$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b99a575-c696-3d6c-a848-88522920f0c5.roa File: 2b99a575-c696-3d6c-a848-88522920f0c5.roa (raw, json) Hash identifier: GJljglQWTGuyg2x1qsJ+ABmzpOVSEkj3gKVmyFgbcFw= Subject key identifier: 32:26:B1:94:00:50:AD:F5:F8:D5:11:29:01:93:DB:C1:02:CE:61:36 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679797D5FC630AD2982731A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b99a575-c696-3d6c-a848-88522920f0c5.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.136.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:97:d5:fc:63:0a:d2:98:27:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=bb82c869-d9e0-4ac1-a55d-ce4f26be7b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:56:33:c0:3a:61:a3:17:fb:d8:96:9f:b0: 56:82:08:56:03:10:15:07:bd:55:36:6d:0c:49:a6: 0c:e9:2b:2b:9c:01:7f:7e:88:16:4f:e0:3d:91:64: e8:06:2a:58:bb:08:52:e7:6d:9c:0c:56:fa:17:60: e7:79:76:7b:c9:56:55:a3:56:8d:bc:3e:de:8c:eb: 1a:73:61:b4:ce:7f:f0:dc:93:c7:c4:3a:89:a7:bf: 1b:78:00:82:73:12:d5:cb:84:9a:b7:a9:e3:d3:e1: 71:a3:70:03:11:2a:a3:a9:fa:e9:2c:80:43:43:80: 61:38:95:b6:55:ed:da:dc:a8:cc:f7:78:79:e4:a7: b8:0a:89:4a:f5:21:dc:35:ba:a0:2c:6d:ab:5e:c5: 2d:0c:27:cd:95:4e:5d:3c:d4:ff:42:e7:21:c3:16: 98:7d:b5:55:17:4a:26:ea:85:dc:0d:11:2b:e5:05: 55:e1:86:07:e9:c4:aa:64:ef:53:40:e4:c2:d5:49: f8:ba:7e:56:fc:26:e5:e7:ab:ee:e3:60:4c:04:cf: 20:a0:cd:dd:ad:87:2d:df:d7:21:1b:63:02:a1:d1: 4e:7a:8b:ab:d6:1e:b5:4f:12:83:13:2e:7a:63:c3: 01:62:c4:cb:a0:aa:2a:c8:58:54:32:05:7c:a7:20: 27:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:26:B1:94:00:50:AD:F5:F8:D5:11:29:01:93:DB:C1:02:CE:61:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b99a575-c696-3d6c-a848-88522920f0c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9d:96:8a:5f:38:31:82:3a:d9:9b:34:9a:c1:6e:5b:57:a7: dc:41:ea:79:07:59:8f:13:9b:45:a4:45:20:05:51:f2:fc:c5: 4a:b0:f9:83:ec:d7:c8:b2:36:ec:36:1d:65:f2:a3:56:31:04: 05:0e:a7:63:20:4c:66:ad:67:60:3b:68:36:70:11:41:65:c3: d3:ef:6e:34:8d:fb:1e:ea:10:27:09:53:93:b8:5f:fc:a1:63: c5:69:a5:58:0e:98:2c:87:59:f8:d0:a8:27:db:36:cb:68:ba: d3:d6:d9:98:38:f1:13:a3:d5:4f:c7:41:2b:8d:96:08:59:d1: ab:14:13:7b:3b:8c:78:f5:fe:6c:e2:89:cf:49:9f:ca:ff:4a: c7:01:32:89:c3:ca:0a:75:0b:3c:d1:87:cd:5c:dd:a8:a0:30: ef:82:29:b8:23:ee:19:72:2e:77:44:25:15:4d:e7:11:91:b9: 8d:b5:78:7e:c9:3f:a7:2f:b5:fd:a1:8d:94:63:aa:3d:3d:70: 32:5a:3b:48:53:3b:c5:92:b3:d1:74:46:bd:5f:68:e2:11:09: e2:8c:be:28:b5:c8:fd:e0:af:93:a2:42:cd:a5:1c:eb:a5:b8: d0:50:f9:7e:80:45:b6:a0:bf:39:57:ff:64:64:51:fb:d4:67: e2:6b:7a:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5fV/GMK0pgnMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YmI4MmM4NjktZDllMC00YWMxLWE1NWQtY2U0ZjI2YmU3YjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBFWM8A6YaMX+9iWn7BWgghWAxAVB71VNm0M SaYM6SsrnAF/fogWT+A9kWToBipYuwhS522cDFb6F2DneXZ7yVZVo1aNvD7ejOsa c2G0zn/w3JPHxDqJp78beACCcxLVy4Sat6nj0+Fxo3ADESqjqfrpLIBDQ4BhOJW2 Ve3a3KjM93h55Ke4ColK9SHcNbqgLG2rXsUtDCfNlU5dPNT/QuchwxaYfbVVF0om 6oXcDREr5QVV4YYH6cSqZO9TQOTC1Un4un5W/Cbl56vu42BMBM8goM3drYct39ch G2MCodFOeour1h61TxKDEy56Y8MBYsTLoKoqyFhUMgV8pyAnaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDImsZQAUK31+NURKQGT28ECzmE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI5OWE1NzUtYzY5Ni0z ZDZjLWE4NDgtODg1MjI5MjBmMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIojAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+dlopfODGCOtmbNJrBbltXp9xB6nkHWY8Tm0WkRSAFUfL8xUqw+YPs 18iyNuw2HWXyo1YxBAUOp2MgTGatZ2A7aDZwEUFlw9PvbjSN+x7qECcJU5O4X/yh Y8VppVgOmCyHWfjQqCfbNstoutPW2Zg48ROj1U/HQSuNlghZ0asUE3s7jHj1/mzi ic9Jn8r/SscBMonDygp1CzzRh81c3aigMO+CKbgj7hlyLndEJRVN5xGRuY21eH7J P6cvtf2hjZRjqj09cDJaO0hTO8WSs9F0Rr1faOIRCeKMvii1yP3gr5OiQs2lHOul uNBQ+X6ARbagvzlX/2RkUfvUZ+JrerM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:36:16 2025 by rpki-client