$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3219c89e-b09b-398b-b961-dedde5f3d3c3.roa File: 3219c89e-b09b-398b-b961-dedde5f3d3c3.roa (raw, json) Hash identifier: 3B/3zQvhuZ/mTyvHbA2ka1pYaDTEy/Dik8dmNBLalmw= Subject key identifier: D7:49:59:65:22:AF:BE:1F:8D:E5:5B:B6:BD:43:52:D3:02:78:F1:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE2B9BBC9D7028B34E2C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3219c89e-b09b-398b-b961-dedde5f3d3c3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 19527 IP address blocks: 34.0.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2b:9b:bc:9d:70:28:b3:4e:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=25e5dea8-2982-4461-b4c0-b6ad77085ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:70:61:00:d6:12:0e:d5:63:7f:7d:8a:8b: 1b:7d:45:09:6a:99:93:1f:75:a3:c4:6c:e4:aa:ed: 3c:55:7b:36:63:51:b3:a3:0b:83:d2:3e:a5:ff:4b: 7d:93:cf:4d:ab:5b:07:17:f4:7e:c6:ae:f2:b1:03: 91:53:49:d3:0c:63:f8:6e:77:ac:48:5a:66:24:46: bf:85:77:81:39:64:d9:2d:f5:01:26:d2:53:cd:73: 6d:f2:86:63:e9:45:05:20:ac:d7:6b:a9:c9:4d:17: e0:cf:f1:29:eb:3a:e5:3b:2b:17:0a:39:d8:33:e9: 0c:68:76:6e:ac:f7:95:ad:a9:3a:d0:49:f2:13:07: 1f:6c:66:c5:87:a3:25:36:f2:d6:f6:b6:93:08:04: d0:2d:8e:fb:c2:f8:a6:2a:c7:0e:07:82:39:82:ec: 8d:24:cf:aa:47:bf:24:97:cb:d9:d3:e5:15:ea:58: 5f:19:51:3b:54:39:05:9d:c4:45:a9:38:7f:e5:17: d4:44:c9:7b:a7:a3:92:4a:44:81:fb:25:41:6f:e4: 90:35:9a:75:8c:91:11:90:92:81:ac:fe:59:14:6a: 15:5d:2e:74:08:98:42:89:4e:c8:65:cc:84:c3:dd: 8e:a0:1d:77:c0:dc:ca:1a:f7:d8:ac:a3:49:d6:de: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:49:59:65:22:AF:BE:1F:8D:E5:5B:B6:BD:43:52:D3:02:78:F1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3219c89e-b09b-398b-b961-dedde5f3d3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:be:31:55:55:12:5d:53:28:c3:e4:8f:25:c8:b7:a6:c5:fb: 47:1c:d6:68:a5:22:cd:15:41:0b:59:e5:f4:3b:b9:54:5e:96: 76:3e:ad:46:36:ec:3b:2b:06:cd:8c:86:1d:0c:9b:12:56:72: d1:68:0f:77:7f:42:63:1f:60:4f:f3:9e:b4:c3:be:14:ea:52: a8:4a:fe:a1:c0:2d:3f:f5:3c:54:86:4d:f7:70:cd:96:b9:d7: d8:bb:d7:5e:e7:0a:50:ab:e7:db:d9:70:70:8f:32:c9:52:ed: 83:15:31:b2:c3:47:5b:f2:cf:59:62:2c:e1:53:ce:42:4f:e5: b6:aa:7c:26:02:71:d2:c7:e6:d8:a3:89:75:bf:4e:c0:be:1a: 20:a7:b3:8d:4b:3d:78:a7:f0:bd:17:e9:e3:65:bc:0c:84:ac: 6a:f8:c2:ca:46:69:26:c7:a0:07:46:ca:d0:0b:b3:1d:ca:4d: 6f:1d:b9:e7:64:1e:a8:10:2c:91:e4:8a:66:c2:b4:59:12:34: e3:41:06:fd:77:dc:af:49:64:dc:9d:7f:d6:51:67:8c:cc:de: b4:67:d0:e9:0b:22:31:a1:d9:a1:63:cf:bf:aa:b1:21:c3:07: 6e:a9:0c:64:59:98:a4:af:3a:40:a5:e7:66:c7:6b:c0:f0:90: 29:04:7a:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziubvJ1wKLNOLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjVlNWRlYTgtMjk4Mi00NDYxLWI0YzAtYjZhZDc3MDg1YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDNwYQDWEg7VY399iosbfUUJapmTH3WjxGzk qu08VXs2Y1GzowuD0j6l/0t9k89Nq1sHF/R+xq7ysQORU0nTDGP4bnesSFpmJEa/ hXeBOWTZLfUBJtJTzXNt8oZj6UUFIKzXa6nJTRfgz/Ep6zrlOysXCjnYM+kMaHZu rPeVrak60EnyEwcfbGbFh6MlNvLW9raTCATQLY77wvimKscOB4I5guyNJM+qR78k l8vZ0+UV6lhfGVE7VDkFncRFqTh/5RfURMl7p6OSSkSB+yVBb+SQNZp1jJERkJKB rP5ZFGoVXS50CJhCiU7IZcyEw92OoB13wNzKGvfYrKNJ1t7O7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdJWWUir74fjeVbtr1DUtMCePHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzIxOWM4OWUtYjA5Yi0z OThiLWI5NjEtZGVkZGU1ZjNkM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2+MVVVEl1TKMPkjyXIt6bF+0cc1milIs0VQQtZ5fQ7uVRelnY+rUY2 7DsrBs2Mhh0MmxJWctFoD3d/QmMfYE/znrTDvhTqUqhK/qHALT/1PFSGTfdwzZa5 19i7117nClCr59vZcHCPMslS7YMVMbLDR1vyz1liLOFTzkJP5baqfCYCcdLH5tij iXW/TsC+GiCns41LPXin8L0X6eNlvAyErGr4wspGaSbHoAdGytALsx3KTW8duedk HqgQLJHkimbCtFkSNONBBv133K9JZNydf9ZRZ4zM3rRn0OkLIjGh2aFjz7+qsSHD B26pDGRZmKSvOkCl52bHa8DwkCkEemI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:39:41 2025 by rpki-client