$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37088054-58ec-3f42-b8b1-17ad173e1768.roa File: 37088054-58ec-3f42-b8b1-17ad173e1768.roa (raw, json) Hash identifier: Juf+loOE+lrslyT8BaqE4IlLaodxhNRX9V64MgyYKD4= Subject key identifier: B2:07:80:C3:B6:B0:77:E5:39:AB:16:6F:B7:5B:83:5C:F8:3C:81:0C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67977B0B93E70FE96E2C58C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37088054-58ec-3f42-b8b1-17ad173e1768.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.136.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:7b:0b:93:e7:0f:e9:6e:2c:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2cf56f4f-2a32-4ac1-947d-9fe6f63c5d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:85:7d:78:56:ab:d2:13:f2:54:08:04:2a:73: 23:18:24:e7:f0:ed:e8:0f:0d:bf:59:41:41:4f:83: e0:a3:1d:ff:20:27:86:40:68:ad:a0:67:79:bc:b3: 45:10:28:32:c1:7f:ee:af:66:7f:fe:60:06:05:89: 05:43:50:2a:ed:23:89:6b:32:67:1a:91:35:26:ec: 50:c4:cd:57:a5:45:97:da:49:e4:1d:05:2c:04:94: 2f:2f:1c:f7:a0:70:70:3b:53:48:07:5c:31:89:38: e1:51:43:60:d0:5b:fd:dc:5b:e3:90:e3:90:0c:fd: 9a:83:7a:36:18:f1:22:02:f2:14:5d:f4:04:b8:01: ad:91:43:b6:d1:f4:db:bc:de:c3:11:1c:c7:75:2a: 88:8d:a5:48:ce:5d:78:cb:19:ed:e3:48:80:9c:67: b8:5b:37:5f:25:a5:b1:bf:78:26:ef:cd:a4:c8:86: 06:7a:b6:7a:f9:cf:2a:15:e1:eb:63:6b:c4:08:cc: c2:fe:53:5f:b4:28:92:1c:cd:1c:dc:8c:51:03:85: 34:a2:d5:d9:0c:f8:39:4c:dd:97:0d:f2:07:88:ed: be:b4:64:31:6f:eb:df:dd:79:f5:d0:71:14:49:51: 12:7e:e5:2e:12:09:b4:d8:ba:bb:ed:de:3a:5e:51: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:07:80:C3:B6:B0:77:E5:39:AB:16:6F:B7:5B:83:5C:F8:3C:81:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37088054-58ec-3f42-b8b1-17ad173e1768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:9b:9a:fe:f6:6d:88:e9:38:fb:3c:86:84:79:46:0b:16:03: 2c:80:f8:9d:cd:4b:29:83:8f:63:fc:27:03:7e:08:10:71:cf: 44:8e:0a:01:79:00:2f:26:21:37:e9:e6:36:21:3d:9a:fa:a7: 90:d0:9d:80:66:66:74:a6:e2:4e:1e:3b:4a:a1:0c:b5:cb:7d: 52:76:de:b7:9c:cf:27:38:fa:14:a9:08:f1:89:c7:fa:2e:bd: 21:b2:68:15:9d:78:d9:aa:a2:46:8f:b9:e8:69:ae:e7:95:b8: ac:a9:7e:99:94:21:3b:de:1b:ae:61:07:3a:cd:46:23:4b:dd: 5f:76:4a:e4:6f:4c:04:f6:3a:56:09:78:37:84:56:7c:59:f0: 8e:a7:af:45:66:9d:45:05:6f:8d:5c:01:97:99:20:10:aa:28: 67:59:d7:16:d6:50:36:8f:37:cc:cc:80:30:4c:92:80:a7:ee: cc:8b:c9:70:a7:a1:70:a5:8a:d7:b5:b7:78:13:43:74:bb:98: 7b:9a:12:10:a6:b4:10:07:7d:df:77:bd:22:33:2c:14:51:44: 41:23:59:a9:f6:67:0c:9f:61:71:4d:46:cf:8b:6d:f2:ef:f0: 0d:d0:4d:5f:c9:e0:f3:22:1a:84:89:a9:5d:f7:18:50:b2:76: c6:a6:ff:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3sLk+cP6W4sWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmNmNTZmNGYtMmEzMi00YWMxLTk0N2QtOWZlNmY2M2M1ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIV9eFar0hPyVAgEKnMjGCTn8O3oDw2/WUFB T4Pgox3/ICeGQGitoGd5vLNFECgywX/ur2Z//mAGBYkFQ1Aq7SOJazJnGpE1JuxQ xM1XpUWX2knkHQUsBJQvLxz3oHBwO1NIB1wxiTjhUUNg0Fv93FvjkOOQDP2ag3o2 GPEiAvIUXfQEuAGtkUO20fTbvN7DERzHdSqIjaVIzl14yxnt40iAnGe4WzdfJaWx v3gm782kyIYGerZ6+c8qFeHrY2vECMzC/lNftCiSHM0c3IxRA4U0otXZDPg5TN2X DfIHiO2+tGQxb+vf3Xn10HEUSVESfuUuEgm02Lq77d46XlEfewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIHgMO2sHflOasWb7dbg1z4PIEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzcwODgwNTQtNThlYy0z ZjQyLWI4YjEtMTdhZDE3M2UxNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmbmv72bYjpOPs8hoR5RgsWAyyA+J3NSymDj2P8JwN+CBBxz0SOCgF5 AC8mITfp5jYhPZr6p5DQnYBmZnSm4k4eO0qhDLXLfVJ23reczyc4+hSpCPGJx/ou vSGyaBWdeNmqokaPuehprueVuKypfpmUITveG65hBzrNRiNL3V92SuRvTAT2OlYJ eDeEVnxZ8I6nr0VmnUUFb41cAZeZIBCqKGdZ1xbWUDaPN8zMgDBMkoCn7syLyXCn oXClite1t3gTQ3S7mHuaEhCmtBAHfd93vSIzLBRRREEjWan2ZwyfYXFNRs+LbfLv 8A3QTV/J4PMiGoSJqV33GFCydsam/6Y= -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:45 2025 by rpki-client