$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16d3b3c8-dad4-38e1-9a06-b7d600805dc7.roa File: 16d3b3c8-dad4-38e1-9a06-b7d600805dc7.roa (raw, json) Hash identifier: yEwAjVBIouDl2WTvNRFCLrFatNmQBthErmQCElCacEI= Subject key identifier: 21:32:E8:9C:33:08:BA:47:0C:DC:B8:C2:13:65:06:43:13:F8:6E:E6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679752F14D30DD9CFBF5D980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16d3b3c8-dad4-38e1-9a06-b7d600805dc7.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.64.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:52:f1:4d:30:dd:9c:fb:f5:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=87f37342-f5ee-4944-b224-0c450398f892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:44:c3:79:0f:be:c9:28:3d:12:88:b1:c9:f5: ef:3f:1e:22:9c:b9:cb:88:eb:2e:fb:f8:4e:ed:fa: 62:b2:f3:a4:be:55:7f:51:eb:17:e7:10:fc:ba:0a: 6a:ca:af:74:6b:04:76:e4:a2:90:6b:d5:75:20:b1: 85:15:c3:ae:72:95:c4:79:af:74:e0:fd:5c:59:d2: ff:ce:e5:86:a9:d2:fb:b2:47:56:a5:e9:99:9b:ad: 6b:17:55:56:92:33:84:48:1a:6e:af:17:9d:65:e5: 1f:48:91:c0:5a:49:fe:6d:37:03:24:66:e9:c7:3e: c2:38:43:86:dc:69:a3:0b:c0:1e:b6:fb:f7:83:31: 12:f4:13:8a:d6:a5:ca:4f:20:79:42:92:ea:83:e5: 4a:76:a1:29:c7:f8:6f:ff:43:9d:e1:75:0a:95:4b: de:0e:80:d4:69:12:9b:09:81:ac:2e:3e:64:cd:df: 0f:08:30:40:c4:3a:e9:fd:55:03:69:80:7e:31:9c: 10:e9:9e:42:ea:6a:88:fe:70:e5:87:ed:fe:93:1e: 69:5e:a1:90:59:21:d1:74:0e:b9:60:a1:ef:e1:f4: 4f:f1:97:d3:c7:e4:87:48:1a:b8:50:23:75:f0:84: 85:28:6b:94:47:47:99:a4:98:b8:14:8a:da:5f:a5: 32:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:32:E8:9C:33:08:BA:47:0C:DC:B8:C2:13:65:06:43:13:F8:6E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16d3b3c8-dad4-38e1-9a06-b7d600805dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a3:60:1b:fd:10:d1:8c:5c:04:3b:73:39:83:08:41:6e:53: ea:2d:61:97:5a:32:15:bf:6d:5f:23:3d:bb:b0:dc:ac:15:21: 56:a3:59:ca:69:4e:eb:af:f8:91:7f:d9:c0:04:e1:8d:c3:59: c5:26:6a:31:54:cc:30:63:6b:29:00:d7:1f:e3:48:99:e1:e9: a4:38:4d:f4:54:62:8e:b2:85:1d:62:a1:9b:67:61:bb:96:1d: 11:00:99:e4:5d:b9:d5:9c:62:ab:0d:7d:15:4d:df:ff:3d:f9: 25:46:03:8c:da:9d:35:c5:34:f5:d5:62:26:0b:ad:3e:05:7b: 78:17:b1:a9:ed:15:6e:d0:b6:49:47:3e:e9:c1:af:a0:c0:d4: 26:4f:b6:e3:64:30:30:e4:75:25:ac:21:5c:f9:28:38:e2:29: 99:3f:7f:6d:dd:ae:9a:74:77:8a:6c:3d:44:67:04:9f:0e:e8: ae:c9:6b:ef:5c:06:d5:cb:dd:21:2d:79:f4:1c:55:68:14:d2: 4d:48:61:65:cf:7c:3a:ea:02:92:a7:e0:97:49:ad:75:26:c7: 07:37:1a:4e:b3:fb:0c:ff:18:db:26:fc:e8:ff:3c:a0:b5:14: b3:59:1a:50:73:b1:20:81:9a:11:1c:c2:5c:ec:4d:d1:00:df: b4:18:04:32 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtnl1LxTTDdnPv12YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODdmMzczNDItZjVlZS00OTQ0LWIyMjQtMGM0NTAzOThmODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0TDeQ++ySg9EoixyfXvPx4inLnLiOsu+/hO 7fpisvOkvlV/UesX5xD8ugpqyq90awR25KKQa9V1ILGFFcOucpXEea904P1cWdL/ zuWGqdL7skdWpemZm61rF1VWkjOESBpurxedZeUfSJHAWkn+bTcDJGbpxz7COEOG 3GmjC8Aetvv3gzES9BOK1qXKTyB5QpLqg+VKdqEpx/hv/0Od4XUKlUveDoDUaRKb CYGsLj5kzd8PCDBAxDrp/VUDaYB+MZwQ6Z5C6mqI/nDlh+3+kx5pXqGQWSHRdA65 YKHv4fRP8ZfTx+SHSBq4UCN18ISFKGuUR0eZpJi4FIraX6UyHQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCEy6JwzCLpHDNy4whNlBkMT+G7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTZkM2IzYzgtZGFkNC0z OGUxLTlhMDYtYjdkNjAwODA1ZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFIkAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWKNgG/0Q0YxcBDtzOYMIQW5T6i1hl1oyFb9tXyM9u7DcrBUhVqNZymlO 66/4kX/ZwAThjcNZxSZqMVTMMGNrKQDXH+NImeHppDhN9FRijrKFHWKhm2dhu5Yd EQCZ5F251Zxiqw19FU3f/z35JUYDjNqdNcU09dViJgutPgV7eBexqe0VbtC2SUc+ 6cGvoMDUJk+242QwMOR1JawhXPkoOOIpmT9/bd2umnR3imw9RGcEnw7orslr71wG 1cvdIS159BxVaBTSTUhhZc98OuoCkqfgl0mtdSbHBzcaTrP7DP8Y2yb86P88oLUU s1kaUHOxIIGaERzCXOxN0QDftBgEMg== -----END CERTIFICATE-----Generated at Mon Oct 20 02:17:03 2025 by rpki-client