$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa File: 3522a44b-9834-3ba3-bf38-77634819db56.roa (raw, json) Hash identifier: TWZ/mRFveUDI0MjCcY+sbrYg+nvBu3DylWPqiPXqjU0= Subject key identifier: 78:BE:6D:96:C7:86:BE:57:52:36:C9:1C:D6:0F:DC:90:CD:58:3B:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797813DCD9EA6F9641BA000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.72.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:81:3d:cd:9e:a6:f9:64:1b:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a5290238-3ed6-4a9d-ad0c-ef31f95f808b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:7a:cf:ab:e0:c1:43:9b:24:23:bc:f9:0d: da:c0:c1:95:ca:b6:87:d9:83:3f:08:d6:f4:ed:f0: 64:47:e5:bb:ff:3b:79:4c:9f:f6:ca:f0:cc:c7:61: 40:58:fc:a9:d2:9b:54:0a:93:6f:84:00:e9:d5:4d: 29:79:5d:49:ed:5e:52:4e:f6:22:75:03:62:1b:13: 5e:79:91:4e:88:9d:e5:69:3f:30:f5:96:bd:d2:01: 32:a3:c8:c5:32:1f:e8:16:cb:81:26:0c:b5:76:45: b2:50:00:76:0e:a4:ae:06:f4:4c:57:7d:98:57:a9: 0f:29:2d:7a:fe:63:7c:19:cc:3e:43:73:c4:5c:4b: 18:34:2e:96:17:dc:68:58:f5:90:85:f6:2c:60:95: 36:33:b8:c7:83:c7:af:c2:2f:fd:fe:e5:58:3d:0f: fd:54:da:e4:a8:6d:e7:83:db:54:3d:5c:9c:e0:88: 44:4f:ad:f2:5e:4d:b5:b9:1b:31:d5:9e:66:9e:4a: 97:d5:7e:47:37:f5:19:b0:83:21:cb:2c:6f:46:c1: 3e:bf:7d:cb:6c:71:13:d2:a3:5b:82:22:c6:12:df: 1f:8a:f9:c6:66:21:b3:89:73:8b:24:68:78:34:79: b6:b0:30:5e:b8:19:39:90:a8:ca:63:38:74:80:7e: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BE:6D:96:C7:86:BE:57:52:36:C9:1C:D6:0F:DC:90:CD:58:3B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:24:21:9c:42:fc:32:ff:57:6e:a7:14:4b:cf:32:59:27:39: 1f:b9:da:05:ec:0d:13:19:fe:a0:b7:ec:30:2d:d1:87:4d:14: e0:69:ae:5d:05:56:0d:fc:ff:ae:8d:98:e3:3f:1b:f9:8b:83: b3:b5:bc:9d:70:57:a3:2c:d7:a3:ba:12:4d:40:7e:eb:74:06: 9a:d0:f9:4b:79:65:6b:fa:1c:2f:85:1b:e9:7c:03:91:3a:22: 09:8a:c3:a7:2c:79:e9:74:dd:02:fd:a1:b7:f9:d8:57:be:a7: e9:ff:a9:84:c2:cb:21:34:15:6e:b6:a1:e8:20:a6:a1:62:41: cf:f4:bf:5a:8d:b0:ea:d8:c6:dc:b3:4e:51:19:df:f2:af:20: e4:da:b0:9d:2f:f8:99:67:d1:c3:78:48:6d:d8:fc:fc:2d:eb: 62:c9:ad:6a:e0:76:4a:79:97:15:a0:5c:eb:aa:3d:89:c4:de: a0:c4:a2:ac:2a:2d:32:c5:a9:e5:c9:30:81:79:9c:27:e4:2f: 57:13:6d:31:e3:8c:be:5e:96:e0:de:63:62:f7:9f:be:6b:26: 2a:64:14:7d:dc:92:fd:ac:cf:20:6a:cf:71:97:18:a3:b5:38: aa:69:2e:70:dd:f9:dd:b6:f7:05:e5:11:87:ab:ec:09:5a:d6: 09:c8:09:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4E9zZ6m+WQboAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTUyOTAyMzgtM2VkNi00YTlkLWFkMGMtZWYzMWY5NWY4MDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8h6z6vgwUObJCO8+Q3awMGVyraH2YM/CNb0 7fBkR+W7/zt5TJ/2yvDMx2FAWPyp0ptUCpNvhADp1U0peV1J7V5STvYidQNiGxNe eZFOiJ3laT8w9Za90gEyo8jFMh/oFsuBJgy1dkWyUAB2DqSuBvRMV32YV6kPKS16 /mN8Gcw+Q3PEXEsYNC6WF9xoWPWQhfYsYJU2M7jHg8evwi/9/uVYPQ/9VNrkqG3n g9tUPVyc4IhET63yXk21uRsx1Z5mnkqX1X5HN/UZsIMhyyxvRsE+v33LbHET0qNb giLGEt8fivnGZiGziXOLJGh4NHm2sDBeuBk5kKjKYzh0gH6jEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHi+bZbHhr5XUjbJHNYP3JDNWDvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzUyMmE0NGItOTgzNC0z YmEzLWJmMzgtNzc2MzQ4MTlkYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4kIZxC/DL/V26nFEvPMlknOR+52gXsDRMZ/qC37DAt0YdNFOBprl0F Vg38/66NmOM/G/mLg7O1vJ1wV6Ms16O6Ek1Afut0BprQ+Ut5ZWv6HC+FG+l8A5E6 IgmKw6cseel03QL9obf52Fe+p+n/qYTCyyE0FW62oeggpqFiQc/0v1qNsOrYxtyz TlEZ3/KvIOTasJ0v+Jln0cN4SG3Y/Pwt62LJrWrgdkp5lxWgXOuqPYnE3qDEoqwq LTLFqeXJMIF5nCfkL1cTbTHjjL5eluDeY2L3n75rJipkFH3ckv2szyBqz3GXGKO1 OKppLnDd+d229wXlEYer7Ala1gnICaA= -----END CERTIFICATE-----Generated at Mon Oct 20 02:15:28 2025 by rpki-client