$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f432547-5131-3951-9138-b428b609f35e.roa File: 2f432547-5131-3951-9138-b428b609f35e.roa (raw, json) Hash identifier: j8P2r1ko9o87CuJjs1p6LZmj5Xb/9VAgz9uRTRm0oLc= Subject key identifier: D0:2B:A9:EE:9C:78:C7:55:AE:15:C8:B8:63:48:EC:EC:DC:36:4A:54 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B33F19826A1310F6541824380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f432547-5131-3951-9138-b428b609f35e.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 19527 IP address blocks: 34.2.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:98:26:a1:31:0f:65:41:82:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=cbfe8e98-844b-4b56-b5f1-a6cdd39863fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:db:be:ac:59:87:ef:9b:6e:c1:1a:f1:8a:73: 8d:32:45:c5:f1:c0:da:03:44:bb:dc:08:ba:8f:33: c1:53:b2:25:d6:d8:1a:dd:b8:00:7d:33:4d:2a:a6: 30:03:4d:b2:c0:7b:c3:9f:58:23:02:10:1b:63:0f: 92:4f:6e:54:80:c6:e1:a3:30:42:5e:dd:55:ef:79: e5:a9:a7:de:11:0d:56:cb:c8:19:7c:94:94:f2:f7: 36:b6:09:93:a1:fb:09:a8:c3:dd:26:c7:05:81:3c: f0:a8:31:67:52:34:58:10:b4:26:05:6a:f8:55:82: 43:1c:79:3b:58:d7:a1:a1:c6:07:c4:18:ea:9c:55: 0c:f5:63:4a:7f:ca:d6:b7:b6:4a:ae:46:20:0c:88: 13:cf:f4:e8:82:27:ce:77:b0:76:6c:0e:47:57:34: 32:b9:31:54:60:e8:34:a0:db:0e:fa:a8:b0:34:1a: c8:d0:17:20:0d:a6:1a:f0:55:8f:39:40:15:02:25: d1:08:d1:e1:ca:a2:7f:04:c3:31:f1:72:48:cc:02: 72:54:aa:d3:a3:ba:16:f9:fc:0b:04:79:5e:b0:ec: 39:b2:c1:2c:03:6f:b5:f1:ea:0a:3f:f4:5f:9f:cd: 0a:9e:bf:08:49:42:70:7a:ad:ee:f7:c4:e1:7d:99: b4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2B:A9:EE:9C:78:C7:55:AE:15:C8:B8:63:48:EC:EC:DC:36:4A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f432547-5131-3951-9138-b428b609f35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2b:ac:e9:27:24:32:00:61:67:15:8a:64:5d:8a:8d:ce:78: 43:f9:88:fb:77:b7:45:0e:8f:9c:72:04:f4:49:d9:ba:d5:d7: 55:8d:de:a6:dc:d7:d9:b4:39:50:90:ea:3c:b7:3a:8b:de:fa: d0:18:6f:51:ce:17:06:6c:22:e8:c1:78:05:16:8d:30:47:c5: d9:ff:d0:8f:f1:6b:23:8b:7c:31:43:35:5b:f7:44:6e:ba:b6: 9e:f5:30:f6:10:5a:44:3d:e0:ce:87:f8:b1:72:73:4e:7f:22: a2:43:f6:1f:85:98:5a:14:c9:28:31:04:fa:ce:f0:47:81:23: 81:1b:d9:2a:58:a2:80:c9:bc:82:67:be:12:fc:73:13:c0:e9: b3:00:c7:53:e4:96:74:05:da:8e:b3:e0:23:61:74:ad:de:46: 72:1b:ca:f9:0c:b5:a6:90:8a:96:bc:fa:90:02:8e:7c:b1:af: 85:1b:45:a7:fa:41:9c:5c:8d:d0:62:7c:53:9c:29:26:60:c1: ae:6a:5d:d9:e6:99:6b:bf:52:38:81:84:9d:fc:1a:7a:f8:4d: 15:7a:ac:48:1e:d8:13:5b:ad:53:d6:8e:30:95:68:54:1b:ca: 2c:05:88:3a:11:84:20:84:5e:0c:77:e5:63:a5:37:45:f3:7e: 8a:0e:57:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8ZgmoTEPZUGCQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk Y2JmZThlOTgtODQ0Yi00YjU2LWI1ZjEtYTZjZGQzOTg2M2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotu+rFmH75tuwRrxinONMkXF8cDaA0S73Ai6 jzPBU7Il1tga3bgAfTNNKqYwA02ywHvDn1gjAhAbYw+ST25UgMbhozBCXt1V73nl qafeEQ1Wy8gZfJSU8vc2tgmTofsJqMPdJscFgTzwqDFnUjRYELQmBWr4VYJDHHk7 WNehocYHxBjqnFUM9WNKf8rWt7ZKrkYgDIgTz/TogifOd7B2bA5HVzQyuTFUYOg0 oNsO+qiwNBrI0BcgDaYa8FWPOUAVAiXRCNHhyqJ/BMMx8XJIzAJyVKrTo7oW+fwL BHlesOw5ssEsA2+18eoKP/Rfn80Knr8ISUJweq3u98ThfZm0LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNArqe6ceMdVrhXIuGNI7OzcNkpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmY0MzI1NDctNTEzMS0z OTUxLTkxMzgtYjQyOGI2MDlmMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgrrOknJDIAYWcVimRdio3OeEP5iPt3t0UOj5xyBPRJ2brV11WN3qbc 19m0OVCQ6jy3Oove+tAYb1HOFwZsIujBeAUWjTBHxdn/0I/xayOLfDFDNVv3RG66 tp71MPYQWkQ94M6H+LFyc05/IqJD9h+FmFoUySgxBPrO8EeBI4Eb2SpYooDJvIJn vhL8cxPA6bMAx1PklnQF2o6z4CNhdK3eRnIbyvkMtaaQipa8+pACjnyxr4UbRaf6 QZxcjdBifFOcKSZgwa5qXdnmmWu/UjiBhJ38Gnr4TRV6rEge2BNbrVPWjjCVaFQb yiwFiDoRhCCEXgx35WOlN0XzfooOV80= -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:59 2025 by rpki-client