$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b34022-7309-3fb3-98b5-d6af05f76e80.roa File: 23b34022-7309-3fb3-98b5-d6af05f76e80.roa (raw, json) Hash identifier: JCtqZ31/SH/XDdU1raBdZ9OY7ghZR0U5oATLV9wsVm8= Subject key identifier: 94:F4:34:8F:6D:10:2F:63:E6:69:0D:4E:EA:8E:57:14:02:1D:70:19 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE21E6B50E1D9A4BC6EE70 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b34022-7309-3fb3-98b5-d6af05f76e80.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.118.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:21:e6:b5:0e:1d:9a:4b:c6:ee:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f5a240ae-8bc0-4f2b-b102-2d201a1e99f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:7c:4d:7d:20:74:77:7e:2e:a2:3a:03:bb: ea:cc:4f:cc:2a:4b:96:b7:83:f8:b0:df:ab:21:5d: 3b:24:e8:45:4d:2d:37:42:02:aa:87:7a:ea:96:4f: d9:fc:be:f7:fc:c7:2c:d3:a8:4c:17:55:13:18:dc: af:f5:6c:48:0d:9e:97:8a:74:ef:e7:c1:5c:ed:ff: 3c:b3:1a:db:69:95:ea:2c:39:c0:e8:55:be:81:47: 7b:33:37:1b:9b:6d:0d:f1:0a:04:43:ec:ad:01:d7: fe:e3:1e:ea:e6:4b:b5:58:8f:25:c7:eb:51:75:e8: 94:9c:d2:aa:7f:c9:24:07:be:17:89:46:dd:28:b1: 0a:3b:80:ef:29:1a:57:0f:67:c2:ad:bb:66:f2:10: 50:17:86:01:9e:d3:f1:6a:42:66:99:f3:29:7c:2d: 2b:69:40:e7:af:d7:b9:67:80:22:1c:86:f4:ad:d5: 0f:d1:a0:3b:c2:92:97:b2:94:74:63:78:eb:49:3b: ce:fc:03:fa:bb:e9:79:a5:c7:31:ca:70:f7:ed:9f: 39:76:c8:d9:0a:00:6e:0b:bd:7f:ea:cc:a3:d4:b0: e4:a5:5a:39:22:62:b3:1c:bf:9f:aa:46:d3:2c:78: 69:ea:6f:f6:5b:96:d2:da:f9:96:8b:93:0f:df:ec: 48:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F4:34:8F:6D:10:2F:63:E6:69:0D:4E:EA:8E:57:14:02:1D:70:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b34022-7309-3fb3-98b5-d6af05f76e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2b:05:1b:1a:63:7c:8a:81:13:26:f5:da:ba:44:90:59:9e: f2:63:28:0a:ec:89:e3:50:dc:49:f1:51:32:02:05:78:46:8a: e8:8a:81:57:67:03:4f:eb:8f:4c:fb:0f:ac:06:12:06:fc:9d: 6d:2b:04:c8:a1:9f:85:5b:ff:82:7e:36:cd:f7:90:21:a7:e5: 28:44:2a:51:d9:3e:99:d5:80:ab:77:7d:e1:d1:eb:01:f6:f5: 98:ae:a9:17:af:c1:af:d4:bd:25:44:b7:d9:53:d4:fd:2e:33: 81:3b:fc:ca:0a:c3:3e:66:88:4d:b8:00:c0:e1:fb:d6:46:74: 4e:cc:a8:c3:24:a5:8b:c7:6d:2a:8f:c4:86:7a:79:72:42:52: a2:a1:a6:72:4c:a6:b6:0c:c9:72:2b:75:27:1a:a4:07:fc:27: 56:b5:22:73:36:71:92:1a:3e:2e:21:76:83:90:21:03:f3:bf: 85:47:90:d8:69:8c:b4:bf:46:58:03:b5:77:5f:5a:f5:ea:36: ad:f1:0e:d5:bd:dc:75:c4:0a:05:ab:c2:2c:c9:66:08:79:66: 42:71:a8:2b:9a:c8:f3:b1:f3:93:b5:2a:a2:96:ef:4b:ff:62: c2:cb:9e:0a:fd:bb:c1:e9:cf:d8:0c:b2:85:58:00:77:f1:fe: 48:2d:e6:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziHmtQ4dmkvG7nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjVhMjQwYWUtOGJjMC00ZjJiLWIxMDItMmQyMDFhMWU5OWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf98TX0gdHd+LqI6A7vqzE/MKkuWt4P4sN+r IV07JOhFTS03QgKqh3rqlk/Z/L73/Mcs06hMF1UTGNyv9WxIDZ6XinTv58Fc7f88 sxrbaZXqLDnA6FW+gUd7Mzcbm20N8QoEQ+ytAdf+4x7q5ku1WI8lx+tRdeiUnNKq f8kkB74XiUbdKLEKO4DvKRpXD2fCrbtm8hBQF4YBntPxakJmmfMpfC0raUDnr9e5 Z4AiHIb0rdUP0aA7wpKXspR0Y3jrSTvO/AP6u+l5pccxynD37Z85dsjZCgBuC71/ 6syj1LDkpVo5ImKzHL+fqkbTLHhp6m/2W5bS2vmWi5MP3+xI8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT0NI9tEC9j5mkNTuqOVxQCHXAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjNiMzQwMjItNzMwOS0z ZmIzLTk4YjUtZDZhZjA1Zjc2ZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDInbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsrBRsaY3yKgRMm9dq6RJBZnvJjKArsieNQ3EnxUTICBXhGiuiKgVdn A0/rj0z7D6wGEgb8nW0rBMihn4Vb/4J+Ns33kCGn5ShEKlHZPpnVgKt3feHR6wH2 9ZiuqRevwa/UvSVEt9lT1P0uM4E7/MoKwz5miE24AMDh+9ZGdE7MqMMkpYvHbSqP xIZ6eXJCUqKhpnJMprYMyXIrdScapAf8J1a1InM2cZIaPi4hdoOQIQPzv4VHkNhp jLS/RlgDtXdfWvXqNq3xDtW93HXECgWrwizJZgh5ZkJxqCuayPOx85O1KqKW70v/ YsLLngr9u8Hpz9gMsoVYAHfx/kgt5mY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:39 2025 by rpki-client