$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa File: 33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa (raw, json) Hash identifier: S+HTy2jHNdB+0UfUIeZfMV/XWl0u3HnW5WoVJexhVe0= Subject key identifier: F7:0D:30:7C:7B:3C:4D:E5:71:88:2F:FA:A0:02:E3:D0:02:0E:0E:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679771620301624BA57D2780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.69.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:71:62:03:01:62:4b:a5:7d:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5c5de2e4-04a9-4276-8ba2-acb2bc5861bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e3:a8:f3:d5:e9:2e:a4:61:d7:c6:a0:e8:70: 7d:5c:a6:93:81:33:0b:b0:1e:a1:5a:12:7a:8c:8b: 4c:b4:fa:bd:97:af:5f:75:1a:ab:04:60:64:ce:f2: 28:ec:ba:c1:01:73:8a:4d:0b:34:d5:da:5d:46:80: 9d:48:ed:b6:18:66:06:cc:92:52:87:06:2b:a6:81: 49:59:f7:60:9e:ff:be:2d:3d:25:89:5b:ad:72:d8: 6c:1f:e7:69:5b:6f:36:93:84:4a:eb:51:5a:24:7d: e2:d0:86:ac:43:0d:cb:f6:ab:2e:6f:20:c3:2e:24: 8f:99:dc:d0:2b:b6:97:82:18:6c:c3:63:4a:eb:53: 52:0d:99:a3:f3:63:05:6d:60:1e:c8:9b:08:0b:77: 91:51:cb:8e:96:47:90:3a:ca:b8:10:ac:b7:9f:a0: 87:1d:c7:8e:fc:87:73:97:83:c4:ee:61:bc:fd:8f: 9e:0e:5e:8a:a6:3e:ba:93:d0:fe:ae:19:90:e8:35: a4:bb:c2:58:81:37:64:da:fd:11:bd:dc:7a:e5:d7: de:b3:31:4c:e2:3a:a2:1e:8c:ad:f9:b5:6d:5c:24: 0f:b1:0a:83:2b:c3:8d:72:1d:bc:75:ac:20:27:42: a6:da:6a:63:e3:ed:7f:53:0b:f5:1c:b0:5e:6a:7a: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0D:30:7C:7B:3C:4D:E5:71:88:2F:FA:A0:02:E3:D0:02:0E:0E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:29:d1:f8:71:e9:9f:b2:c0:8f:4c:1f:73:0f:08:55:d8:4d: c9:be:85:fb:35:ed:4e:06:30:70:2a:8c:3b:45:de:0a:a1:13: c0:4b:8f:06:ff:8d:d6:e0:31:89:91:fd:6e:5d:95:17:06:e0: b2:bd:51:14:7b:46:f6:20:7c:fb:2e:bd:b6:15:8b:f0:b8:6c: d8:60:f6:9a:d8:95:b3:96:04:3b:f3:2d:3f:b5:4e:3e:75:8f: 5f:55:46:e3:d8:50:9a:1b:d9:d2:e9:f5:b0:6d:db:93:8a:d1: 49:0e:4c:02:b9:6d:45:07:66:0f:f4:67:18:0b:82:15:3e:c8: 2e:2e:27:bc:3e:f1:88:49:fe:b8:3d:3a:95:62:d6:1b:13:e0: fe:ea:d4:76:96:59:7e:46:92:c9:8b:2e:05:cd:f0:d3:7a:e3: 01:5a:aa:6b:62:99:aa:00:48:3f:14:dc:f2:a6:c7:5a:b6:f6: 12:28:2e:e7:ec:a3:79:d6:4f:f8:1f:87:5c:63:d7:69:83:19: ca:85:bb:9e:25:de:af:69:26:26:73:f4:7c:18:74:2a:db:8f: 6c:14:4a:b5:4a:eb:42:b0:a8:11:b2:05:25:cc:81:e7:d1:f4: 48:7f:1e:47:71:10:0a:15:59:1e:66:47:89:5a:8d:08:6d:62: 77:d8:f3:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3FiAwFiS6V9J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NWM1ZGUyZTQtMDRhOS00Mjc2LThiYTItYWNiMmJjNTg2MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+Oo89XpLqRh18ag6HB9XKaTgTMLsB6hWhJ6 jItMtPq9l69fdRqrBGBkzvIo7LrBAXOKTQs01dpdRoCdSO22GGYGzJJShwYrpoFJ Wfdgnv++LT0liVutcthsH+dpW282k4RK61FaJH3i0IasQw3L9qsubyDDLiSPmdzQ K7aXghhsw2NK61NSDZmj82MFbWAeyJsIC3eRUcuOlkeQOsq4EKy3n6CHHceO/Idz l4PE7mG8/Y+eDl6Kpj66k9D+rhmQ6DWku8JYgTdk2v0Rvdx65dfeszFM4jqiHoyt +bVtXCQPsQqDK8ONch28dawgJ0Km2mpj4+1/Uwv1HLBeanovOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcNMHx7PE3lcYgv+qAC49ACDg5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNmYTMzNjgtMzJiYi0z ZWUyLTk2NmUtMmE4Y2U3NjU5OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQp0fhx6Z+ywI9MH3MPCFXYTcm+hfs17U4GMHAqjDtF3gqhE8BLjwb/ jdbgMYmR/W5dlRcG4LK9URR7RvYgfPsuvbYVi/C4bNhg9prYlbOWBDvzLT+1Tj51 j19VRuPYUJob2dLp9bBt25OK0UkOTAK5bUUHZg/0ZxgLghU+yC4uJ7w+8YhJ/rg9 OpVi1hsT4P7q1HaWWX5GksmLLgXN8NN64wFaqmtimaoASD8U3PKmx1q29hIoLufs o3nWT/gfh1xj12mDGcqFu54l3q9pJiZz9HwYdCrbj2wUSrVK60KwqBGyBSXMgefR 9Eh/HkdxEAoVWR5mR4lajQhtYnfY8/Y= -----END CERTIFICATE-----Generated at Mon Oct 20 05:26:52 2025 by rpki-client