$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3967954a-7f15-3ffa-ab5b-a9a0a4660120.roa File: 3967954a-7f15-3ffa-ab5b-a9a0a4660120.roa (raw, json) Hash identifier: 0dJXZ89H20cnYJHcYdwzgQ/aZczVHPF2qP7zx6RqpEE= Subject key identifier: A4:02:1F:E4:9F:33:E9:75:FF:59:57:DE:49:02:2D:52:F8:8B:CC:E0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976E2D432D7FFC568D7A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3967954a-7f15-3ffa-ab5b-a9a0a4660120.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 34.98.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6e:2d:43:2d:7f:fc:56:8d:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=56fe62bb-abac-4a6a-b715-9be63e17f306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:2d:dd:f8:db:53:04:42:7b:96:2d:86:2a: 96:28:a5:9a:e9:bb:af:b1:64:6d:ca:f1:e2:ba:5f: a2:4e:da:8a:a8:3e:68:f7:87:ec:4f:8a:58:e5:5c: dc:3f:bc:f9:3a:50:6a:52:1e:83:92:1f:c1:a5:81: 14:bc:75:60:f7:8b:ce:69:0c:d5:14:98:66:02:64: be:8d:38:d8:ed:c3:16:56:ed:6f:42:97:67:5f:04: 40:57:53:2c:9d:56:33:10:00:ae:b0:c8:b4:8e:67: ff:bc:75:89:07:63:83:2b:bc:23:85:b4:36:32:1d: fa:2d:6a:ea:2c:58:7e:20:39:cb:aa:c0:0b:8c:b4: 9f:aa:89:cc:98:c2:cc:80:d9:0c:82:77:7a:47:53: 3d:24:d0:80:ec:c0:a3:d2:48:99:1b:f0:31:a1:4e: 78:21:6c:b8:2d:b9:55:3a:f9:c5:e1:71:be:f6:27: 80:3b:22:26:7b:96:b4:a8:3a:14:05:fd:1e:ce:ca: 3a:8a:58:3f:9d:a3:de:c7:82:0c:27:bb:ba:f4:b2: 8b:38:eb:f7:0a:65:8c:59:07:55:08:c2:55:c5:67: 26:03:d1:59:3c:71:97:02:3b:b4:c7:2d:5e:cd:2b: 69:6c:d9:cb:45:01:56:19:06:f9:b3:1f:93:8e:29: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:02:1F:E4:9F:33:E9:75:FF:59:57:DE:49:02:2D:52:F8:8B:CC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3967954a-7f15-3ffa-ab5b-a9a0a4660120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0c:47:4e:11:0e:d6:88:61:c4:b9:e0:92:aa:f2:f5:ee:f6: 6d:0a:0a:2b:85:a2:84:23:fb:60:3c:22:a3:c6:40:21:10:a2: c6:f9:1b:a5:7e:07:78:c0:b1:e4:93:0d:79:2c:fd:e4:36:30: 2b:d0:6a:86:d5:a9:21:65:65:20:9e:17:a2:a2:5e:e3:79:35: 21:c5:1b:d5:26:39:2f:ea:91:ff:7d:f2:b8:ba:fa:eb:6a:1b: fd:cf:3f:df:e2:c2:d3:47:58:2e:b8:7c:33:67:69:9d:a5:3f: c9:0f:1b:96:8b:d3:a3:87:14:e1:aa:0f:05:01:8e:f5:2d:29: 6f:12:82:5f:f1:99:9d:dc:3a:98:1f:20:7e:3e:41:eb:0d:f2: e6:13:23:41:fb:83:7c:28:0f:13:eb:10:b9:3a:58:09:8f:6c: 21:33:84:ec:58:21:10:03:20:2a:a9:06:1f:5f:fb:63:b9:e6: 23:9b:e8:f2:5c:c7:8c:2b:83:78:65:e7:2a:b3:08:72:f5:c3: 50:47:f2:ff:b2:cd:f5:ca:f3:86:47:01:ea:f4:d8:79:24:58: 10:43:ee:3b:73:53:f7:95:6d:1a:21:dc:fc:2d:06:9e:25:8b: d2:bc:f0:ee:52:0e:6a:fc:4f:37:61:e7:c2:5b:8c:86:a0:a7: 65:c4:89:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl24tQy1//FaNegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTZmZTYyYmItYWJhYy00YTZhLWI3MTUtOWJlNjNlMTdmMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hct3fjbUwRCe5YthiqWKKWa6buvsWRtyvHi ul+iTtqKqD5o94fsT4pY5VzcP7z5OlBqUh6Dkh/BpYEUvHVg94vOaQzVFJhmAmS+ jTjY7cMWVu1vQpdnXwRAV1MsnVYzEACusMi0jmf/vHWJB2ODK7wjhbQ2Mh36LWrq LFh+IDnLqsALjLSfqonMmMLMgNkMgnd6R1M9JNCA7MCj0kiZG/AxoU54IWy4LblV OvnF4XG+9ieAOyIme5a0qDoUBf0ezso6ilg/naPex4IMJ7u69LKLOOv3CmWMWQdV CMJVxWcmA9FZPHGXAju0xy1ezStpbNnLRQFWGQb5sx+Tjimj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQCH+SfM+l1/1lX3kkCLVL4i8zgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzk2Nzk1NGEtN2YxNS0z ZmZhLWFiNWItYTlhMGE0NjYwMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImKTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsMR04RDtaIYcS54JKq8vXu9m0KCiuFooQj+2A8IqPGQCEQosb5G6V+ B3jAseSTDXks/eQ2MCvQaobVqSFlZSCeF6KiXuN5NSHFG9UmOS/qkf998ri6+utq G/3PP9/iwtNHWC64fDNnaZ2lP8kPG5aL06OHFOGqDwUBjvUtKW8Sgl/xmZ3cOpgf IH4+QesN8uYTI0H7g3woDxPrELk6WAmPbCEzhOxYIRADICqpBh9f+2O55iOb6PJc x4wrg3hl5yqzCHL1w1BH8v+yzfXK84ZHAer02HkkWBBD7jtzU/eVbRoh3PwtBp4l i9K88O5SDmr8Tzdh58JbjIagp2XEiSs= -----END CERTIFICATE-----Generated at Sun Oct 19 23:53:19 2025 by rpki-client