$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/511b541d-b7ac-358c-9af1-c54b658978f4.roa File: 511b541d-b7ac-358c-9af1-c54b658978f4.roa (raw, json) Hash identifier: ca1MDsqAdvr1er0cT8+YGKHrUxNzCxl9KUEuitLR4lw= Subject key identifier: 08:50:67:4E:19:5D:3A:14:A3:1E:86:A0:7F:C9:F7:F9:60:B5:9E:8E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C1CAABA4EC5CA77EA180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/511b541d-b7ac-358c-9af1-c54b658978f4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.123.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c1:ca:ab:a4:ec:5c:a7:7e:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5ea262b0-fd7f-4fb9-98e0-7f3ec3b397ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:d6:91:a2:c8:6a:a6:20:a6:bd:e8:fd:1d: 2f:fe:31:a9:59:3e:fc:d9:89:ad:dd:a2:0b:e9:b5: 51:31:86:29:fd:09:72:d2:43:f9:11:6e:85:44:fb: 4c:ca:58:a6:28:51:f4:83:95:4a:ae:3e:7f:80:ea: a2:be:21:5f:c7:24:59:b2:b7:e7:75:c9:a4:6e:b3: 95:f4:61:11:e4:bf:46:3c:d4:83:14:a6:d7:55:81: 50:8c:44:1c:fd:7a:0e:a7:cc:d4:f8:5e:b3:c0:2d: c6:97:3f:4f:d0:63:93:b0:13:a4:64:45:46:71:f9: 78:f4:3f:e4:06:c8:2b:0b:cf:e2:2f:2e:8b:85:a2: c5:5c:a9:78:bb:e2:74:d9:14:1f:2e:d7:22:49:06: 44:ca:50:c6:1d:d1:e2:ec:ad:5a:f6:77:66:20:fa: 17:5c:54:20:f9:de:48:f4:a8:c9:93:57:78:88:b9: 6c:83:d0:b4:92:a5:03:f7:94:d6:88:63:a5:a6:17: 73:9c:ea:5f:75:d9:b4:d5:0f:e0:72:f2:a4:ed:92: c3:4e:72:0a:73:8d:00:08:90:8b:17:16:10:60:f3: ab:39:8d:7a:dd:ee:c5:5e:7d:0a:a2:d9:f2:3d:c3: fd:13:a0:be:b4:70:a1:3a:85:06:8e:d0:de:0a:87: 81:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:50:67:4E:19:5D:3A:14:A3:1E:86:A0:7F:C9:F7:F9:60:B5:9E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/511b541d-b7ac-358c-9af1-c54b658978f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9d:a4:89:45:4e:0e:85:ff:61:cb:d7:57:04:08:e4:51:b6: db:93:7d:d8:3b:bf:ca:bb:11:a4:8a:b1:79:27:dc:1c:81:b8: 38:d0:c1:49:3d:d7:6e:72:d4:78:da:9a:86:98:47:4b:f1:14: 55:3b:84:6a:26:92:2c:9b:9c:64:a8:50:c6:06:f6:c6:85:26: 60:00:99:3c:6e:c6:cf:f5:2e:57:b5:2b:c4:7d:d1:1e:97:b7: 9b:a7:55:f1:28:6d:72:34:95:03:f5:ee:99:80:7c:68:db:b9: b2:a5:f5:e7:d2:90:88:c7:0a:38:18:93:84:55:3f:06:7d:b6: 70:51:ce:93:28:40:e6:dd:84:b7:d8:68:14:12:11:e7:9e:2a: c8:4e:18:10:28:2f:d1:2e:7c:c9:1e:b8:5f:1b:89:f6:57:53: d9:9a:43:7f:e9:4c:d9:53:c5:31:a7:09:0f:7d:f9:ef:cc:4f: e5:69:22:8c:d8:fc:8b:52:56:61:b0:d3:49:4f:de:89:87:d0: 2a:af:5e:fe:fa:57:5e:47:59:53:f9:dc:9c:90:17:c4:ae:eb: 1b:3e:50:cf:a4:9e:8d:48:d5:f0:9d:7f:c1:2e:cf:5a:0d:aa: 8c:62:a3:e4:b4:66:7a:93:0b:cd:f4:0d:eb:12:28:fe:be:a8: db:57:05:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8HKq6TsXKd+oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NWVhMjYyYjAtZmQ3Zi00ZmI5LTk4ZTAtN2YzZWMzYjM5N2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzDWkaLIaqYgpr3o/R0v/jGpWT782Ymt3aIL 6bVRMYYp/Qly0kP5EW6FRPtMylimKFH0g5VKrj5/gOqiviFfxyRZsrfndcmkbrOV 9GER5L9GPNSDFKbXVYFQjEQc/XoOp8zU+F6zwC3Glz9P0GOTsBOkZEVGcfl49D/k BsgrC8/iLy6LhaLFXKl4u+J02RQfLtciSQZEylDGHdHi7K1a9ndmIPoXXFQg+d5I 9KjJk1d4iLlsg9C0kqUD95TWiGOlphdznOpfddm01Q/gcvKk7ZLDTnIKc40ACJCL FxYQYPOrOY163e7FXn0KotnyPcP9E6C+tHChOoUGjtDeCoeBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhQZ04ZXToUox6GoH/J9/lgtZ6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTExYjU0MWQtYjdhYy0z NThjLTlhZjEtYzU0YjY1ODk3OGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6dpIlFTg6F/2HL11cECORRttuTfdg7v8q7EaSKsXkn3ByBuDjQwUk9 125y1HjamoaYR0vxFFU7hGomkiybnGSoUMYG9saFJmAAmTxuxs/1Lle1K8R90R6X t5unVfEobXI0lQP17pmAfGjbubKl9efSkIjHCjgYk4RVPwZ9tnBRzpMoQObdhLfY aBQSEeeeKshOGBAoL9EufMkeuF8bifZXU9maQ3/pTNlTxTGnCQ99+e/MT+VpIozY /ItSVmGw00lP3omH0CqvXv76V15HWVP53JyQF8Su6xs+UM+kno1I1fCdf8Euz1oN qoxio+S0ZnqTC830DesSKP6+qNtXBUk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:07 2025 by rpki-client