$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b87b3fc-a358-332f-898e-e06e6bc984fa.roa File: 2b87b3fc-a358-332f-898e-e06e6bc984fa.roa (raw, json) Hash identifier: 8mErXnJlxnOaWxz57wkasMR+hbP+2Tfkk6Wy6f6eaZw= Subject key identifier: 74:8F:6A:B7:C0:9A:85:FA:BE:38:6F:8C:FA:02:05:01:A2:43:3B:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797CE5EBE3E453C677AA700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b87b3fc-a358-332f-898e-e06e6bc984fa.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.89.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ce:5e:be:3e:45:3c:67:7a:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=7385a8e7-50e6-4b4a-bede-5165f255f129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1b:4f:70:ec:74:b1:66:3e:cd:d3:42:b4:71: 56:cd:60:62:48:cc:75:1a:20:6c:fe:5e:54:d5:95: 1b:ca:2b:33:ce:94:45:ed:9d:df:51:22:db:f1:96: 1c:9c:4b:26:dd:1c:2a:7a:9f:9f:fe:2c:a4:c7:c4: d4:b3:2a:8d:89:cf:ff:38:11:c2:4e:34:89:18:ca: da:56:54:d3:8b:a8:12:4b:1a:31:0d:16:d1:80:21: 2e:ba:02:ff:c4:e5:cc:26:df:dd:8d:e2:62:88:59: 4c:7f:61:bb:7e:6a:b7:b1:34:aa:87:20:09:a2:8d: a5:63:2d:d3:c5:eb:44:91:ec:86:b3:18:26:d9:9e: d4:ac:8a:c8:31:5f:68:16:e7:51:0f:5c:21:85:ff: 98:c8:16:0d:a2:e0:48:71:1a:e1:02:c3:15:22:1f: bb:10:40:bd:72:23:b7:c9:bd:2f:7f:bf:a6:da:5d: 04:e5:c9:65:da:d0:66:c3:91:d4:04:04:b8:cc:87: 5f:96:29:99:fa:91:b8:e1:69:18:e8:95:c5:e8:a3: 34:66:40:4f:b9:1b:ff:48:00:61:50:70:d8:80:81: bd:95:46:8b:6e:28:e6:d3:ca:57:7b:cd:6a:2d:4e: 65:98:32:f6:4a:3f:4b:72:c8:f1:4d:85:e2:b0:12: e2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8F:6A:B7:C0:9A:85:FA:BE:38:6F:8C:FA:02:05:01:A2:43:3B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b87b3fc-a358-332f-898e-e06e6bc984fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:05:af:3e:03:db:11:c9:d4:e1:1f:19:72:82:ad:63:71:d0: c5:46:f8:c6:ba:fe:e6:5b:a5:23:d4:0d:8d:23:2d:25:0b:49: 9c:a2:0f:3b:fc:02:c9:8f:6d:15:1d:b6:6a:bc:0b:7d:ba:a5: c6:8b:75:34:15:1c:0d:22:79:4e:f1:9a:2f:6d:98:d2:57:cd: 7c:b5:cd:30:07:6c:a5:42:ce:e7:10:20:63:63:f8:7f:ab:4f: 53:d0:b4:88:dc:eb:d5:4f:b6:9b:48:ed:26:1d:dd:5b:ea:9b: a8:d5:2f:a2:92:b8:f9:41:b8:51:61:f1:f3:6c:8d:4f:89:79: e4:9d:68:98:72:35:27:25:df:d7:e6:e9:79:ef:10:9d:b1:0f: d8:e9:e9:c2:e4:80:9e:c4:d5:f4:9c:08:0d:60:7f:04:b4:eb: d2:73:fd:12:cc:39:12:ba:82:bc:36:76:7f:dc:ce:df:bc:d8: ff:2d:3b:3f:7a:f6:50:b1:d3:1c:07:08:4e:b2:0c:e6:98:0f: fa:9a:9c:8a:e3:b9:a5:d0:b4:8c:11:30:52:29:17:58:42:ad: 15:64:b9:69:44:ef:7f:2e:de:10:51:87:ec:ab:04:0d:f9:12: 3c:35:bb:33:8e:7a:2e:a9:f2:6f:40:e8:95:e1:df:9e:8c:94: 37:18:6a:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl85evj5FPGd6pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzM4NWE4ZTctNTBlNi00YjRhLWJlZGUtNTE2NWYyNTVmMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixtPcOx0sWY+zdNCtHFWzWBiSMx1GiBs/l5U 1ZUbyiszzpRF7Z3fUSLb8ZYcnEsm3Rwqep+f/iykx8TUsyqNic//OBHCTjSJGMra VlTTi6gSSxoxDRbRgCEuugL/xOXMJt/djeJiiFlMf2G7fmq3sTSqhyAJoo2lYy3T xetEkeyGsxgm2Z7UrIrIMV9oFudRD1whhf+YyBYNouBIcRrhAsMVIh+7EEC9ciO3 yb0vf7+m2l0E5cll2tBmw5HUBAS4zIdflimZ+pG44WkY6JXF6KM0ZkBPuRv/SABh UHDYgIG9lUaLbijm08pXe81qLU5lmDL2Sj9LcsjxTYXisBLi5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSParfAmoX6vjhvjPoCBQGiQzv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI4N2IzZmMtYTM1OC0z MzJmLTg5OGUtZTA2ZTZiYzk4NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgFrz4D2xHJ1OEfGXKCrWNx0MVG+Ma6/uZbpSPUDY0jLSULSZyiDzv8 AsmPbRUdtmq8C326pcaLdTQVHA0ieU7xmi9tmNJXzXy1zTAHbKVCzucQIGNj+H+r T1PQtIjc69VPtptI7SYd3Vvqm6jVL6KSuPlBuFFh8fNsjU+JeeSdaJhyNScl39fm 6XnvEJ2xD9jp6cLkgJ7E1fScCA1gfwS069Jz/RLMORK6grw2dn/czt+82P8tOz96 9lCx0xwHCE6yDOaYD/qanIrjuaXQtIwRMFIpF1hCrRVkuWlE738u3hBRh+yrBA35 Ejw1uzOOei6p8m9A6JXh356MlDcYan0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:15:04 2025 by rpki-client