$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53875253-c19c-34d9-b924-5d8beea1e55f.roa File: 53875253-c19c-34d9-b924-5d8beea1e55f.roa (raw, json) Hash identifier: a33MFes+e7H6tvuf6EZ+ORQf3xt6FyKusz+FwAoNk6k= Subject key identifier: 60:2B:6E:7B:B5:A9:B8:87:93:C2:78:BB:F7:CF:C2:D4:87:85:BA:62 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67978EC7F662285D08B83EA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53875253-c19c-34d9-b924-5d8beea1e55f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.134.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:8e:c7:f6:62:28:5d:08:b8:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=88797799-6e21-43a8-9fa2-cda92dab38ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:4a:bb:a7:4e:90:d1:4e:e5:12:63:9b:46: 5c:95:57:8f:ef:4e:00:05:86:52:fc:ea:d8:4b:76: 0e:fb:93:c1:f5:c0:d6:27:9d:c4:8d:6a:00:55:cc: 63:9c:93:27:f5:d4:2c:65:bb:39:d8:e8:0c:14:35: e4:71:d5:f5:a1:80:80:05:f7:61:6d:29:47:5b:b7: 84:f0:34:26:09:93:96:ef:9e:54:dd:94:28:8f:f6: b4:83:d6:2a:e5:cc:76:22:cb:9b:0a:62:25:e8:33: a8:fa:88:d2:e2:21:a4:ae:a5:b0:13:e7:c8:7c:bb: a2:fe:13:33:9a:34:ab:f3:74:8d:6d:91:65:e0:82: 04:b4:6a:08:28:3b:d3:23:c3:05:f7:84:eb:63:93: 8e:21:9f:c5:af:ea:ee:48:da:54:7a:82:36:47:48: cc:c0:e8:db:b7:58:ce:26:b6:00:14:1e:c7:44:d9: ae:64:e3:f4:e2:66:11:35:5e:d2:99:65:d9:5f:8a: 5a:15:da:a2:92:82:3c:86:e5:2b:e1:a5:c9:a9:3d: 47:9c:a1:1c:ac:26:4b:e4:f8:a7:64:b7:a8:51:cf: ea:0c:d3:b2:69:e9:7a:a6:71:2b:b8:dc:d9:cf:6c: 84:6f:bd:97:8e:22:b5:4e:23:8b:6c:57:9b:83:58: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2B:6E:7B:B5:A9:B8:87:93:C2:78:BB:F7:CF:C2:D4:87:85:BA:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53875253-c19c-34d9-b924-5d8beea1e55f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:15:46:40:5b:93:29:41:c0:d6:35:56:0b:c5:18:c7:23:96: de:0e:e7:0f:a7:5a:e5:d7:cb:cc:c6:2e:72:6f:1f:5d:fe:28: b4:37:7b:18:8a:f8:fd:bb:21:f3:ae:95:18:e7:18:92:d1:b9: 21:49:32:81:99:08:0e:9e:66:26:03:58:1d:20:eb:8a:24:06: 3d:68:56:2a:53:a7:cd:ac:e4:74:b1:05:c5:eb:fd:cf:c6:b1: 14:49:e3:c4:3a:98:22:5f:80:a4:1b:11:5e:59:4d:6a:33:f7: fe:15:ca:80:79:aa:88:35:ea:ab:39:a6:9a:65:23:7a:c3:46: 0f:12:ab:43:28:49:59:06:ca:ff:fc:41:c0:04:5d:ef:43:a0: b7:f0:11:7b:a4:de:ca:0b:a6:36:29:af:84:92:0e:eb:5c:33: 56:d0:d9:56:6c:c4:e7:63:f1:4e:73:4b:06:f6:73:0c:7d:28: b4:01:19:27:51:79:c7:5c:83:27:77:6b:b3:41:d0:ae:17:39: 94:4a:f6:11:aa:0f:04:1a:3a:0c:39:1b:9f:68:4d:53:70:e3: cb:60:a7:89:bb:b7:ae:cc:9d:6e:c1:f4:92:72:59:0c:3f:c2: d9:d6:ca:54:a7:9e:d2:65:c1:26:0a:e5:cc:e8:8a:9e:3e:bb: 74:33:f9:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl47H9mIoXQi4PqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODg3OTc3OTktNmUyMS00M2E4LTlmYTItY2RhOTJkYWIzOGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGBKu6dOkNFO5RJjm0ZclVeP704ABYZS/OrY S3YO+5PB9cDWJ53EjWoAVcxjnJMn9dQsZbs52OgMFDXkcdX1oYCABfdhbSlHW7eE 8DQmCZOW755U3ZQoj/a0g9Yq5cx2IsubCmIl6DOo+ojS4iGkrqWwE+fIfLui/hMz mjSr83SNbZFl4IIEtGoIKDvTI8MF94TrY5OOIZ/Fr+ruSNpUeoI2R0jMwOjbt1jO JrYAFB7HRNmuZOP04mYRNV7SmWXZX4paFdqikoI8huUr4aXJqT1HnKEcrCZL5Pin ZLeoUc/qDNOyael6pnEruNzZz2yEb72XjiK1TiOLbFebg1jAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGArbnu1qbiHk8J4u/fPwtSHhbpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTM4NzUyNTMtYzE5Yy0z NGQ5LWI5MjQtNWQ4YmVlYTFlNTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8VRkBbkylBwNY1VgvFGMcjlt4O5w+nWuXXy8zGLnJvH13+KLQ3exiK +P27IfOulRjnGJLRuSFJMoGZCA6eZiYDWB0g64okBj1oVipTp82s5HSxBcXr/c/G sRRJ48Q6mCJfgKQbEV5ZTWoz9/4VyoB5qog16qs5ppplI3rDRg8Sq0MoSVkGyv/8 QcAEXe9DoLfwEXuk3soLpjYpr4SSDutcM1bQ2VZsxOdj8U5zSwb2cwx9KLQBGSdR ecdcgyd3a7NB0K4XOZRK9hGqDwQaOgw5G59oTVNw48tgp4m7t67MnW7B9JJyWQw/ wtnWylSnntJlwSYK5czoip4+u3Qz+c0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:00:22 2025 by rpki-client