$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa File: 3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa (raw, json) Hash identifier: ZY5TkySl4beOLtDyTwA4opm9q+M3XhBfuqNwlSfLUBc= Subject key identifier: 5C:DE:AD:D5:0D:3E:1E:28:FA:7F:DE:CB:DE:C7:22:49:AD:3D:ED:0C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797DFBC7FE6F224C0AA7080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.87.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:df:bc:7f:e6:f2:24:c0:aa:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2d659ab5-6de5-44b4-aa46-c6033cc6756a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:ac:58:68:19:19:7a:b5:60:7e:ca:fd:12: 69:d9:24:5c:97:3c:d9:99:d5:f6:74:40:cc:e6:a6: ac:35:15:6a:54:2e:1c:2e:3f:e0:68:ab:02:25:5c: e5:95:0e:e0:1e:4e:e0:c4:b8:08:80:73:a2:36:ca: 62:fa:59:24:b1:b5:09:70:29:83:df:db:39:cd:33: 48:47:87:ec:4f:42:09:75:fd:2a:c5:57:ab:71:2d: 28:47:67:34:b2:36:ba:19:ec:80:88:04:bd:69:65: 8f:e9:55:8a:d4:4b:66:09:cb:f0:90:c8:16:32:71: 85:1d:b1:eb:8c:5f:0b:02:74:53:a7:96:6c:5a:89: 01:e3:a1:a4:5d:cc:00:99:f3:ef:ee:89:d5:24:e1: 50:29:1f:c7:25:c1:86:92:52:b8:97:d3:c4:c9:71: 61:1a:fb:3e:11:07:af:ee:1c:b2:ea:a4:ca:89:87: a9:b8:d6:f5:c7:1c:dd:ca:9d:03:cb:c1:56:72:08: 19:bd:82:d8:0a:90:13:6a:e9:67:07:0a:a4:88:bb: 14:b1:e5:85:a2:ec:ee:be:52:f7:dc:a6:d2:b7:34: 9d:cf:8c:ad:dc:b4:43:bf:1a:44:a9:be:ca:76:02: 1b:19:4f:dc:08:6a:97:56:b3:4d:ea:74:ba:17:a3: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DE:AD:D5:0D:3E:1E:28:FA:7F:DE:CB:DE:C7:22:49:AD:3D:ED:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:28:a5:45:cb:8e:89:8b:11:68:c1:5d:b5:ab:7f:23:dc:63: 0c:35:1f:50:b9:55:c9:19:ab:a0:0c:ee:c1:36:bd:06:2c:a4: de:ff:86:2c:71:cf:47:49:8f:ec:d2:08:b6:5c:1b:72:22:ea: 5f:d1:1c:4a:ba:42:bb:be:a5:f2:44:53:a6:f7:63:73:a1:b2: 11:32:4e:17:ed:a8:64:e0:a3:65:b4:13:d4:cb:2b:08:42:25: 92:a7:20:33:bf:52:49:5f:bc:f2:35:3f:50:ca:6b:ca:2d:ea: b9:67:37:b4:f4:e9:07:af:1e:3b:a5:f8:2c:0d:d5:c0:cd:2d: 50:e3:0f:e7:b2:57:cc:5f:fe:22:78:26:e1:c8:9b:e5:c4:d0: f2:2e:11:7b:4f:8e:00:09:f8:71:e8:c5:14:61:e4:65:32:a8: 39:2d:a7:b6:4a:85:2c:97:59:db:d3:1c:bd:d8:82:7b:f4:a8: be:ca:05:b7:7d:b9:d7:e6:e7:b2:ec:2d:3b:b6:ea:2e:15:77: 28:57:aa:68:b0:37:ce:9d:65:7f:fd:ad:eb:30:29:fc:a7:ac: c0:e3:36:53:1a:dd:5b:c8:09:68:d8:a0:f3:c0:4b:cc:b3:61: 51:a0:1b:45:4c:72:3d:a4:83:03:9d:7e:9c:92:40:ba:11:cc: 71:02:fc:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9+8f+byJMCqcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmQ2NTlhYjUtNmRlNS00NGI0LWFhNDYtYzYwMzNjYzY3NTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycSsWGgZGXq1YH7K/RJp2SRclzzZmdX2dEDM 5qasNRVqVC4cLj/gaKsCJVzllQ7gHk7gxLgIgHOiNspi+lkksbUJcCmD39s5zTNI R4fsT0IJdf0qxVercS0oR2c0sja6GeyAiAS9aWWP6VWK1EtmCcvwkMgWMnGFHbHr jF8LAnRTp5ZsWokB46GkXcwAmfPv7onVJOFQKR/HJcGGklK4l9PEyXFhGvs+EQev 7hyy6qTKiYepuNb1xxzdyp0Dy8FWcggZvYLYCpATaulnBwqkiLsUseWFouzuvlL3 3KbStzSdz4yt3LRDvxpEqb7KdgIbGU/cCGqXVrNN6nS6F6PIVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzerdUNPh4o+n/ey97HIkmtPe0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JhOWVjOTYtMGUyNC0z NTMyLWJiZjAtOTg2YzhlZjIwMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIopUXLjomLEWjBXbWrfyPcYww1H1C5VckZq6AM7sE2vQYspN7/hixx z0dJj+zSCLZcG3Ii6l/RHEq6Qru+pfJEU6b3Y3OhshEyThftqGTgo2W0E9TLKwhC JZKnIDO/UklfvPI1P1DKa8ot6rlnN7T06QevHjul+CwN1cDNLVDjD+eyV8xf/iJ4 JuHIm+XE0PIuEXtPjgAJ+HHoxRRh5GUyqDktp7ZKhSyXWdvTHL3Ygnv0qL7KBbd9 udfm57LsLTu26i4VdyhXqmiwN86dZX/9reswKfynrMDjNlMa3VvICWjYoPPAS8yz YVGgG0VMcj2kgwOdfpySQLoRzHEC/N0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:41:10 2025 by rpki-client