$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa File: 2ab519a8-30a7-3662-b133-9a4028e98d2d.roa (raw, json) Hash identifier: W5CYRs+J5Tsw80PzUvKCm+xHvE5/vJ7jl7Db6wnxneA= Subject key identifier: 96:7B:C4:80:8E:95:DF:F6:0F:2B:0C:BB:9F:B8:AD:DA:15:AC:3D:E1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67975F78E358D118AA31AC40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.99.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:5f:78:e3:58:d1:18:aa:31:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9c2aef77-610c-4ba5-bbbd-bb57a7c17e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:52:a1:b6:f3:14:2e:53:28:1d:a6:ef:79: 63:ff:91:5b:65:fb:02:ea:16:ff:63:e0:12:5b:93: d5:9b:bd:23:9a:23:96:ff:15:f0:df:bc:f4:56:6b: 4a:45:70:16:f8:13:42:9f:1c:b9:4e:49:59:a6:68: af:9a:cf:3b:72:4c:1b:62:34:69:30:0f:d9:39:1b: 5a:2d:43:a3:a8:e2:aa:a9:1a:7c:c1:84:a6:5d:99: 41:a5:de:c9:d3:1c:bc:80:3c:4f:85:a8:96:16:2c: 60:8a:3b:73:88:c3:e5:5d:5e:a8:d3:70:89:94:54: cc:ae:97:2c:bc:c5:99:1b:33:5e:69:01:c4:5c:31: 4f:41:47:a9:5c:9a:a8:d8:5b:fe:1d:47:e1:3b:dd: ac:1d:1d:36:e9:6d:c3:8f:e4:01:eb:48:0d:1d:42: 53:6c:23:51:3a:95:ee:ee:bf:98:bd:e2:61:19:e7: 9b:37:8e:f4:e9:1e:4e:7a:d8:08:5b:a5:8e:18:11: 7f:9e:b3:af:8a:5d:86:a2:63:52:39:e9:29:ab:d4: 67:28:99:3a:4d:4b:ba:43:89:ec:c8:fa:6d:1d:ac: d9:11:e4:f4:f6:88:2d:3e:34:e5:64:8a:3c:99:55: c3:d1:54:2a:f9:f1:41:03:24:bb:41:97:64:58:1e: 12:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7B:C4:80:8E:95:DF:F6:0F:2B:0C:BB:9F:B8:AD:DA:15:AC:3D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f5:0c:f3:dd:e9:0c:e0:90:1a:e7:f2:3b:4f:23:19:e5:ce: fd:2c:2c:51:ee:94:b3:cc:f3:cb:2f:0e:c3:ee:9c:f9:81:64: 1f:9f:23:80:6c:71:2f:6a:67:5b:2c:6d:3b:e8:f0:f5:c5:49: 38:41:80:cb:6d:e8:80:ed:aa:cb:83:13:b6:6a:4f:fd:53:6d: 5c:7f:52:1f:b8:53:41:2a:94:f1:a8:26:26:f2:19:3c:1a:33: cd:ef:a3:54:76:6b:1f:a8:77:b9:7a:08:6c:61:65:10:a4:a1: 21:88:c6:b9:6b:78:13:6a:1b:ff:31:3d:f5:01:af:7d:6c:16: a6:4a:b5:d5:28:71:b6:67:83:cc:28:6c:c2:4e:08:25:d7:27: 57:73:a7:c8:90:b0:91:63:65:27:2c:78:d6:84:18:cb:2f:1a: 72:e1:2c:bc:86:73:00:d6:13:6b:d4:6c:e8:d8:46:61:cd:ce: 83:0f:df:00:34:72:1a:9c:8c:d9:3d:1b:a1:46:a2:2e:07:9d: f4:81:5d:20:25:96:e0:ee:85:48:97:2a:28:8a:a9:79:dc:c9: 47:74:ef:86:dc:35:5b:4a:a1:e4:62:23:2b:09:ca:80:40:1e: 5f:71:4f:a9:9b:d2:5b:8f:b0:8b:a5:39:0b:71:33:8e:46:ba: 45:db:e7:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl19441jRGKoxrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWMyYWVmNzctNjEwYy00YmE1LWJiYmQtYmI1N2E3YzE3ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ1SobbzFC5TKB2m73lj/5FbZfsC6hb/Y+AS W5PVm70jmiOW/xXw37z0VmtKRXAW+BNCnxy5TklZpmivms87ckwbYjRpMA/ZORta LUOjqOKqqRp8wYSmXZlBpd7J0xy8gDxPhaiWFixgijtziMPlXV6o03CJlFTMrpcs vMWZGzNeaQHEXDFPQUepXJqo2Fv+HUfhO92sHR026W3Dj+QB60gNHUJTbCNROpXu 7r+YveJhGeebN4706R5OetgIW6WOGBF/nrOvil2GomNSOekpq9RnKJk6TUu6Q4ns yPptHazZEeT09ogtPjTlZIo8mVXD0VQq+fFBAyS7QZdkWB4SOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ7xICOld/2DysMu5+4rdoVrD3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmFiNTE5YTgtMzBhNy0z NjYyLWIxMzMtOWE0MDI4ZTk4ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF71DPPd6QzgkBrn8jtPIxnlzv0sLFHulLPM88svDsPunPmBZB+fI4Bs cS9qZ1ssbTvo8PXFSThBgMtt6IDtqsuDE7ZqT/1TbVx/Uh+4U0EqlPGoJibyGTwa M83vo1R2ax+od7l6CGxhZRCkoSGIxrlreBNqG/8xPfUBr31sFqZKtdUocbZng8wo bMJOCCXXJ1dzp8iQsJFjZScseNaEGMsvGnLhLLyGcwDWE2vUbOjYRmHNzoMP3wA0 chqcjNk9G6FGoi4HnfSBXSAlluDuhUiXKiiKqXncyUd074bcNVtKoeRiIysJyoBA Hl9xT6mb0luPsIulOQtxM45GukXb5wQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:17:07 2025 by rpki-client