$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d937925-126e-3d90-8ce9-6dcf10254593.roa File: 3d937925-126e-3d90-8ce9-6dcf10254593.roa (raw, json) Hash identifier: 78y+ijG7zq4IWaTcXLd4gt+mVlcXCRKFFTJn+yr1JIo= Subject key identifier: 2F:22:AD:5C:6F:50:4B:8E:C5:20:0A:F5:E7:41:D7:C0:4B:91:DB:78 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C44121FF1DAF92EEC200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d937925-126e-3d90-8ce9-6dcf10254593.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.124.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c4:41:21:ff:1d:af:92:ee:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=19af055f-577d-495f-ac7e-1afc35732e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:00:da:a3:1c:d9:83:51:78:df:a9:29:66: 28:1a:2b:8f:90:0b:3a:12:2f:b9:53:91:49:f8:1b: 28:07:6a:86:a5:7a:ee:c3:42:5c:1c:89:87:75:81: 32:28:2e:c5:11:ce:6f:30:a1:73:db:88:21:00:d6: c5:cf:1c:7a:90:88:d1:fc:95:43:35:bf:57:d0:5b: d8:5a:47:7e:94:49:b3:0f:3b:24:e2:b3:ce:61:28: 52:69:07:6a:23:12:28:a8:8e:9f:57:d5:bd:6c:47: 3c:92:dd:b4:d7:ca:54:66:f2:59:fc:cb:8f:87:14: fd:16:2b:fe:73:be:8b:ac:ef:e8:54:60:4e:fd:a0: 97:98:bf:28:2e:2d:9c:fe:71:3f:21:75:f2:8f:a1: 9e:dc:af:65:b6:58:ae:37:c8:21:bd:4f:59:ef:e5: 79:66:f4:6c:63:c6:2f:d2:7e:78:3f:c3:86:35:f3: c6:18:06:f4:1d:19:9b:5b:05:f0:cd:8b:db:31:6f: 21:36:9d:29:65:bb:4a:24:a8:25:61:55:95:c6:cb: 66:80:8f:7a:07:3c:82:ef:01:73:ca:b4:32:85:f6: e7:b5:da:2f:6c:84:c0:aa:3c:e0:0a:6b:76:97:b3: 68:a4:3b:3b:c4:6e:29:aa:31:ae:4e:aa:43:45:6c: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:22:AD:5C:6F:50:4B:8E:C5:20:0A:F5:E7:41:D7:C0:4B:91:DB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d937925-126e-3d90-8ce9-6dcf10254593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.124.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b2:6f:6c:ab:fb:55:e0:4d:ff:48:50:6e:de:f1:52:4d:af: 66:a0:5e:fa:c2:bf:b5:2f:ab:8e:82:ed:2d:64:9f:7f:57:4c: e8:fa:99:d1:d9:00:22:67:00:d3:c1:e2:8d:ce:69:6d:45:2c: 22:f9:0e:eb:67:5b:ef:06:82:29:f2:bc:d1:d5:f1:ee:fd:c6: 95:dd:8f:93:05:ae:f6:9d:ce:e5:01:fb:11:03:d7:28:c8:c9: ae:43:6e:c5:2d:f3:6d:96:76:da:e0:4f:92:e8:ec:6a:a7:89: 43:32:f9:3f:6e:cd:32:d2:08:b9:75:de:99:23:54:93:92:5b: ab:f8:f9:fe:f6:ac:a9:69:20:08:03:b3:90:52:01:f4:a0:40: f5:b3:15:15:2d:56:7c:67:28:e2:a4:c2:e7:2b:63:6d:bc:7c: e5:9c:59:d4:f7:38:81:8e:85:23:78:57:27:db:0b:04:0d:60: 6d:b4:cc:52:2c:6e:aa:d6:a9:8a:54:8a:26:18:cc:7c:dd:66: 9d:d0:d9:0a:ff:9e:23:fc:89:1e:ab:80:24:bd:e1:b5:32:12: 2f:61:af:c9:11:fb:64:ff:e1:c3:57:42:7f:5a:3d:a3:4a:e0: 7c:b7:59:8f:56:95:10:f8:84:d1:d9:9d:75:88:13:e8:c3:69: 1b:54:55:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8RBIf8dr5LuwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTlhZjA1NWYtNTc3ZC00OTVmLWFjN2UtMWFmYzM1NzMyZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxUA2qMc2YNReN+pKWYoGiuPkAs6Ei+5U5FJ +BsoB2qGpXruw0JcHImHdYEyKC7FEc5vMKFz24ghANbFzxx6kIjR/JVDNb9X0FvY Wkd+lEmzDzsk4rPOYShSaQdqIxIoqI6fV9W9bEc8kt2018pUZvJZ/MuPhxT9Fiv+ c76LrO/oVGBO/aCXmL8oLi2c/nE/IXXyj6Ge3K9ltliuN8ghvU9Z7+V5ZvRsY8Yv 0n54P8OGNfPGGAb0HRmbWwXwzYvbMW8hNp0pZbtKJKglYVWVxstmgI96BzyC7wFz yrQyhfbntdovbITAqjzgCmt2l7NopDs7xG4pqjGuTqpDRWxLbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8irVxvUEuOxSAK9edB18BLkdt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Q5Mzc5MjUtMTI2ZS0z ZDkwLThjZTktNmRjZjEwMjU0NTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeyb2yr+1XgTf9IUG7e8VJNr2agXvrCv7Uvq46C7S1kn39XTOj6mdHZ ACJnANPB4o3OaW1FLCL5DutnW+8GginyvNHV8e79xpXdj5MFrvadzuUB+xED1yjI ya5DbsUt822WdtrgT5Lo7GqniUMy+T9uzTLSCLl13pkjVJOSW6v4+f72rKlpIAgD s5BSAfSgQPWzFRUtVnxnKOKkwucrY228fOWcWdT3OIGOhSN4VyfbCwQNYG20zFIs bqrWqYpUiiYYzHzdZp3Q2Qr/niP8iR6rgCS94bUyEi9hr8kR+2T/4cNXQn9aPaNK 4Hy3WY9WlRD4hNHZnXWIE+jDaRtUVbM= -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:34 2025 by rpki-client