$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54f2f7de-da6a-304b-97c0-3e58b8a7420e.roa File: 54f2f7de-da6a-304b-97c0-3e58b8a7420e.roa (raw, json) Hash identifier: 1MBHfe1fNY+lfIWfwCTXAyE+ChOCCJR/jLGBBuQyMOY= Subject key identifier: 8E:9F:85:4B:13:78:9A:61:AC:E9:BF:0A:58:10:C0:B6:30:E0:5B:43 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD6D19104C28B0F8AC5700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54f2f7de-da6a-304b-97c0-3e58b8a7420e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.102.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6d:19:10:4c:28:b0:f8:ac:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c3bd4a0c-56ba-4e68-a48b-2e4893c3fc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:a2:fc:aa:79:49:7b:23:3b:9e:51:a1:81: 94:c2:ce:45:24:cc:ed:2b:db:33:1f:b1:1c:b8:bf: 9e:fb:2f:7f:77:d8:57:1e:24:b6:54:31:2b:2a:bd: ff:00:2d:d6:f9:17:84:a3:91:08:01:51:c1:bf:03: 36:c5:94:c6:1a:76:83:46:27:f6:a7:f6:14:b4:86: 8e:ab:f2:55:c1:26:19:14:6f:e1:28:3b:81:0b:db: e2:86:ae:6b:88:dd:de:65:db:dd:8e:05:61:02:37: ec:d2:0b:ae:ee:c2:e8:44:28:61:26:41:3e:ae:20: bc:75:83:7b:8a:14:5d:e8:5f:27:5b:2e:59:47:bf: 08:64:be:5a:00:65:62:cd:0e:2d:73:20:18:52:20: a2:86:69:59:c3:66:20:52:20:c7:20:d4:0b:bc:ff: 37:c2:72:82:87:22:1b:b5:5c:6f:94:8a:c7:51:3d: e5:d9:52:66:c6:3b:1f:f0:c2:47:b0:f8:39:93:43: 5f:54:9a:b4:c0:7b:9c:f0:5e:90:fb:81:c2:c2:66: 3e:17:ba:b7:67:c5:52:48:77:0c:9e:83:9c:2a:64: dd:c0:72:e6:2b:3c:3c:f3:dd:53:83:8f:db:9d:f3: c0:40:e0:96:c2:b6:93:d9:72:20:ee:8e:4f:0f:d0: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9F:85:4B:13:78:9A:61:AC:E9:BF:0A:58:10:C0:B6:30:E0:5B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54f2f7de-da6a-304b-97c0-3e58b8a7420e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.102.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:10:38:80:a9:2d:78:f2:38:6b:3e:90:38:e3:0a:ca:d8:47: 69:a3:74:f4:c3:df:8b:dd:92:da:3e:b3:4c:ac:95:d0:13:d6: 96:c5:aa:ba:a1:19:51:ef:10:e7:b8:51:37:52:de:6e:c7:9d: 5c:24:39:26:fa:4c:f0:d5:1b:31:7d:b1:0e:26:57:bc:ec:14: 83:19:76:ec:1c:44:aa:f1:4d:62:85:8f:22:97:9a:c9:a9:42: e2:df:96:d6:38:34:25:8a:90:d5:94:14:8c:31:9a:42:1e:41: 0e:04:19:fe:a1:b6:e6:05:60:73:f7:c8:40:b9:9d:f9:13:c7: 28:76:55:a0:e9:26:d1:3f:c8:85:43:8b:48:88:e2:54:7e:ae: d9:5f:38:32:6d:f3:5e:ca:fc:15:b0:26:20:26:7f:f1:a6:14: 66:75:11:8a:24:94:60:32:39:40:ec:41:ec:5a:45:f5:0c:81: 19:8c:d0:9d:d4:66:09:8e:a3:0e:80:72:b6:9f:02:3d:20:2d: 74:bd:5e:92:e9:dd:8d:65:52:b5:86:62:70:a9:4c:f3:e3:83: 6d:de:b9:19:9d:65:0f:d1:36:01:55:c6:a5:d9:bc:94:f1:46: d0:f5:29:ef:c0:e2:0b:82:4e:f2:3e:4f:04:2a:a9:d8:10:8f: 43:a4:e8:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzW0ZEEwosPisVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzNiZDRhMGMtNTZiYS00ZTY4LWE0OGItMmU0ODkzYzNmYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDei/Kp5SXsjO55RoYGUws5FJMztK9szH7Ec uL+e+y9/d9hXHiS2VDErKr3/AC3W+ReEo5EIAVHBvwM2xZTGGnaDRif2p/YUtIaO q/JVwSYZFG/hKDuBC9vihq5riN3eZdvdjgVhAjfs0guu7sLoRChhJkE+riC8dYN7 ihRd6F8nWy5ZR78IZL5aAGVizQ4tcyAYUiCihmlZw2YgUiDHINQLvP83wnKChyIb tVxvlIrHUT3l2VJmxjsf8MJHsPg5k0NfVJq0wHuc8F6Q+4HCwmY+F7q3Z8VSSHcM noOcKmTdwHLmKzw8891Tg4/bnfPAQOCWwraT2XIg7o5PD9DiCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6fhUsTeJphrOm/ClgQwLYw4FtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTRmMmY3ZGUtZGE2YS0z MDRiLTk3YzAtM2U1OGI4YTc0MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYQOICpLXjyOGs+kDjjCsrYR2mjdPTD34vdkto+s0ysldAT1pbFqrqh GVHvEOe4UTdS3m7HnVwkOSb6TPDVGzF9sQ4mV7zsFIMZduwcRKrxTWKFjyKXmsmp QuLfltY4NCWKkNWUFIwxmkIeQQ4EGf6htuYFYHP3yEC5nfkTxyh2VaDpJtE/yIVD i0iI4lR+rtlfODJt817K/BWwJiAmf/GmFGZ1EYoklGAyOUDsQexaRfUMgRmM0J3U ZgmOow6AcrafAj0gLXS9XpLp3Y1lUrWGYnCpTPPjg23euRmdZQ/RNgFVxqXZvJTx RtD1Ke/A4guCTvI+TwQqqdgQj0Ok6I0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:58 2025 by rpki-client