$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38701d7a-0954-365d-a8a5-18929448cc17.roa File: 38701d7a-0954-365d-a8a5-18929448cc17.roa (raw, json) Hash identifier: 8Ohww9PRRIRohMftGvKLk230jTliw6ejoTQfqFFKcZ8= Subject key identifier: B7:7A:67:52:4D:7B:EB:34:F3:AA:80:24:9C:03:8A:0D:5B:B4:B8:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797723BEB94D4BEA06D8100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38701d7a-0954-365d-a8a5-18929448cc17.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.80.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:72:3b:eb:94:d4:be:a0:6d:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=29b84e13-34d2-4e6d-af7f-3100722fedb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:72:88:75:7e:a4:c9:1d:07:d3:50:a8:62: a0:ce:d8:06:12:cb:4f:56:00:92:83:92:0d:15:51: e8:a8:ea:91:72:7b:f9:e7:36:7a:a3:a7:00:c8:2e: 7a:6c:f6:e5:74:93:31:e5:08:37:73:68:30:b3:fd: 8a:59:9e:b3:d2:47:fe:5f:4a:76:5a:35:86:21:09: a8:22:7f:7a:5f:cc:ba:ff:46:ff:b4:6b:77:98:29: ee:6f:f8:5a:40:82:32:e0:12:1d:1f:d0:2b:d2:e2: 2f:ae:9e:20:7c:72:52:da:74:5e:b5:60:76:d8:fe: a7:12:41:ab:39:0d:10:38:e2:11:66:4a:18:e7:1a: 16:c5:04:5d:96:62:68:24:e6:d6:a4:54:ab:b1:d6: bb:fa:80:07:70:5c:a0:22:97:a7:10:e3:dd:d6:93: 1c:06:28:5d:ad:83:06:56:0b:1e:8f:3a:8a:92:03: 81:39:9d:cf:0e:8b:76:72:c6:33:83:f1:78:36:05: 8a:57:6b:8f:f0:40:1e:34:e2:f9:41:f8:58:00:5e: 6e:5f:af:49:31:a6:80:eb:27:2a:d0:71:41:e8:6d: 33:f5:17:c9:0d:ba:c6:a3:fd:1c:68:63:e7:66:f1: 75:02:79:12:c6:3b:44:75:27:93:e4:3e:ff:e3:d4: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7A:67:52:4D:7B:EB:34:F3:AA:80:24:9C:03:8A:0D:5B:B4:B8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38701d7a-0954-365d-a8a5-18929448cc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.80.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f1:92:c7:81:22:17:ea:ec:1d:45:af:fc:3b:67:a6:9e:02: 2f:3f:9f:21:7f:71:14:3a:0d:67:3e:f8:59:03:96:5f:51:04: 7f:7f:d5:11:25:76:00:b4:4f:74:92:b3:4b:2f:90:b5:a7:28: 95:3d:cf:8b:f5:a2:bf:20:3b:5b:b9:b8:57:46:a8:12:a6:bb: a6:b2:0f:6d:c8:b4:ce:60:d7:0a:13:9a:47:fc:d0:79:d4:81: 3d:c9:63:94:2f:8f:39:e8:fc:5c:6d:3e:38:29:cd:53:b2:2f: 3a:af:0c:96:fb:1a:6f:2b:8d:7a:36:03:20:4f:7c:c3:6f:14: 3c:5c:c6:90:84:ca:09:fe:a3:29:57:37:bf:40:c5:64:c1:3a: a1:dd:f5:bf:e0:c8:bd:0a:06:f7:b5:a2:c5:98:ce:36:69:6b: 6a:83:0c:e9:8b:85:2c:0f:98:ce:c0:bf:66:61:4a:c7:51:e1: fa:7d:e3:02:6b:25:6e:dc:fd:b8:c3:41:be:89:76:21:37:bf: 76:50:14:dd:54:b6:d2:ec:6c:78:7c:46:f0:cb:c3:bf:d0:13: 11:44:d6:85:ed:cc:6c:b8:48:5c:0e:a0:14:95:a4:aa:74:3e: be:8c:99:15:c2:0d:20:b5:1a:db:fc:7a:bb:33:7a:b3:3f:cd: c4:5b:be:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3I765TUvqBtgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MjliODRlMTMtMzRkMi00ZTZkLWFmN2YtMzEwMDcyMmZlZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve1yiHV+pMkdB9NQqGKgztgGEstPVgCSg5IN FVHoqOqRcnv55zZ6o6cAyC56bPbldJMx5Qg3c2gws/2KWZ6z0kf+X0p2WjWGIQmo In96X8y6/0b/tGt3mCnub/haQIIy4BIdH9Ar0uIvrp4gfHJS2nRetWB22P6nEkGr OQ0QOOIRZkoY5xoWxQRdlmJoJObWpFSrsda7+oAHcFygIpenEOPd1pMcBihdrYMG VgsejzqKkgOBOZ3PDot2csYzg/F4NgWKV2uP8EAeNOL5QfhYAF5uX69JMaaA6ycq 0HFB6G0z9RfJDbrGo/0caGPnZvF1AnkSxjtEdSeT5D7/49QtlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd6Z1JNe+s086qAJJwDig1btLiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzg3MDFkN2EtMDk1NC0z NjVkLWE4YTUtMTg5Mjk0NDhjYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPxkseBIhfq7B1Fr/w7Z6aeAi8/nyF/cRQ6DWc++FkDll9RBH9/1REl dgC0T3SSs0svkLWnKJU9z4v1or8gO1u5uFdGqBKmu6ayD23ItM5g1woTmkf80HnU gT3JY5Qvjzno/FxtPjgpzVOyLzqvDJb7Gm8rjXo2AyBPfMNvFDxcxpCEygn+oylX N79AxWTBOqHd9b/gyL0KBve1osWYzjZpa2qDDOmLhSwPmM7Av2ZhSsdR4fp94wJr JW7c/bjDQb6JdiE3v3ZQFN1UttLsbHh8RvDLw7/QExFE1oXtzGy4SFwOoBSVpKp0 Pr6MmRXCDSC1Gtv8erszerM/zcRbvgQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:45 2025 by rpki-client