$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39234e75-2c67-3cb9-83c5-807a3839b45f.roa File: 39234e75-2c67-3cb9-83c5-807a3839b45f.roa (raw, json) Hash identifier: DBBq6CpDpPhUFsLB76UW9NmzFLqoOgvbXEpRX5vPDxw= Subject key identifier: 69:42:7A:D8:5D:57:59:8B:B6:B8:21:16:03:AD:5A:15:BD:75:54:85 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE2DA878BDCA7A5ACCF940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39234e75-2c67-3cb9-83c5-807a3839b45f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.103.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2d:a8:78:bd:ca:7a:5a:cc:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=30f347e2-bc29-4295-b209-bd037333ad0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:85:d6:43:79:e7:08:d4:b2:35:46:42:a1:a8: 6f:62:61:6f:c9:ef:fa:db:9d:da:82:7e:53:dd:43: 7f:f8:ca:6a:34:74:91:67:ad:9a:05:1f:7c:8f:da: fa:af:2f:f7:e0:c5:28:30:dd:f6:c4:2b:d4:6b:dd: 50:c2:37:34:2a:62:bc:d0:7d:be:f6:47:81:9c:65: bb:6e:9b:05:cc:c9:a2:30:b6:88:ed:14:68:55:7f: a8:c5:34:aa:26:85:2a:cb:bd:34:10:48:50:24:5b: ba:f9:db:ae:2a:84:56:49:7e:40:c8:b5:91:f3:f8: d1:1c:b3:b8:ef:d3:ff:56:ba:39:20:42:f4:aa:79: 33:02:6f:58:e8:df:63:0f:a8:24:bc:ae:72:43:da: 5b:8f:ef:8c:69:4d:fe:49:5b:bf:3e:0c:74:f6:3c: 37:60:3b:d6:4b:86:ed:0e:bb:a4:f0:06:07:d9:e3: ba:42:cc:34:d4:34:d9:3f:23:42:a7:4d:ec:61:a6: 4b:66:3a:ba:c6:aa:52:8e:72:7e:ba:6d:9e:cc:25: 82:9d:c6:97:39:31:ae:f1:a8:2b:3b:65:3b:9a:fd: 76:e8:8b:aa:41:3a:e7:d5:23:aa:0d:32:39:58:46: 8d:4c:d7:f6:12:cc:9e:5f:ce:de:77:37:a7:6a:16: cd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:42:7A:D8:5D:57:59:8B:B6:B8:21:16:03:AD:5A:15:BD:75:54:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39234e75-2c67-3cb9-83c5-807a3839b45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.103.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:aa:5d:77:c5:fc:52:96:cc:60:e5:e4:35:97:46:ca:f7:81: 35:c9:45:04:57:67:c1:75:01:2e:dd:31:af:e8:69:63:66:a0: 83:b4:b4:90:a0:0e:30:89:7f:9c:59:d3:50:c4:11:e7:7e:75: 58:7c:ce:4f:17:13:41:a5:71:08:70:9c:c7:ea:ef:e2:58:58: a5:6e:1c:6d:1c:e5:27:64:75:5f:62:9b:9c:35:4d:e4:2c:ea: 5f:ec:9b:19:71:cf:a2:eb:ad:bb:7d:e0:e1:fb:85:86:e1:b7: 9b:51:b8:c4:e7:47:7c:a0:92:bd:04:71:f7:86:b4:3c:9a:e5: 14:df:1f:58:c5:64:a3:96:3e:14:28:d0:9c:b6:e7:6a:f9:61: 4e:24:1d:eb:40:6d:f0:71:1b:e9:13:fb:f6:04:62:96:39:b1: 0a:bf:d3:b8:e5:43:81:a9:b9:a6:cd:86:03:9f:3c:29:ae:bb: 4b:20:d5:68:36:09:53:07:dd:39:d3:a4:19:82:ff:ab:4c:04: 3e:9c:75:6c:f0:47:cb:42:9f:33:24:39:a0:27:9f:58:fe:7c: 66:ca:b4:58:b7:c3:0e:5b:24:69:b0:e3:fc:0b:0a:c7:42:93: 9c:f0:83:77:5e:f0:06:2d:27:ef:c7:92:d7:5f:17:18:81:47: 45:11:21:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzi2oeL3KelrM+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzBmMzQ3ZTItYmMyOS00Mjk1LWIyMDktYmQwMzczMzNhZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4XWQ3nnCNSyNUZCoahvYmFvye/6253agn5T 3UN/+MpqNHSRZ62aBR98j9r6ry/34MUoMN32xCvUa91Qwjc0KmK80H2+9keBnGW7 bpsFzMmiMLaI7RRoVX+oxTSqJoUqy700EEhQJFu6+duuKoRWSX5AyLWR8/jRHLO4 79P/Vro5IEL0qnkzAm9Y6N9jD6gkvK5yQ9pbj++MaU3+SVu/Pgx09jw3YDvWS4bt Druk8AYH2eO6Qsw01DTZPyNCp03sYaZLZjq6xqpSjnJ+um2ezCWCncaXOTGu8agr O2U7mv126IuqQTrn1SOqDTI5WEaNTNf2EsyeX87edzenahbNAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlCethdV1mLtrghFgOtWhW9dVSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzkyMzRlNzUtMmM2Ny0z Y2I5LTgzYzUtODA3YTM4MzliNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGqXXfF/FKWzGDl5DWXRsr3gTXJRQRXZ8F1AS7dMa/oaWNmoIO0tJCg DjCJf5xZ01DEEed+dVh8zk8XE0GlcQhwnMfq7+JYWKVuHG0c5SdkdV9im5w1TeQs 6l/smxlxz6Lrrbt94OH7hYbht5tRuMTnR3ygkr0EcfeGtDya5RTfH1jFZKOWPhQo 0Jy252r5YU4kHetAbfBxG+kT+/YEYpY5sQq/07jlQ4GpuabNhgOfPCmuu0sg1Wg2 CVMH3TnTpBmC/6tMBD6cdWzwR8tCnzMkOaAnn1j+fGbKtFi3ww5bJGmw4/wLCsdC k5zwg3de8AYtJ+/HktdfFxiBR0URIWI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:39 2025 by rpki-client