$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1afb1a22-4129-32e9-9c6c-9c29987b31da.roa File: 1afb1a22-4129-32e9-9c6c-9c29987b31da.roa (raw, json) Hash identifier: sFKDTHhKCYch4nsMQIdQHqnFHrXxVgTgyMTIbWLHsj0= Subject key identifier: 88:FF:33:98:3C:2F:5E:11:35:D5:DB:21:5E:21:60:41:F2:16:AC:6C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67977D1A7E8707BEC384A360 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1afb1a22-4129-32e9-9c6c-9c29987b31da.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.125.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:7d:1a:7e:87:07:be:c3:84:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5c07185c-5320-48eb-a1e1-63d31c4b30dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:b8:2a:da:7c:0c:9a:77:87:95:0b:99:da: bc:c7:0c:93:bc:06:90:51:ed:2b:d7:a0:a6:f3:80: b0:a0:df:21:4c:14:26:f1:87:de:51:d8:62:e4:d8: 67:5a:c9:94:55:f9:d6:d1:3e:9e:bd:73:c4:0b:fe: 6b:3c:ef:a4:6b:b0:63:d8:b9:2d:9e:20:44:99:48: 18:ce:a2:b0:b1:0a:38:a7:f7:6b:5c:69:08:b7:ae: 73:3f:aa:73:31:ae:3e:a1:9b:21:62:a2:90:62:2b: fe:d6:bf:99:da:45:0c:51:fa:34:6e:4c:87:e5:f2: 61:d4:4e:32:a4:a1:ae:55:ff:b0:8f:a7:46:26:58: a6:dd:9a:6f:4d:f3:24:2f:b2:2c:23:8b:0c:dc:40: f3:c9:28:57:92:70:5e:b6:e2:f0:34:bc:1a:7b:6a: d1:87:65:65:30:4b:bd:39:de:16:0d:a9:de:ca:77: a4:99:6c:59:03:d3:51:9b:0e:a2:d9:33:17:b3:ea: 69:16:1b:61:d9:dd:e9:86:32:54:6c:5b:34:7b:ad: 46:9d:8c:f1:67:15:fa:64:63:ed:81:18:b5:f8:f2: 64:2f:37:d1:ff:54:11:f7:41:2a:f5:e8:30:fe:45: 6e:3b:ae:4e:3e:a6:65:7d:68:bb:eb:49:09:c9:5b: df:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FF:33:98:3C:2F:5E:11:35:D5:DB:21:5E:21:60:41:F2:16:AC:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1afb1a22-4129-32e9-9c6c-9c29987b31da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.125.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a4:cc:7b:35:c2:02:e5:56:ce:49:3c:44:89:a5:11:67:55: 38:80:f8:85:8c:af:25:b5:e3:43:1a:b9:2d:26:66:c9:00:83: 01:02:11:dc:93:d2:ed:2c:94:7e:a2:ec:7b:d0:16:2a:c5:53: d5:97:19:47:a6:ea:bf:3e:26:06:04:d9:8b:74:21:15:9b:c3: a2:23:56:e9:33:af:f0:57:cf:b8:39:79:ac:4e:4f:af:0e:a8: 15:8c:15:b0:e4:e3:e4:40:72:e0:fb:32:6e:99:fc:d5:d3:17: 59:7a:58:0b:ca:01:4e:f7:2f:7d:6f:ab:42:ec:03:f9:6e:29: 90:ae:06:8c:1d:80:b6:55:f1:6a:3f:41:21:91:c2:fa:31:54: 27:de:f4:20:3a:d9:2b:b8:05:37:72:c0:8f:fe:e6:37:2a:8d: 98:28:c9:72:d6:b1:f7:3e:da:d2:ff:48:a0:f5:65:cb:bc:9c: 4b:40:bc:d4:fd:08:ef:85:00:86:47:25:76:5c:5d:f5:6c:d0: 45:94:b3:eb:ae:2e:fd:c6:cd:60:b5:fd:3d:7f:ef:e2:9b:38: 7b:b8:61:5d:c4:cb:85:61:24:8f:1c:c1:e3:23:87:9d:c9:e5: 75:4c:d2:4f:b7:66:9e:4b:7c:92:29:fe:48:ae:0d:c4:2a:2b: cd:03:d0:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl30afocHvsOEo2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NWMwNzE4NWMtNTMyMC00OGViLWExZTEtNjNkMzFjNGIzMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJu4Ktp8DJp3h5ULmdq8xwyTvAaQUe0r16Cm 84CwoN8hTBQm8YfeUdhi5NhnWsmUVfnW0T6evXPEC/5rPO+ka7Bj2LktniBEmUgY zqKwsQo4p/drXGkIt65zP6pzMa4+oZshYqKQYiv+1r+Z2kUMUfo0bkyH5fJh1E4y pKGuVf+wj6dGJlim3ZpvTfMkL7IsI4sM3EDzyShXknBetuLwNLwae2rRh2VlMEu9 Od4WDaneynekmWxZA9NRmw6i2TMXs+ppFhth2d3phjJUbFs0e61GnYzxZxX6ZGPt gRi1+PJkLzfR/1QR90Eq9egw/kVuO65OPqZlfWi760kJyVvfowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj/M5g8L14RNdXbIV4hYEHyFqxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWFmYjFhMjItNDEyOS0z MmU5LTljNmMtOWMyOTk4N2IzMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmkzHs1wgLlVs5JPESJpRFnVTiA+IWMryW140MauS0mZskAgwECEdyT 0u0slH6i7HvQFirFU9WXGUem6r8+JgYE2Yt0IRWbw6IjVukzr/BXz7g5eaxOT68O qBWMFbDk4+RAcuD7Mm6Z/NXTF1l6WAvKAU73L31vq0LsA/luKZCuBowdgLZV8Wo/ QSGRwvoxVCfe9CA62Su4BTdywI/+5jcqjZgoyXLWsfc+2tL/SKD1Zcu8nEtAvNT9 CO+FAIZHJXZcXfVs0EWUs+uuLv3GzWC1/T1/7+KbOHu4YV3Ey4VhJI8cweMjh53J 5XVM0k+3Zp5LfJIp/kiuDcQqK80D0MM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:03 2025 by rpki-client