$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cfff033-59db-3938-b5ba-87082300465d.roa File: 3cfff033-59db-3938-b5ba-87082300465d.roa (raw, json) Hash identifier: W6uyyxk+ZAKwSIQNWeclcNAXD7KnhgxkoPhrlHmL2Lo= Subject key identifier: 2E:CE:CD:25:C1:8D:2E:F1:4B:7E:F0:CD:20:50:8E:AB:3B:EF:3A:9C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67978B80CD8E3F59E27B23C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cfff033-59db-3938-b5ba-87082300465d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.99.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:8b:80:cd:8e:3f:59:e2:7b:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=78fa8373-8d3c-43ec-a136-f62a9d9eb2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:59:6e:6f:04:a5:67:7d:b1:2d:e8:06:8b: 00:83:64:a1:8a:0e:fa:9a:4c:6e:10:7a:4f:43:c6: fb:5b:52:ed:53:13:29:bb:69:14:59:a8:82:c6:50: 5a:e8:28:ef:ff:10:24:e7:46:a6:eb:a3:ad:11:6a: a1:21:0b:98:16:44:43:80:83:87:46:57:bb:cc:b3: 91:de:4b:bb:e0:70:da:12:d0:58:87:aa:47:18:4c: cb:d8:81:cd:16:fe:1c:c6:37:fb:9a:30:0c:b3:1f: 96:1c:31:51:2d:26:28:17:aa:91:08:7f:f3:99:7b: 02:cf:2e:b5:ad:61:38:9d:81:9f:df:6d:90:03:5c: 42:0e:99:92:6d:01:fc:05:a6:f7:8d:db:36:4d:ea: c1:79:5e:8f:1d:e8:b6:28:7c:9a:b7:2e:bc:ee:49: 9a:c4:70:56:fd:2c:41:f8:de:3e:59:01:11:6a:84: ae:4e:a3:e4:fb:b7:ba:8f:d7:c7:0b:06:cd:9c:52: 5e:00:2f:60:43:3a:b4:2d:63:ec:8d:c5:8f:f3:64: 92:49:df:0b:b9:22:b4:72:7c:ae:6f:ec:f8:f5:75: 1b:ea:c0:51:ae:9f:d3:70:54:8c:79:64:69:82:9f: 88:3d:25:d1:e1:35:c4:86:c5:de:e9:2f:83:4a:d2: d7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CE:CD:25:C1:8D:2E:F1:4B:7E:F0:CD:20:50:8E:AB:3B:EF:3A:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cfff033-59db-3938-b5ba-87082300465d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:0a:c6:2f:e4:15:63:88:51:85:6b:89:f3:9d:f1:f7:60:7e: 03:2d:ad:b6:f0:d6:b1:90:84:41:7d:e5:bc:ab:a7:f7:00:8b: eb:fd:7a:c3:d8:25:6a:c9:c2:c5:e8:ee:8a:f6:24:4a:3e:c5: 91:35:94:bd:15:3b:12:c5:4b:50:4e:db:fe:30:65:a3:29:c3: 5f:bc:27:cd:11:e8:47:8d:4f:c6:48:e9:5d:cd:86:a3:0e:d6: 7c:32:4d:2a:91:24:53:35:8b:3a:c3:3a:50:9b:27:12:35:14: 0d:93:34:d6:fa:28:fa:54:f1:bd:cb:55:46:54:a5:e6:1a:9c: e0:6e:db:d2:69:2d:03:1e:8e:cc:e1:4a:4b:51:b5:f3:69:b8: 4e:f9:c1:6a:79:b5:97:47:67:7b:0d:b7:de:24:98:71:e7:33: 42:ef:7d:8e:1a:65:2d:08:ee:42:90:a4:88:45:71:d1:94:95: 39:c4:57:78:32:aa:3d:f7:29:02:0a:fc:4f:d3:6c:e8:ee:68: 66:27:eb:e6:4c:a6:91:02:e1:ef:27:05:29:56:4c:16:f5:03: b3:e8:82:16:59:44:8f:59:bb:47:d1:f3:0f:b4:ca:7f:25:c5: dd:39:51:4e:02:c8:ef:8f:4b:08:9e:cc:e6:0a:81:c3:5d:17: 8d:08:c1:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4uAzY4/WeJ7I8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzhmYTgzNzMtOGQzYy00M2VjLWExMzYtZjYyYTlkOWViMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxupZbm8EpWd9sS3oBosAg2Shig76mkxuEHpP Q8b7W1LtUxMpu2kUWaiCxlBa6Cjv/xAk50am66OtEWqhIQuYFkRDgIOHRle7zLOR 3ku74HDaEtBYh6pHGEzL2IHNFv4cxjf7mjAMsx+WHDFRLSYoF6qRCH/zmXsCzy61 rWE4nYGf322QA1xCDpmSbQH8Bab3jds2TerBeV6PHei2KHyaty687kmaxHBW/SxB +N4+WQERaoSuTqPk+7e6j9fHCwbNnFJeAC9gQzq0LWPsjcWP82SSSd8LuSK0cnyu b+z49XUb6sBRrp/TcFSMeWRpgp+IPSXR4TXEhsXe6S+DStLXJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7OzSXBjS7xS37wzSBQjqs77zqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NmZmYwMzMtNTlkYi0z OTM4LWI1YmEtODcwODIzMDA0NjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8Kxi/kFWOIUYVrifOd8fdgfgMtrbbw1rGQhEF95byrp/cAi+v9esPY JWrJwsXo7or2JEo+xZE1lL0VOxLFS1BO2/4wZaMpw1+8J80R6EeNT8ZI6V3NhqMO 1nwyTSqRJFM1izrDOlCbJxI1FA2TNNb6KPpU8b3LVUZUpeYanOBu29JpLQMejszh SktRtfNpuE75wWp5tZdHZ3sNt94kmHHnM0LvfY4aZS0I7kKQpIhFcdGUlTnEV3gy qj33KQIK/E/TbOjuaGYn6+ZMppEC4e8nBSlWTBb1A7PoghZZRI9Zu0fR8w+0yn8l xd05UU4CyO+PSwiezOYKgcNdF40IwUg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:34:50 2025 by rpki-client