$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa File: 33ce8402-8a94-3eab-b082-24afe422f714.roa (raw, json) Hash identifier: Giy1TrinaxX6k8kC2R9NBMS0g4R2JZuIiE+NTzXfFJI= Subject key identifier: 61:DB:56:E0:27:E4:53:08:D8:AF:EF:BE:03:B3:D9:17:F0:8D:E6:9D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797CAE411A06F09BABE0180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.68.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ca:e4:11:a0:6f:09:ba:be:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=69e7cd5a-89e2-4546-a270-1fca2c30389b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:41:7e:8b:06:c9:d8:0e:61:cb:9c:a9:2f: e7:ad:50:a6:67:a7:45:49:50:9a:a4:ef:24:14:98: e0:0b:f8:8a:1a:06:8d:67:df:34:d5:1b:97:3e:92: 84:d2:b9:23:30:7f:b5:0b:c9:36:bf:71:4e:00:17: ce:e7:49:e5:1c:a7:e2:de:95:ec:5d:9a:01:c4:74: 81:2f:3f:6c:c3:7a:78:7b:af:56:ff:16:de:98:ad: c6:94:25:db:1f:9f:33:9b:7f:3b:0c:6b:d7:14:f6: e9:f7:f4:fd:61:86:29:ae:5a:90:65:e2:e2:c0:6d: 5b:74:53:67:43:b9:a4:e2:29:43:5d:6b:d9:43:a9: 73:b3:70:b5:31:0a:3d:0b:82:c4:da:db:78:a9:fb: 83:20:5f:59:d8:56:93:c5:20:25:d0:89:64:62:bc: ad:19:65:4a:ee:49:0e:f3:ee:b1:1c:52:28:20:f6: 52:bc:18:7c:03:f8:13:7f:22:fb:b5:b2:c9:2b:67: 79:7c:dc:25:ff:56:94:56:4c:43:9d:c9:a6:8a:89: 3a:7e:b8:9d:84:69:d6:42:55:94:6c:83:a9:5e:83: 06:14:c8:48:39:e3:87:aa:7d:b4:dc:35:07:80:72: 1f:91:d1:d4:87:ea:32:1d:be:0f:0e:b0:7b:44:0b: 6c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DB:56:E0:27:E4:53:08:D8:AF:EF:BE:03:B3:D9:17:F0:8D:E6:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:43:fd:83:99:01:26:b3:b8:0a:b0:42:09:85:1c:a0:33:b5: 1a:bb:a0:49:8f:b0:59:f9:1b:ea:e9:b2:e7:c0:b8:f2:59:95: 9b:37:9f:ef:fe:19:24:1e:d0:7c:e5:61:26:7c:19:46:42:c2: 79:42:a9:75:31:33:a4:dc:32:44:72:de:48:36:10:f6:af:dc: 54:3d:1d:45:5f:d9:3c:32:ed:1a:39:73:9e:79:dc:91:38:12: 80:55:e5:e7:8e:54:f8:71:95:c2:50:01:78:a1:69:11:13:09: 05:a4:f9:f5:54:b1:3b:6e:24:26:65:7a:fd:3b:4f:1f:7f:42: 22:a8:6c:63:13:40:1d:68:e5:ee:3e:1e:29:a8:61:93:e6:d8: ec:fc:71:cb:e3:94:30:1a:da:c4:b2:c8:de:09:9e:ae:b5:27: cb:33:dc:8c:7a:a5:c4:04:c1:ea:c2:1c:dd:3c:19:b9:8b:04: 2b:7b:2b:79:b7:25:8a:e6:bc:ff:61:cf:b6:42:72:5a:10:00: 3e:d3:f2:0d:1d:c4:e3:9c:8e:59:d4:27:83:22:b7:f0:bd:09: d0:91:11:6d:c2:4b:c7:e2:c2:53:f9:68:bc:e5:d0:1c:1d:56: 05:55:2f:5d:e3:51:9a:11:73:ce:26:f7:59:d2:8b:8b:a1:66: cd:85:e4:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8rkEaBvCbq+AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjllN2NkNWEtODllMi00NTQ2LWEyNzAtMWZjYTJjMzAzODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo21BfosGydgOYcucqS/nrVCmZ6dFSVCapO8k FJjgC/iKGgaNZ9801RuXPpKE0rkjMH+1C8k2v3FOABfO50nlHKfi3pXsXZoBxHSB Lz9sw3p4e69W/xbemK3GlCXbH58zm387DGvXFPbp9/T9YYYprlqQZeLiwG1bdFNn Q7mk4ilDXWvZQ6lzs3C1MQo9C4LE2tt4qfuDIF9Z2FaTxSAl0IlkYrytGWVK7kkO 8+6xHFIoIPZSvBh8A/gTfyL7tbLJK2d5fNwl/1aUVkxDncmmiok6fridhGnWQlWU bIOpXoMGFMhIOeOHqn203DUHgHIfkdHUh+oyHb4PDrB7RAtsBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHbVuAn5FMI2K/vvgOz2RfwjeadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNjZTg0MDItOGE5NC0z ZWFiLWIwODItMjRhZmU0MjJmNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBD/YOZASazuAqwQgmFHKAztRq7oEmPsFn5G+rpsufAuPJZlZs3n+/+ GSQe0HzlYSZ8GUZCwnlCqXUxM6TcMkRy3kg2EPav3FQ9HUVf2Twy7Ro5c5553JE4 EoBV5eeOVPhxlcJQAXihaRETCQWk+fVUsTtuJCZlev07Tx9/QiKobGMTQB1o5e4+ HimoYZPm2Oz8ccvjlDAa2sSyyN4Jnq61J8sz3Ix6pcQEwerCHN08GbmLBCt7K3m3 JYrmvP9hz7ZCcloQAD7T8g0dxOOcjlnUJ4Mit/C9CdCREW3CS8fiwlP5aLzl0Bwd VgVVL13jUZoRc84m91nSi4uhZs2F5JE= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:42 2025 by rpki-client