$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55c4424d-befa-34cf-8034-549baffa7ca4.roa File: 55c4424d-befa-34cf-8034-549baffa7ca4.roa (raw, json) Hash identifier: o1IQmjRcVc05TUI1oA3Av5lCIsJiXkglvHxob97Hnn8= Subject key identifier: E6:FE:44:52:71:B1:40:C5:4B:CB:47:19:C9:DA:A0:81:AC:3B:ED:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B6C0B26395CC55138500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55c4424d-befa-34cf-8034-549baffa7ca4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.40.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b6:c0:b2:63:95:cc:55:13:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=df8731d0-9c22-46f8-b63b-528ab40c1ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:e3:6a:d8:63:7a:67:ec:25:28:cc:1e:18: 05:1f:53:be:96:3b:20:76:ee:ca:f0:2a:c6:1a:a3: da:08:d9:ee:f3:3a:7e:c5:a8:52:3b:be:03:f8:68: 2f:76:c3:83:f1:22:b0:9c:b4:fa:7b:90:cf:83:47: 1c:f7:db:47:3f:c9:01:30:7f:86:81:51:9e:da:95: a6:c8:bd:14:b8:1e:bf:64:78:f9:69:54:c3:71:9c: 82:38:12:09:a0:b6:74:19:a4:06:be:da:c1:b8:b4: 56:71:09:0c:72:41:86:be:53:93:4d:75:fe:bd:ea: f2:21:e7:59:c0:8d:2d:fa:19:35:56:03:ba:d9:92: 40:4e:22:a9:2d:49:6f:9a:63:55:ca:5a:1b:75:a3: 9f:4d:c6:cf:fb:f6:02:e1:13:ce:f8:d7:0f:1a:94: b7:3e:d6:9a:8a:7d:44:74:3a:72:aa:47:9b:0c:d0: c4:82:6a:64:c8:5b:b2:06:7e:cd:75:89:1c:95:c3: c3:ed:6d:0f:1e:b8:63:ef:02:c0:70:a1:d0:25:90: e1:cf:d8:9e:0d:c5:2c:03:43:bb:f4:21:37:f3:f5: 31:af:3b:b1:ad:76:ef:8a:fe:62:ee:24:f1:5f:04: b1:aa:53:bb:62:75:3e:1f:e5:75:e1:85:6f:96:5d: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FE:44:52:71:B1:40:C5:4B:CB:47:19:C9:DA:A0:81:AC:3B:ED:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55c4424d-befa-34cf-8034-549baffa7ca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.40.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:01:8c:6b:a5:82:45:bf:55:29:90:49:39:cd:bc:e0:09:a3: 28:4d:d6:12:94:a4:bf:18:81:b9:8e:23:a2:ad:e5:df:f7:9e: 98:ab:5e:cc:2d:63:d5:c4:87:5f:a1:b7:a2:94:bb:da:d5:be: 44:8f:80:88:93:4f:c7:28:44:21:e4:d5:b2:34:bd:97:e2:59: 4b:30:a9:3f:34:2c:15:45:2c:96:12:cd:97:ee:f6:d2:f4:61: 7f:93:d3:b7:64:70:79:27:e4:49:cf:9e:37:c1:a1:ca:d0:94: 5a:b6:5c:bf:97:34:e3:75:63:2d:fe:81:0a:ab:3e:f6:87:4d: 03:75:71:46:21:f2:a4:f8:ad:d7:a0:ed:2c:0a:5c:6e:19:59: 1c:b8:7e:8b:3c:3d:ee:93:ae:06:25:f1:1c:ac:da:16:1b:16: bc:8d:d3:3e:46:43:34:e2:29:1e:ab:d8:cb:94:69:a6:30:ba: 44:8c:76:4a:3e:12:ea:dd:5d:f6:a3:54:63:64:53:09:38:ca: 0c:f0:66:e6:83:12:22:9e:73:08:fb:7c:4b:64:af:40:d1:77: f2:8f:cd:22:77:65:b9:a8:d7:10:f6:15:95:fc:04:fc:35:72: 17:9e:75:a2:9e:9f:86:ed:6f:4b:55:d7:5b:43:b4:f7:27:2c: 7f:fe:83:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7bAsmOVzFUThQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGY4NzMxZDAtOWMyMi00NmY4LWI2M2ItNTI4YWI0MGMxZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojjjathjemfsJSjMHhgFH1O+ljsgdu7K8CrG GqPaCNnu8zp+xahSO74D+GgvdsOD8SKwnLT6e5DPg0cc99tHP8kBMH+GgVGe2pWm yL0UuB6/ZHj5aVTDcZyCOBIJoLZ0GaQGvtrBuLRWcQkMckGGvlOTTXX+veryIedZ wI0t+hk1VgO62ZJATiKpLUlvmmNVylobdaOfTcbP+/YC4RPO+NcPGpS3Ptaain1E dDpyqkebDNDEgmpkyFuyBn7NdYkclcPD7W0PHrhj7wLAcKHQJZDhz9ieDcUsA0O7 9CE38/UxrzuxrXbviv5i7iTxXwSxqlO7YnU+H+V14YVvll3yqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb+RFJxsUDFS8tHGcnaoIGsO+0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTVjNDQyNGQtYmVmYS0z NGNmLTgwMzQtNTQ5YmFmZmE3Y2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIigAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQBjGulgkW/VSmQSTnNvOAJoyhN1hKUpL8YgbmOI6Kt5d/3npirXswt Y9XEh1+ht6KUu9rVvkSPgIiTT8coRCHk1bI0vZfiWUswqT80LBVFLJYSzZfu9tL0 YX+T07dkcHkn5EnPnjfBocrQlFq2XL+XNON1Yy3+gQqrPvaHTQN1cUYh8qT4rdeg 7SwKXG4ZWRy4fos8Pe6TrgYl8Rys2hYbFryN0z5GQzTiKR6r2MuUaaYwukSMdko+ EurdXfajVGNkUwk4ygzwZuaDEiKecwj7fEtkr0DRd/KPzSJ3Zbmo1xD2FZX8BPw1 cheedaKen4btb0tV11tDtPcnLH/+g1M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:29 2025 by rpki-client