$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b7cbf88-f47a-3905-81a8-f8aa19f8164a.roa File: 1b7cbf88-f47a-3905-81a8-f8aa19f8164a.roa (raw, json) Hash identifier: EK/mX9T/ETw+Nuv//YQTxi9oLLn6S+OKLMaShByCFlk= Subject key identifier: FE:DD:79:3A:10:A1:B0:7D:A6:7F:09:95:A2:5F:5B:BB:28:41:1F:82 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE2503979EB476ADB04110 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b7cbf88-f47a-3905-81a8-f8aa19f8164a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 34.1.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:25:03:97:9e:b4:76:ad:b0:41:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=42859bdf-3ae7-4255-b42f-7c24d7eae4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:53:29:74:d7:23:ec:57:ec:66:ed:f5:b3: 00:2f:dc:08:f0:76:2a:66:27:fc:d4:18:c6:60:d6: de:49:33:70:f6:57:4e:7e:d5:3d:bd:84:bb:20:df: 23:75:05:67:fc:5c:46:01:ed:c1:b5:e3:65:6a:d1: f5:f7:60:02:fd:bb:c8:0f:77:f5:f3:50:50:1e:d6: bb:5a:ab:91:86:75:a7:7b:a2:75:bd:db:21:3f:dd: 5b:d0:7d:80:d4:e8:ba:10:38:b1:9a:74:45:8e:d9: bc:f4:5f:c3:5c:7b:d5:6b:51:a2:f6:c7:dd:6b:6c: d1:65:22:c7:ac:44:04:dc:5c:5a:db:d2:16:e4:0f: 2b:34:bc:66:e1:3f:5e:86:60:f2:dc:02:4e:2e:66: 3c:37:a5:4c:1e:8a:83:11:b8:1a:c9:3f:10:bb:83: a5:12:f8:af:3f:66:ae:cc:41:ef:24:88:6f:72:34: 6b:97:f7:5d:90:f6:ca:6b:8d:c0:bf:b9:fb:ee:b1: f6:bb:ce:95:8e:19:f9:88:cb:81:46:1d:28:b1:52: 24:33:e7:82:c3:e8:e1:94:fd:2c:a2:9e:77:4e:97: 77:90:63:14:a8:ff:1f:3a:b9:89:39:31:83:29:97: 22:ba:11:86:b9:0a:d3:fb:ce:e0:45:9c:6b:9e:2d: dd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DD:79:3A:10:A1:B0:7D:A6:7F:09:95:A2:5F:5B:BB:28:41:1F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b7cbf88-f47a-3905-81a8-f8aa19f8164a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f1:f8:86:1f:bf:da:62:1f:6b:b9:72:eb:27:75:ed:f1:9f: e6:b9:e7:ef:79:33:5c:dc:02:dd:69:46:0c:b5:13:fc:5f:07: ac:95:09:e3:5f:8d:6c:40:73:f5:2f:b0:6a:65:9d:f7:05:f3: 34:9c:aa:74:28:33:14:04:22:db:7c:5a:0e:48:43:e6:b4:69: e8:3b:52:62:29:b3:2c:22:85:06:cb:6d:6e:9f:31:9b:f5:9a: 65:26:bf:13:20:b2:5b:ef:6b:af:ec:b0:55:ea:36:24:10:00: 67:68:73:5b:d3:3a:82:c1:19:a9:db:eb:40:f0:0f:fa:13:cf: 1a:70:2b:d2:37:2f:89:a1:a8:da:9f:6a:f5:86:a9:f9:7f:2d: 86:6d:c1:c8:9e:92:9a:52:7b:5a:4c:5b:59:0d:f5:81:12:57: fd:8a:dc:08:1d:39:aa:53:27:c2:1f:83:3a:02:d9:5f:65:4a: 84:12:80:19:da:bb:7c:39:e7:37:5c:2a:ad:07:97:d0:e6:b9: 52:40:48:97:b3:c9:9c:0e:85:c0:cf:dc:c7:b4:4a:7d:76:9a: f1:04:42:02:f8:16:2f:2e:9a:5b:60:6e:fd:55:de:2b:1d:cb: 86:72:f7:81:b0:af:17:12:a3:29:f1:a8:ea:e9:44:9d:48:d1: 60:06:77:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziUDl560dq2wQRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDI4NTliZGYtM2FlNy00MjU1LWI0MmYtN2MyNGQ3ZWFlNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEVTKXTXI+xX7Gbt9bMAL9wI8HYqZif81BjG YNbeSTNw9ldOftU9vYS7IN8jdQVn/FxGAe3BteNlatH192AC/bvID3f181BQHta7 WquRhnWne6J1vdshP91b0H2A1Oi6EDixmnRFjtm89F/DXHvVa1Gi9sfda2zRZSLH rEQE3Fxa29IW5A8rNLxm4T9ehmDy3AJOLmY8N6VMHoqDEbgayT8Qu4OlEvivP2au zEHvJIhvcjRrl/ddkPbKa43Av7n77rH2u86Vjhn5iMuBRh0osVIkM+eCw+jhlP0s op53Tpd3kGMUqP8fOrmJOTGDKZciuhGGuQrT+87gRZxrni3dcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7deToQobB9pn8JlaJfW7soQR+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWI3Y2JmODgtZjQ3YS0z OTA1LTgxYTgtZjhhYTE5ZjgxNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADx+IYfv9piH2u5cusnde3xn+a55+95M1zcAt1pRgy1E/xfB6yVCeNf jWxAc/UvsGplnfcF8zScqnQoMxQEItt8Wg5IQ+a0aeg7UmIpsywihQbLbW6fMZv1 mmUmvxMgslvva6/ssFXqNiQQAGdoc1vTOoLBGanb60DwD/oTzxpwK9I3L4mhqNqf avWGqfl/LYZtwciekppSe1pMW1kN9YESV/2K3AgdOapTJ8IfgzoC2V9lSoQSgBna u3w55zdcKq0Hl9DmuVJASJezyZwOhcDP3Me0Sn12mvEEQgL4Fi8umltgbv1V3isd y4Zy94GwrxcSoynxqOrpRJ1I0WAGd5A= -----END CERTIFICATE-----Generated at Mon Oct 20 00:06:55 2025 by rpki-client