$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4296c95d-de0d-3234-906a-3137e6ae561d.roa File: 4296c95d-de0d-3234-906a-3137e6ae561d.roa (raw, json) Hash identifier: JSKrFjCmdXOutWQxDTVSvQvPyK+MscyMeAqHqk1Z6W8= Subject key identifier: 87:99:AF:FC:43:D1:3B:75:64:F0:BB:6C:1A:3A:40:BF:8E:7A:10:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976ABF093ED9D9D3EDC080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4296c95d-de0d-3234-906a-3137e6ae561d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.98.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6a:bf:09:3e:d9:d9:d3:ed:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=e8826ddb-e940-4954-afa7-b7ba2b78bfa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:03:be:ca:0f:f1:af:8f:c2:7a:67:8c:57:eb: 80:a5:0d:4b:2b:53:e1:23:52:db:be:cc:0b:0d:77: 01:21:d9:04:a6:c3:2c:a4:c5:fa:84:55:0e:ae:e9: 8b:38:be:05:9d:d7:3b:6b:ca:6e:32:c1:36:29:48: 46:54:31:da:62:74:33:55:e4:15:b4:5e:6b:5a:19: 97:40:d8:83:3a:cb:64:c5:c2:54:d3:62:85:c8:92: cd:f4:49:c9:c2:15:4f:65:4d:ce:ff:36:07:b2:70: 3e:0e:4c:17:a4:f6:16:63:8c:a0:bd:39:93:6e:8e: 38:85:1c:99:3b:bc:aa:a8:7b:9f:2b:f5:5e:1d:97: 66:09:1f:00:e7:ab:54:bc:ae:64:a0:71:da:f6:54: 04:cf:af:4a:4d:3f:ef:bb:be:22:23:cc:5a:88:5d: 46:b3:1b:40:97:c4:59:d9:29:6c:b8:ad:9a:7a:a4: c8:99:fa:35:5b:59:ab:38:3e:12:b6:ef:1d:b1:9f: b6:21:ae:77:68:30:4b:22:07:e7:04:4f:12:5c:94: ab:fe:98:fc:bc:b8:c2:ff:dd:0e:f6:8c:52:ac:58: 12:12:b3:2d:4e:97:3f:7a:c5:65:0a:65:59:c7:29: 34:b7:9f:fc:5c:ae:e8:41:18:9a:d4:04:fd:a6:a9: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:99:AF:FC:43:D1:3B:75:64:F0:BB:6C:1A:3A:40:BF:8E:7A:10:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4296c95d-de0d-3234-906a-3137e6ae561d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d4:12:c6:91:89:0e:2d:79:a8:92:44:be:16:4e:6d:17:a7: 5c:3e:13:45:a5:a6:35:13:9e:57:42:42:9c:cd:f3:ad:6d:03: 90:fe:bf:4b:1a:ac:db:fd:c1:84:02:1e:d3:ec:50:88:a6:e4: 75:2f:0c:b3:90:92:dd:ad:e2:d8:51:ff:55:05:ab:35:ff:04: 02:49:73:1d:35:e9:4e:56:f4:0b:5b:05:2e:e6:55:de:a1:3f: 26:d0:85:9c:66:ba:d4:66:43:4e:5d:3e:53:65:04:99:da:dd: f8:f4:06:cd:66:83:14:d4:ca:15:c4:2e:e4:ec:ca:7e:0d:18: 75:76:a0:71:dc:12:f2:1f:05:1d:02:db:17:44:2e:db:89:53: d9:a4:17:de:94:53:b3:f5:1f:b1:ab:8f:54:4c:ad:34:00:cd: c1:aa:9f:fb:96:d3:76:a8:5f:cd:b2:bb:12:09:22:bf:8c:b1: 1d:24:fe:28:23:81:2d:06:23:83:b6:fa:41:3e:37:99:ea:3b: d7:68:55:f9:1c:b7:ee:da:89:a0:a4:fb:67:14:e1:5f:e2:5e: 3f:69:fc:3e:ac:13:7d:0a:27:24:94:43:1e:60:99:99:6d:ab: 39:45:d8:66:6c:d6:21:68:ad:ee:38:bc:6d:e3:66:de:50:8c: f3:7d:5f:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2q/CT7Z2dPtwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTg4MjZkZGItZTk0MC00OTU0LWFmYTctYjdiYTJiNzhiZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAO+yg/xr4/CemeMV+uApQ1LK1PhI1LbvswL DXcBIdkEpsMspMX6hFUOrumLOL4Fndc7a8puMsE2KUhGVDHaYnQzVeQVtF5rWhmX QNiDOstkxcJU02KFyJLN9EnJwhVPZU3O/zYHsnA+DkwXpPYWY4ygvTmTbo44hRyZ O7yqqHufK/VeHZdmCR8A56tUvK5koHHa9lQEz69KTT/vu74iI8xaiF1GsxtAl8RZ 2SlsuK2aeqTImfo1W1mrOD4Stu8dsZ+2Ia53aDBLIgfnBE8SXJSr/pj8vLjC/90O 9oxSrFgSErMtTpc/esVlCmVZxyk0t5/8XK7oQRia1AT9pqkKuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeZr/xD0Tt1ZPC7bBo6QL+OehCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDI5NmM5NWQtZGUwZC0z MjM0LTkwNmEtMzEzN2U2YWU1NjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzUEsaRiQ4teaiSRL4WTm0Xp1w+E0WlpjUTnldCQpzN861tA5D+v0sa rNv9wYQCHtPsUIim5HUvDLOQkt2t4thR/1UFqzX/BAJJcx016U5W9AtbBS7mVd6h PybQhZxmutRmQ05dPlNlBJna3fj0Bs1mgxTUyhXELuTsyn4NGHV2oHHcEvIfBR0C 2xdELtuJU9mkF96UU7P1H7Grj1RMrTQAzcGqn/uW03aoX82yuxIJIr+MsR0k/igj gS0GI4O2+kE+N5nqO9doVfkct+7aiaCk+2cU4V/iXj9p/D6sE30KJySUQx5gmZlt qzlF2GZs1iFore44vG3jZt5QjPN9X30= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:51 2025 by rpki-client