$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa File: 5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa (raw, json) Hash identifier: fLwzqsPT2Dr/eyKRdIwAfrT4WL8pACWxCAsaSSQYt/s= Subject key identifier: 34:EE:CB:BD:A3:A6:F0:F8:09:A2:5F:D3:BA:20:BD:74:34:0D:1C:1A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B40AFC5CD0D577B7400C2E000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa Signing time: Sat 20 Sep 2025 02:33:36 +0000 ROA not before: Sat 20 Sep 2025 02:33:36 +0000 ROA not after: Fri 19 Dec 2025 03:33:36 +0000 asID: 11344 IP address blocks: 34.152.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:af:c5:cd:0d:57:7b:74:00:c2:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 20 02:33:36 2025 GMT Not After : Dec 19 03:33:36 2025 GMT Subject: CN=965eab57-1c9e-4551-842d-03bb7388a45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7d:e4:34:b5:a1:60:a0:97:66:9a:07:98:0b: e5:07:f4:4c:79:19:b1:c3:38:96:27:9a:27:93:6e: a2:86:7c:6d:3a:03:2a:6e:05:74:97:d8:c5:9f:11: d4:b1:2b:f6:74:8a:17:e4:8c:57:d1:75:94:45:55: a1:fc:33:80:8d:5b:af:79:e6:ea:39:12:21:20:5b: 80:70:81:ca:de:63:a8:19:03:33:c3:78:43:a3:a6: 8c:22:79:1b:37:7b:c3:48:12:0f:09:8e:79:b2:3c: be:18:0b:a5:8e:ac:b9:18:60:d2:ef:15:60:77:95: a1:67:6c:bd:3c:32:8d:e1:f0:29:e1:04:1e:19:82: f6:d5:85:20:51:f6:05:a0:a7:5d:84:8e:99:ab:6c: 16:50:ec:a5:79:2c:9f:a1:db:98:db:da:7b:20:21: 0e:d2:85:6f:e5:ea:9f:16:67:81:94:49:b4:38:1b: c0:77:1b:ff:5c:7a:f8:6e:d8:1f:29:f6:e9:a7:db: 3c:fe:a5:c1:35:bd:98:a3:32:92:4c:b7:76:75:84: a8:e3:cb:0b:07:7c:52:48:67:3b:93:d1:64:7d:42: c8:b2:e0:0b:a6:49:0f:bb:cf:5e:50:92:6e:96:5b: db:b4:ae:04:c9:a9:26:10:a8:45:a9:b0:33:9c:e7: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EE:CB:BD:A3:A6:F0:F8:09:A2:5F:D3:BA:20:BD:74:34:0D:1C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b3:d7:e1:de:e9:c4:3b:3c:16:31:6e:09:f1:a1:28:f1:9b: 3c:bb:70:11:da:55:0d:2d:93:9a:42:68:a4:2a:06:db:20:92: 7d:a6:43:8a:47:51:05:c1:92:13:3c:21:28:0a:36:a6:a9:1e: bd:bc:f5:d7:df:41:5a:3e:c7:5b:a9:1d:83:aa:77:8c:79:1f: a9:1d:66:04:8c:6c:66:99:3b:77:32:66:a4:10:a6:ed:0e:fe: 50:ca:a4:9b:58:4a:37:35:c2:6d:a2:04:21:76:97:54:9d:a9: ea:eb:71:c4:e8:f0:ff:0a:30:c2:90:ac:f8:34:b9:24:bf:00: 3c:27:04:8a:2d:37:73:e3:c8:d9:3c:69:7f:1d:9b:20:55:60: c3:16:52:ee:2c:f2:3f:5e:30:1d:76:22:5e:e0:4f:86:bb:db: a1:7b:1f:b1:ff:26:9b:b5:6e:bc:71:97:04:64:17:35:49:24: 85:0a:f9:62:91:55:01:c6:d2:48:cd:cb:80:66:5b:73:58:5e: 09:c3:0e:6c:05:89:52:7c:90:42:f8:4c:69:a7:6a:ef:55:ec: b9:8c:0a:be:1a:a3:70:5d:2f:23:cb:68:15:ce:3a:ce:7f:58: bb:22:95:4d:88:d3:3c:05:e8:f4:09:c7:9d:cc:dc:2e:bc:71: fa:68:4a:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAr8XNDVd7dADC4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkyMDAyMzMzNloXDTI1MTIxOTAzMzMzNlowLzEtMCsGA1UEAxMk OTY1ZWFiNTctMWM5ZS00NTUxLTg0MmQtMDNiYjczODhhNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH3kNLWhYKCXZpoHmAvlB/RMeRmxwziWJ5on k26ihnxtOgMqbgV0l9jFnxHUsSv2dIoX5IxX0XWURVWh/DOAjVuveebqORIhIFuA cIHK3mOoGQMzw3hDo6aMInkbN3vDSBIPCY55sjy+GAuljqy5GGDS7xVgd5WhZ2y9 PDKN4fAp4QQeGYL21YUgUfYFoKddhI6Zq2wWUOyleSyfoduY29p7ICEO0oVv5eqf FmeBlEm0OBvAdxv/XHr4btgfKfbpp9s8/qXBNb2YozKSTLd2dYSo48sLB3xSSGc7 k9FkfULIsuALpkkPu89eUJJullvbtK4EyakmEKhFqbAznOfOrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTuy72jpvD4CaJf07ogvXQ0DRwaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTIzNmNhYmMtOWNjYS0z ZTY0LTljYzctMWVhNmNkY2RjZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIphYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGz1+He6cQ7PBYxbgnxoSjxmzy7cBHaVQ0tk5pCaKQqBtsgkn2mQ4pH UQXBkhM8ISgKNqapHr289dffQVo+x1upHYOqd4x5H6kdZgSMbGaZO3cyZqQQpu0O /lDKpJtYSjc1wm2iBCF2l1SdqerrccTo8P8KMMKQrPg0uSS/ADwnBIotN3PjyNk8 aX8dmyBVYMMWUu4s8j9eMB12Il7gT4a726F7H7H/Jpu1brxxlwRkFzVJJIUK+WKR VQHG0kjNy4BmW3NYXgnDDmwFiVJ8kEL4TGmnau9V7LmMCr4ao3BdLyPLaBXOOs5/ WLsilU2I0zwF6PQJx53M3C68cfpoSh8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:05 2025 by rpki-client