$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1707b8af-4365-31f8-a422-b83567e0946f.roa File: 1707b8af-4365-31f8-a422-b83567e0946f.roa (raw, json) Hash identifier: crLVWVJgYxSJnLOn8Q83VS/osy7yR4MvVDmjHK9m+Sk= Subject key identifier: 5F:DC:AD:2C:1A:F7:37:7B:51:7F:15:BB:7E:79:9C:C4:AC:2B:07:58 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE2AA628283D7F8F0D6280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1707b8af-4365-31f8-a422-b83567e0946f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.122.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2a:a6:28:28:3d:7f:8f:0d:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1d69b074-fdb9-49f6-a069-f95a34fee2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:6a:1d:d5:a3:70:46:e9:2e:73:b4:84:7d: 29:3d:02:ef:c9:be:cd:06:c8:f4:1a:0e:72:54:49: 36:a9:4f:af:70:08:e1:82:31:cb:e2:43:0a:68:a6: 5f:60:cf:f1:84:96:fa:16:f0:6d:ab:4d:ce:ad:ba: 75:10:25:aa:d0:6b:cd:35:a3:13:f9:55:0a:0f:7c: b0:37:2c:10:e2:52:61:82:12:b2:ad:a8:c9:6a:85: 0b:f0:80:65:10:f5:d3:6d:2a:b7:1f:9e:4d:f1:11: ef:a1:6f:2a:09:42:a6:a5:2b:ef:84:01:be:99:47: 62:3d:9b:74:dc:5c:b0:e8:b6:5c:f5:99:6d:ce:d2: 4d:56:bd:83:c2:a3:58:8b:22:b3:e3:6d:5b:d7:9f: 8c:89:13:97:6f:8b:46:d8:0f:d8:b3:cb:71:c6:56: f7:08:db:5d:a6:6a:91:bd:03:76:c7:17:c2:61:91: 9e:40:0a:21:04:cf:52:14:f1:4a:10:94:b0:f7:ca: e1:4f:0b:8f:8a:bf:dc:be:50:8f:a4:ee:d3:05:6b: 9b:fa:3d:18:4a:99:eb:b4:d5:ff:a0:ec:15:76:df: 68:a2:be:6a:67:0a:54:71:1e:45:3d:34:22:00:e6: a9:47:21:e3:ee:07:7f:69:c4:1c:2e:7f:26:3c:d2: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DC:AD:2C:1A:F7:37:7B:51:7F:15:BB:7E:79:9C:C4:AC:2B:07:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1707b8af-4365-31f8-a422-b83567e0946f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c4:d4:85:84:f4:40:d1:22:d1:fa:86:80:33:ac:02:a4:52: 47:8a:6f:62:c3:38:8f:cd:63:20:6e:76:1f:43:df:5d:a9:2e: 12:cb:8b:bf:9a:9e:65:f1:38:11:ea:4e:6b:17:f6:3d:b5:18: 55:78:0d:48:b0:a9:6e:e1:46:70:f2:b7:fe:58:0d:5c:28:13: 6a:98:06:3a:47:97:bd:a0:91:7b:28:03:7e:3f:dc:78:ac:7f: 48:f9:b4:d3:cb:df:d0:a1:e0:dc:92:73:bf:2e:7b:70:aa:69: 6d:7c:6c:0a:99:d2:d4:06:1d:ac:cc:43:6b:d7:dc:20:9e:aa: ab:00:9b:c1:0c:2f:fd:81:b4:45:5d:a6:b0:71:d0:5a:46:52: 9c:73:63:5c:e4:79:60:af:bf:5b:d6:5c:8b:97:49:c6:55:a0: 58:e6:d7:51:61:9c:83:db:34:45:84:ec:38:a5:50:59:8b:50: 16:df:53:f9:4c:21:93:7c:a5:43:05:5b:d8:10:02:aa:c9:59: 21:83:6e:e8:93:b1:4f:ba:32:12:0e:36:7c:cd:55:47:4e:c7: d6:e5:96:12:68:24:b3:7b:76:46:ed:23:c4:50:cc:58:e4:a6: 20:71:a5:41:87:72:7c:70:ab:1b:cd:5d:86:c1:70:0a:36:20: de:5d:36:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziqmKCg9f48NYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWQ2OWIwNzQtZmRiOS00OWY2LWEwNjktZjk1YTM0ZmVlMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYZqHdWjcEbpLnO0hH0pPQLvyb7NBsj0Gg5y VEk2qU+vcAjhgjHL4kMKaKZfYM/xhJb6FvBtq03Orbp1ECWq0GvNNaMT+VUKD3yw NywQ4lJhghKyrajJaoUL8IBlEPXTbSq3H55N8RHvoW8qCUKmpSvvhAG+mUdiPZt0 3Fyw6LZc9ZltztJNVr2DwqNYiyKz421b15+MiROXb4tG2A/Ys8txxlb3CNtdpmqR vQN2xxfCYZGeQAohBM9SFPFKEJSw98rhTwuPir/cvlCPpO7TBWub+j0YSpnrtNX/ oOwVdt9oor5qZwpUcR5FPTQiAOapRyHj7gd/acQcLn8mPNKqsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/crSwa9zd7UX8Vu355nMSsKwdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTcwN2I4YWYtNDM2NS0z MWY4LWE0MjItYjgzNTY3ZTA5NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnE1IWE9EDRItH6hoAzrAKkUkeKb2LDOI/NYyBudh9D312pLhLLi7+a nmXxOBHqTmsX9j21GFV4DUiwqW7hRnDyt/5YDVwoE2qYBjpHl72gkXsoA34/3His f0j5tNPL39Ch4NySc78ue3CqaW18bAqZ0tQGHazMQ2vX3CCeqqsAm8EML/2BtEVd prBx0FpGUpxzY1zkeWCvv1vWXIuXScZVoFjm11FhnIPbNEWE7DilUFmLUBbfU/lM IZN8pUMFW9gQAqrJWSGDbuiTsU+6MhIONnzNVUdOx9bllhJoJLN7dkbtI8RQzFjk piBxpUGHcnxwqxvNXYbBcAo2IN5dNh8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:52:11 2025 by rpki-client