFZVKnd0bFKCHPS7Y= Subject key identifier: D6:C5:8B:C1:E9:67:21:10:78:8E:97:6D:20:FA:1D:2E:7A:AD:44:30 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976D5D9FCFEF91E6DF7E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11633dd0-f047-3ca4-ad66-5de264ce7206.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.151.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6d:5d:9f:cf:ef:91:e6:df:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d1af2aae-d3e7-4150-813d-3cf852ccb723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:ad:48:fb:94:31:2f:49:ba:d7:11:16:4a: 51:29:f8:59:3c:65:d0:e2:b7:ec:9b:f4:b3:cf:ae: 3c:ff:9a:ed:48:bc:00:9c:22:68:1f:0c:11:30:13: 70:5c:01:d5:94:61:1b:70:e6:bc:1a:da:0a:7c:b4: 6d:b7:26:9b:45:fc:54:03:47:63:8b:53:9e:18:a9: c5:8a:97:84:25:99:14:9b:b1:94:bd:e7:05:3c:b0: 60:db:d3:63:5c:d4:9a:5a:45:b4:5f:83:f3:a1:26: 7d:d3:1e:4c:39:4e:19:01:a3:4e:5a:cd:01:60:9e: d8:a4:2c:c5:9c:ec:a7:0a:78:80:89:42:49:35:85: 93:43:df:4f:f2:d0:88:72:1f:c3:db:bd:1a:58:ff: 5f:5e:e1:40:47:d0:03:fc:5e:2c:64:75:d4:c8:cd: 3e:ad:2b:a6:13:31:0c:be:22:72:6c:23:1d:68:4b: d7:9c:74:ae:8f:4e:db:57:af:8b:69:f2:df:fa:87: 95:5a:33:cd:21:1b:a6:cf:81:ee:1e:8d:28:70:f9: e0:2d:dd:f4:e1:53:50:f5:7c:fd:74:d9:79:f0:31: 19:54:89:a6:67:22:4f:57:5d:e0:10:64:73:d5:ab: b1:a6:47:b3:6d:a8:ae:20:c4:9e:e0:ec:3f:d9:e1: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C5:8B:C1:E9:67:21:10:78:8E:97:6D:20:FA:1D:2E:7A:AD:44:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11633dd0-f047-3ca4-ad66-5de264ce7206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.151.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e5:34:63:74:8e:19:df:5b:a7:19:ec:cc:96:c7:c7:a0:fa: f2:92:fa:66:ad:1f:02:5f:84:31:52:64:4c:45:fb:e2:22:6c: fe:47:0d:27:38:2e:e2:fe:90:f3:f4:a6:e7:16:88:ca:a2:3c: 61:54:6c:f1:50:0f:ff:6d:16:be:0d:57:fe:d7:49:7a:43:f3: 42:cc:25:49:b9:8a:2a:7d:94:06:4c:98:22:e1:af:27:77:c5: 0c:17:26:71:f0:17:f5:64:cd:51:f2:02:64:32:0b:ad:2b:c3: ff:dc:44:cf:22:2a:42:6b:8d:6b:48:e5:24:4f:fd:ce:19:fd: 31:61:9a:86:5c:f1:46:61:d8:e9:6c:70:fa:76:7f:ba:5a:4b: 32:bb:e8:c8:45:c2:49:df:47:2f:a4:99:a7:0d:05:9f:a7:99: 54:91:12:63:29:8d:33:fa:4b:63:9f:1e:3b:47:69:36:e1:3f: 1f:80:97:3c:97:5d:6d:57:4d:1e:96:7c:fe:3f:74:c6:85:ba: 10:0d:b2:f3:88:73:f7:86:8d:ca:7a:69:a3:e5:7a:60:b6:22: 9c:54:c3:e0:85:cd:8a:fa:9a:af:96:97:be:10:73:64:3b:d1: da:de:9d:d1:97:55:84:a2:b0:ec:29:96:0b:b8:03:f4:5f:9d: 03:ff:17:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl21dn8/vkebffoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDFhZjJhYWUtZDNlNy00MTUwLTgxM2QtM2NmODUyY2NiNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG6tSPuUMS9JutcRFkpRKfhZPGXQ4rfsm/Sz z648/5rtSLwAnCJoHwwRMBNwXAHVlGEbcOa8GtoKfLRttyabRfxUA0dji1OeGKnF ipeEJZkUm7GUvecFPLBg29NjXNSaWkW0X4PzoSZ90x5MOU4ZAaNOWs0BYJ7YpCzF nOynCniAiUJJNYWTQ99P8tCIch/D270aWP9fXuFAR9AD/F4sZHXUyM0+rSumEzEM viJybCMdaEvXnHSuj07bV6+LafLf+oeVWjPNIRumz4HuHo0ocPngLd304VNQ9Xz9 dNl58DEZVImmZyJPV13gEGRz1auxpkezbaiuIMSe4Ow/2eGJ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbFi8HpZyEQeI6XbSD6HS56rUQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTE2MzNkZDAtZjA0Ny0z Y2E0LWFkNjYtNWRlMjY0Y2U3MjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnlNGN0jhnfW6cZ7MyWx8eg+vKS+matHwJfhDFSZExF++IibP5HDSc4 LuL+kPP0pucWiMqiPGFUbPFQD/9tFr4NV/7XSXpD80LMJUm5iip9lAZMmCLhryd3 xQwXJnHwF/VkzVHyAmQyC60rw//cRM8iKkJrjWtI5SRP/c4Z/TFhmoZc8UZh2Ols cPp2f7paSzK76MhFwknfRy+kmacNBZ+nmVSREmMpjTP6S2OfHjtHaTbhPx+AlzyX XW1XTR6WfP4/dMaFuhANsvOIc/eGjcp6aaPlemC2IpxUw+CFzYr6mq+Wl74Qc2Q7 0drendGXVYSisOwplgu4A/RfnQP/FwE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:41:55 2025 by rpki-client