$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa File: 168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa (raw, json) Hash identifier: xfytiCnCf/Cab9y1/DH0qTkOvoqknLGwLvc+ho71PtE= Subject key identifier: E1:E6:9E:B6:CE:CF:3C:C2:F9:71:CC:73:18:04:28:C6:09:11:D5:A6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67977AD44E5C0634B0DFAD80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.122.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:7a:d4:4e:5c:06:34:b0:df:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=beaebc31-250b-49b1-81f9-fe29503ec01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:c2:95:8f:f6:b7:7f:e1:8a:86:0d:43:bf: bf:8d:4b:91:9c:01:93:f1:30:01:45:a5:16:a9:1e: 44:c0:a3:95:5a:81:87:41:5e:2d:55:82:7e:40:f8: c8:d7:a5:3d:9b:41:a8:33:ce:07:9d:27:a5:6e:23: d4:a2:6e:0a:d1:9c:c3:45:07:ac:70:bf:5e:f5:17: c3:00:5c:a9:e5:ec:06:52:2e:ae:5a:78:23:bc:3c: 55:94:f2:01:b4:4d:92:3f:53:d0:1c:34:37:d1:aa: 2c:ed:ec:b6:94:f9:a6:36:a7:fd:c8:99:91:e4:51: a0:71:f3:6f:c8:09:e7:3a:46:fc:59:40:ef:cb:18: fe:e7:d9:f8:c7:ab:d5:72:7d:16:7d:d1:9e:61:59: b3:0d:6f:14:a7:01:15:04:dc:1e:96:89:4b:4c:54: 5d:da:5d:be:b6:9c:c0:49:7f:2d:7c:07:d2:12:0b: 0e:bf:82:0f:43:33:f3:f0:42:cb:4b:77:2e:a1:04: a1:f8:a8:14:46:33:6b:c0:e2:8a:fe:7b:80:1d:2c: 31:3f:83:55:a4:4a:0f:92:7f:ed:12:f4:e3:5e:ed: 28:ca:a6:fe:e1:2f:a3:73:6a:56:05:6e:52:f1:85: 63:2e:62:b2:e2:de:0b:48:8d:25:68:c8:cf:31:2f: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E6:9E:B6:CE:CF:3C:C2:F9:71:CC:73:18:04:28:C6:09:11:D5:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a7:5b:27:a9:fc:3d:ba:75:dd:ad:e8:7b:a9:47:59:2a:bb: 6a:6a:43:c6:f1:db:ba:21:63:29:ac:ff:d1:34:6b:a5:ce:23: 7b:33:30:90:94:90:21:55:43:da:db:eb:ac:69:59:1a:b1:fc: 4b:ef:ac:7f:ad:81:2a:64:54:37:c0:b6:a7:e0:dc:9e:dd:10: 37:e0:91:ad:09:db:af:45:ec:9f:15:4f:bb:45:15:d6:b0:e4: ac:74:e0:64:56:09:a1:97:36:81:b1:a7:d7:79:ad:d8:e4:d3: 08:f5:15:2c:cc:cf:1c:46:5b:ef:84:04:29:d6:6c:91:bf:0c: 9d:66:21:fc:cd:96:fc:ed:79:85:a5:66:a8:ce:e4:37:d2:de: 3a:52:60:de:1c:c6:f9:bf:91:b6:3f:97:99:c5:9b:9d:af:15: 9c:b7:80:84:f2:2a:9f:4e:a7:89:98:cf:81:fe:60:67:5d:0a: b9:99:21:a0:12:e1:a1:b8:2c:8d:d6:4f:8a:ec:4c:b4:85:82: 60:59:52:1c:6d:30:77:c1:34:2f:21:a8:86:67:51:7b:7b:05: d2:ce:20:55:ca:80:64:d2:a7:af:20:a5:2d:f5:f1:6b:e4:e7: 0d:b2:73:7d:c9:79:58:e5:a6:e4:8a:16:27:13:51:4d:f6:e4: be:47:94:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3rUTlwGNLDfrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YmVhZWJjMzEtMjUwYi00OWIxLTgxZjktZmUyOTUwM2VjMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpHClY/2t3/hioYNQ7+/jUuRnAGT8TABRaUW qR5EwKOVWoGHQV4tVYJ+QPjI16U9m0GoM84HnSelbiPUom4K0ZzDRQescL9e9RfD AFyp5ewGUi6uWngjvDxVlPIBtE2SP1PQHDQ30aos7ey2lPmmNqf9yJmR5FGgcfNv yAnnOkb8WUDvyxj+59n4x6vVcn0WfdGeYVmzDW8UpwEVBNwelolLTFRd2l2+tpzA SX8tfAfSEgsOv4IPQzPz8ELLS3cuoQSh+KgURjNrwOKK/nuAHSwxP4NVpEoPkn/t EvTjXu0oyqb+4S+jc2pWBW5S8YVjLmKy4t4LSI0laMjPMS/xHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHmnrbOzzzC+XHMcxgEKMYJEdWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTY4ZmY1MWEtOGM0Yi0z ZjA4LWExYTMtMzQ3OGQ3YTYxYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABynWyep/D26dd2t6HupR1kqu2pqQ8bx27ohYyms/9E0a6XOI3szMJCU kCFVQ9rb66xpWRqx/EvvrH+tgSpkVDfAtqfg3J7dEDfgka0J269F7J8VT7tFFdaw 5Kx04GRWCaGXNoGxp9d5rdjk0wj1FSzMzxxGW++EBCnWbJG/DJ1mIfzNlvzteYWl ZqjO5DfS3jpSYN4cxvm/kbY/l5nFm52vFZy3gITyKp9Op4mYz4H+YGddCrmZIaAS 4aG4LI3WT4rsTLSFgmBZUhxtMHfBNC8hqIZnUXt7BdLOIFXKgGTSp68gpS318Wvk 5w2yc33JeVjlpuSKFicTUU325L5HlL8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:51 2025 by rpki-client