$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/131e2b6d-7711-3cbe-a743-f6d264c0877e.roa File: 131e2b6d-7711-3cbe-a743-f6d264c0877e.roa (raw, json) Hash identifier: ZhkCSUQpPoMR7hdThLXaBaJDLCKjKwoQgWjNkzuWlYs= Subject key identifier: 91:D4:3D:64:42:21:72:C9:5F:9E:FF:5E:AF:C5:29:9E:FE:9E:FF:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C3A83E7C441B70107D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/131e2b6d-7711-3cbe-a743-f6d264c0877e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.172.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c3:a8:3e:7c:44:1b:70:10:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=988cc00c-afe0-4866-b7a0-1c1c7a9e170d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:42:d4:1b:21:8d:a0:0e:cf:9f:d6:ff:9c: 36:b9:3b:1b:a5:8a:30:d8:ff:a9:e3:1e:92:27:02: 03:5c:52:5b:92:36:b2:5e:af:84:f0:5e:7f:c2:69: 2a:fa:47:f5:5c:2c:cb:14:50:d1:a8:21:8b:a9:01: d4:ce:5b:41:12:d5:26:67:07:3d:12:ad:15:1d:e5: b2:6a:5b:d1:ae:7c:f8:31:d0:f5:c1:5f:24:e6:1e: e0:ac:b0:2c:18:cd:b4:f7:58:20:47:ae:8a:38:28: fc:1b:c8:17:99:21:56:32:c8:c0:80:ce:2e:6c:09: 96:b3:be:75:cf:6f:97:a5:7a:cd:00:fb:50:a7:53: 8a:65:d5:2c:16:ff:3c:27:ad:ea:bd:ca:01:cb:bd: 47:09:3c:04:d2:8c:72:a8:64:ef:c3:0c:6f:27:af: 80:f6:36:34:e6:2d:a2:45:e3:50:d1:d2:91:c9:de: 6b:a1:54:18:b1:83:c0:a3:d8:64:2d:af:19:94:05: e4:40:d6:d0:74:1d:92:6a:bf:73:31:a8:7d:f1:45: 8a:e9:e4:32:06:f4:37:82:10:f3:3e:bb:89:15:19: 45:6e:89:d5:7e:6b:22:2c:67:cb:7e:83:6d:26:c6: 02:a1:c4:b8:3c:c5:18:bc:f6:71:e1:9a:8e:98:aa: 30:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D4:3D:64:42:21:72:C9:5F:9E:FF:5E:AF:C5:29:9E:FE:9E:FF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/131e2b6d-7711-3cbe-a743-f6d264c0877e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.172.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d2:0e:cb:8d:ee:4a:28:8d:1b:df:1b:1c:e6:77:ae:80:cd: 33:fd:08:77:86:80:bb:e9:a1:90:90:a9:cb:53:6d:89:5c:15: 7c:6e:ac:67:70:36:ed:9d:f0:f6:5c:0e:87:57:ab:99:70:7b: 01:a1:87:66:da:08:3d:30:c1:8c:a0:cf:2e:44:5b:d4:d7:84: 26:c4:2e:28:34:27:d9:b2:4b:cd:25:dd:51:fc:43:eb:77:bb: 8a:e1:be:20:a8:1b:8e:ca:f0:a4:7b:6a:1e:2c:14:7d:9f:00: f8:ca:1c:4a:7a:74:c4:aa:90:c9:a3:bb:43:e9:ed:ec:58:83: 0d:43:f9:cd:80:0c:d5:d7:26:19:56:55:f1:ba:c5:a4:65:c0: 6c:3b:14:e3:28:b5:e7:41:e3:8c:1a:3c:5f:cd:20:7c:0c:0b: 61:aa:18:8b:9c:3b:ec:2e:c5:66:6b:66:ed:2a:12:e6:b3:72: a5:7f:1c:e4:44:66:64:ac:28:dd:1a:21:e7:7b:34:f3:ae:06: 6a:b5:90:3d:03:e1:d6:d6:1c:87:aa:4e:a7:b5:47:82:20:ba: ae:c8:4d:5f:3f:ee:55:64:9a:91:ff:c0:e7:cf:60:b3:23:aa: 0f:8e:fd:bf:7a:92:a7:af:b9:8c:98:d8:bb:22:e4:73:42:dd: e1:12:01:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8OoPnxEG3AQfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OTg4Y2MwMGMtYWZlMC00ODY2LWI3YTAtMWMxYzdhOWUxNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswhC1BshjaAOz5/W/5w2uTsbpYow2P+p4x6S JwIDXFJbkjayXq+E8F5/wmkq+kf1XCzLFFDRqCGLqQHUzltBEtUmZwc9Eq0VHeWy alvRrnz4MdD1wV8k5h7grLAsGM2091ggR66KOCj8G8gXmSFWMsjAgM4ubAmWs751 z2+XpXrNAPtQp1OKZdUsFv88J63qvcoBy71HCTwE0oxyqGTvwwxvJ6+A9jY05i2i ReNQ0dKRyd5roVQYsYPAo9hkLa8ZlAXkQNbQdB2Sar9zMah98UWK6eQyBvQ3ghDz PruJFRlFbonVfmsiLGfLfoNtJsYCocS4PMUYvPZx4ZqOmKowQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHUPWRCIXLJX57/Xq/FKZ7+nv9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTMxZTJiNmQtNzcxMS0z Y2JlLWE3NDMtZjZkMjY0YzA4NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTSDsuN7koojRvfGxzmd66AzTP9CHeGgLvpoZCQqctTbYlcFXxurGdw Nu2d8PZcDodXq5lwewGhh2baCD0wwYygzy5EW9TXhCbELig0J9myS80l3VH8Q+t3 u4rhviCoG47K8KR7ah4sFH2fAPjKHEp6dMSqkMmju0Pp7exYgw1D+c2ADNXXJhlW VfG6xaRlwGw7FOMotedB44waPF/NIHwMC2GqGIucO+wuxWZrZu0qEuazcqV/HORE ZmSsKN0aIed7NPOuBmq1kD0D4dbWHIeqTqe1R4Iguq7ITV8/7lVkmpH/wOfPYLMj qg+O/b96kqevuYyY2Lsi5HNC3eESAS0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:24:58 2025 by rpki-client