$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa File: 437990a1-2118-3c10-876c-e7495090df33.roa (raw, json) Hash identifier: 1P8SQDvwkkEswIlzTp6xXfz1En1gNIaFYbgVB61PBHQ= Subject key identifier: 77:A7:5C:79:51:B2:C8:F9:7A:A2:A5:A9:C0:36:C9:D8:6E:20:49:1B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976CCF0C7C675017EAC440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.143.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6c:cf:0c:7c:67:50:17:ea:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=955bc83e-c4ee-4152-9bbd-1ea843028c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:c6:8c:6c:d6:f2:4d:a7:1b:ee:08:93:c4: 9b:3d:a4:d0:16:7d:ec:31:c2:d7:b1:55:58:6e:96: a6:73:4e:91:ef:8b:fe:a8:0f:bd:a4:96:ac:12:2a: 93:f2:53:b6:d4:1c:e5:35:71:cd:93:48:7d:7f:17: 77:7e:d9:91:80:d6:df:71:43:0e:2d:80:d4:63:9e: e3:8a:4b:41:88:61:f9:5b:63:ad:35:6d:7f:62:7c: 72:1a:8f:47:cf:11:fc:3b:34:eb:cc:8f:4b:a4:55: 20:ca:d2:46:e4:ec:1e:69:85:d6:82:38:94:85:e0: 09:2b:b5:31:f0:08:14:53:0d:e7:66:5a:5a:1e:23: de:31:8e:a1:4a:8a:62:31:ab:7d:0d:25:0a:0b:18: 2f:bc:d2:ab:dc:4a:47:63:70:e1:52:43:ea:83:d3: 6f:72:1a:9d:fa:72:7e:9e:d5:f8:79:19:4a:8f:3f: ce:0c:0d:60:fa:0e:96:2d:3b:ea:55:1e:61:b9:cc: a7:60:b5:d3:6e:d9:c2:7b:f4:d8:78:05:e0:3c:07: ca:86:64:f2:e5:e5:11:ab:ac:ed:f6:09:60:1e:35: b0:e4:09:e0:3e:92:16:ee:ae:a3:7f:35:31:20:f4: 6a:3b:85:4f:8b:a5:68:71:3d:c5:79:04:fe:e1:01: cf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A7:5C:79:51:B2:C8:F9:7A:A2:A5:A9:C0:36:C9:D8:6E:20:49:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.143.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:01:36:a2:f1:16:ab:a5:5e:0a:1c:57:47:58:72:dd:86:18: 49:eb:c8:c3:3e:a7:7a:0b:05:f5:2c:37:32:da:df:fe:6c:3d: 74:ce:77:c7:18:0c:90:a3:19:0c:ff:fe:ee:b5:4b:4f:55:95: 6f:a4:c9:b8:46:8b:2b:dc:9f:84:1c:51:70:fe:dd:17:80:d2: 82:fe:52:7c:c2:98:9f:ed:d2:96:e8:07:75:8f:44:8c:1b:ef: 16:b3:14:1c:35:dd:50:a5:7a:70:86:02:da:06:c4:4c:51:10: 8a:ef:a5:9c:26:ae:e4:6d:ac:92:18:01:ec:45:78:48:5d:76: 1d:44:b6:0e:74:40:ba:af:d8:14:f3:ab:a9:be:ac:bd:df:2c: 9c:89:77:69:17:25:71:d3:a0:83:fc:b0:e6:54:ea:d3:13:f4: f5:c5:fe:72:a6:7c:60:a4:26:5d:65:36:41:0e:46:bc:38:a9: 24:b0:bb:05:c6:7b:c5:7b:27:42:93:4e:48:23:7f:a4:47:19: 39:4a:2c:e7:0a:9e:8c:2f:7f:ea:2a:fd:e8:2b:03:f8:89:06: b8:4b:69:1f:fe:91:31:59:36:aa:17:f5:59:6b:ce:75:af:b2: d9:6f:8e:87:09:7b:63:dc:90:51:ca:53:fd:f5:02:64:2e:94: eb:d4:7b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2zPDHxnUBfqxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OTU1YmM4M2UtYzRlZS00MTUyLTliYmQtMWVhODQzMDI4YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYzGjGzW8k2nG+4Ik8SbPaTQFn3sMcLXsVVY bpamc06R74v+qA+9pJasEiqT8lO21BzlNXHNk0h9fxd3ftmRgNbfcUMOLYDUY57j iktBiGH5W2OtNW1/YnxyGo9HzxH8OzTrzI9LpFUgytJG5OweaYXWgjiUheAJK7Ux 8AgUUw3nZlpaHiPeMY6hSopiMat9DSUKCxgvvNKr3EpHY3DhUkPqg9Nvchqd+nJ+ ntX4eRlKjz/ODA1g+g6WLTvqVR5hucynYLXTbtnCe/TYeAXgPAfKhmTy5eURq6zt 9glgHjWw5AngPpIW7q6jfzUxIPRqO4VPi6VocT3FeQT+4QHPvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHenXHlRssj5eqKlqcA2ydhuIEkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM3OTkwYTEtMjExOC0z YzEwLTg3NmMtZTc0OTUwOTBkZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIo+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4BNqLxFqulXgocV0dYct2GGEnryMM+p3oLBfUsNzLa3/5sPXTOd8cY DJCjGQz//u61S09VlW+kybhGiyvcn4QcUXD+3ReA0oL+UnzCmJ/t0pboB3WPRIwb 7xazFBw13VClenCGAtoGxExREIrvpZwmruRtrJIYAexFeEhddh1Etg50QLqv2BTz q6m+rL3fLJyJd2kXJXHToIP8sOZU6tMT9PXF/nKmfGCkJl1lNkEORrw4qSSwuwXG e8V7J0KTTkgjf6RHGTlKLOcKnowvf+oq/egrA/iJBrhLaR/+kTFZNqoX9VlrznWv stlvjocJe2PckFHKU/31AmQulOvUe40= -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:44 2025 by rpki-client