$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa File: 3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa (raw, json) Hash identifier: 5wG/3P0mGkmu2t6ToVTbk/gFz2KGJHLbcoABL7PfQLI= Subject key identifier: 81:D4:33:5E:79:F0:A3:AC:43:CC:A5:E8:76:43:9C:24:ED:D7:C0:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679769D679ED4E08C1A8F080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.70.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:69:d6:79:ed:4e:08:c1:a8:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a1e53f43-9bd5-49ab-88e6-f84dc5b39876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:05:9d:f6:58:a2:49:67:e8:b3:22:4a:92: 54:cd:5e:2c:87:b6:a4:59:bf:0e:07:d0:0f:94:98: ae:9b:e6:60:11:de:2c:a7:b1:c0:86:b1:bc:fb:98: ba:49:6d:ee:72:6a:bb:e7:37:7d:47:af:ad:ca:9e: d8:72:92:de:49:47:d5:ed:61:0e:b5:43:ff:75:0f: 8d:24:9c:59:60:aa:c2:94:ee:0f:db:07:08:cc:9c: 91:8a:f7:b0:a4:69:bf:25:59:38:d9:97:3d:89:af: 93:cd:1c:5d:4a:39:49:86:8d:a1:e9:d0:47:ea:2f: 0e:cc:bb:ed:bc:50:bd:94:be:8c:79:3d:99:b9:83: ac:1d:ed:3d:7f:a8:d9:96:f1:44:f9:63:f4:c7:29: 73:e2:67:8a:92:64:2d:9e:db:54:24:20:5d:4d:ac: 1b:80:b0:52:76:b4:d0:5e:e0:83:3d:d3:53:70:d4: 03:67:16:d4:42:fc:1c:86:4c:22:55:58:6a:77:40: 05:36:97:df:b2:41:fa:f2:79:b8:43:b5:fa:bf:d8: b9:f0:93:c0:0a:8c:89:28:85:99:58:f1:46:5a:42: 25:cb:2d:63:35:8e:65:c2:6c:8b:fe:31:50:af:22: f1:36:6c:87:4e:ab:52:11:8d:82:c3:18:7f:ec:d5: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D4:33:5E:79:F0:A3:AC:43:CC:A5:E8:76:43:9C:24:ED:D7:C0:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d9:de:88:eb:6e:f3:56:f9:f8:3a:4c:02:a8:3d:60:7c:9c: 10:01:b5:c4:fd:67:ea:a9:b9:75:91:25:c4:ea:8a:9e:15:2f: 50:f4:22:7f:ed:81:48:3f:a9:7b:7b:98:62:38:28:27:eb:ba: 49:52:cc:d0:ba:20:94:bc:0d:55:ee:00:de:04:48:ef:06:f7: bb:9b:15:49:41:be:cf:23:be:7c:39:5a:b7:f3:d4:88:01:0f: b5:40:ef:e0:4e:a3:8d:c2:c5:1a:e4:5b:60:0e:f8:4c:5e:ae: a1:e9:31:17:85:ab:7e:b0:f3:41:d3:ab:68:67:a8:2d:33:b0: c8:ef:62:3a:e2:9f:d2:1c:8a:c3:fc:a2:ba:55:c4:fe:7a:d2: 53:88:e8:2f:04:b4:d4:a6:9f:9c:b0:46:9c:d3:a1:ae:12:93: d9:bc:ff:33:10:65:80:8c:0c:2c:02:34:cf:60:ca:d9:50:2e: 8f:a7:92:b2:41:e5:2f:a0:be:57:88:28:e5:56:cd:fd:d2:aa: c1:14:ac:9b:ac:9c:c7:93:51:58:9b:db:27:46:4f:aa:0a:b2: 42:8c:90:27:e3:e6:11:59:79:45:c5:73:93:1e:86:3c:f1:3a: 31:db:f3:85:44:d0:52:2c:e3:77:35:c9:77:06:57:f1:e5:97: 47:a8:8e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2nWee1OCMGo8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTFlNTNmNDMtOWJkNS00OWFiLTg4ZTYtZjg0ZGM1YjM5ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMkFnfZYokln6LMiSpJUzV4sh7akWb8OB9AP lJium+ZgEd4sp7HAhrG8+5i6SW3ucmq75zd9R6+typ7YcpLeSUfV7WEOtUP/dQ+N JJxZYKrClO4P2wcIzJyRivewpGm/JVk42Zc9ia+TzRxdSjlJho2h6dBH6i8OzLvt vFC9lL6MeT2ZuYOsHe09f6jZlvFE+WP0xylz4meKkmQtnttUJCBdTawbgLBSdrTQ XuCDPdNTcNQDZxbUQvwchkwiVVhqd0AFNpffskH68nm4Q7X6v9i58JPACoyJKIWZ WPFGWkIlyy1jNY5lwmyL/jFQryLxNmyHTqtSEY2Cwxh/7NXSnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHUM1558KOsQ8yl6HZDnCTt18CHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NhOGJjN2QtZTEyNC0z MGM5LWI5NjUtOGUxMmNkOTRlNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7Z3ojrbvNW+fg6TAKoPWB8nBABtcT9Z+qpuXWRJcTqip4VL1D0In/t gUg/qXt7mGI4KCfruklSzNC6IJS8DVXuAN4ESO8G97ubFUlBvs8jvnw5Wrfz1IgB D7VA7+BOo43CxRrkW2AO+ExerqHpMReFq36w80HTq2hnqC0zsMjvYjrin9IcisP8 orpVxP560lOI6C8EtNSmn5ywRpzToa4Sk9m8/zMQZYCMDCwCNM9gytlQLo+nkrJB 5S+gvleIKOVWzf3SqsEUrJusnMeTUVib2ydGT6oKskKMkCfj5hFZeUXFc5Mehjzx OjHb84VE0FIs43c1yXcGV/Hll0eojpE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:00:37 2025 by rpki-client