$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5891ce36-f474-3859-bd2d-d7f52899935b.roa File: 5891ce36-f474-3859-bd2d-d7f52899935b.roa (raw, json) Hash identifier: fpU87Irya+J/dQMVFPdej/MhMuTJOXIUaAxPYaH31PI= Subject key identifier: 31:3B:C0:5B:39:F8:54:76:6D:0B:CF:97:92:F7:DA:AA:31:9C:E2:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797BBEBF843412BD0108D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5891ce36-f474-3859-bd2d-d7f52899935b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.124.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:bb:eb:f8:43:41:2b:d0:10:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=db83861f-8376-4c71-bbc2-1b98194ab979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:53:43:a4:d0:6a:63:3b:c5:6a:2e:3d:ee:e8: b8:5b:de:bd:45:15:78:e0:84:b0:14:04:1c:ca:16: 62:41:6f:b6:51:ba:df:4a:67:d6:ce:61:c7:a3:f1: 6b:8d:0a:e0:5f:79:00:e9:a2:65:07:ec:38:9e:de: e6:3c:02:80:cc:61:7c:74:3f:3b:dc:e2:e3:ca:40: 71:b8:6e:81:87:34:36:b9:1f:36:cc:bd:8d:ba:0e: a7:d6:59:62:3c:54:f9:99:cd:10:97:f2:c6:1d:f5: 35:a2:00:6a:02:be:80:6e:a1:8e:b3:64:a3:65:3d: 5c:e5:41:62:f7:f7:8b:9f:b5:af:72:42:54:06:56: 4b:e0:cd:5f:0d:df:a1:6f:7b:da:89:7a:82:6c:eb: 98:2d:cb:d6:4c:37:ef:d6:77:a7:1b:3e:12:65:97: 57:ff:68:e2:fc:e3:10:c5:5f:01:23:35:e5:e0:d4: c7:46:19:db:28:f7:8e:b9:91:56:78:ef:85:d7:c5: 35:b0:9c:e7:f4:e4:64:0e:bc:e4:67:f2:0a:f4:17: 72:41:2d:54:f3:8d:8f:ff:bf:d5:f4:51:ae:ca:c5: b4:99:41:e1:46:64:79:3a:31:be:df:db:dc:11:ae: 90:a4:c2:8d:a2:61:ad:12:6b:ab:49:9d:40:d0:b9: 5d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3B:C0:5B:39:F8:54:76:6D:0B:CF:97:92:F7:DA:AA:31:9C:E2:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5891ce36-f474-3859-bd2d-d7f52899935b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.124.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:31:2b:58:1e:9a:88:89:49:7e:24:7a:7c:c2:16:51:00:41: 31:88:06:28:7b:14:a1:00:3f:ee:57:ea:e6:63:de:0f:ee:d2: 84:03:c6:1b:d7:10:79:50:df:2c:e4:6d:a3:c7:47:50:aa:77: be:86:49:dc:8e:83:99:7c:cb:36:40:43:dc:c4:bd:c4:50:58: 5c:42:65:b1:2b:74:1b:c7:c8:d6:1b:d1:97:d7:43:92:a9:ef: 30:77:bb:6e:af:0c:1f:31:41:de:03:a2:28:ed:22:d8:6a:02: 44:02:ff:b0:f4:a0:f7:c2:df:a7:d4:d4:da:27:f5:bb:50:bd: 32:cb:2e:e6:ce:0e:be:82:e8:94:82:ef:b3:11:fd:2f:2d:ab: df:4a:1b:48:85:1e:02:40:d6:ac:11:ec:36:35:03:9f:92:d0: 13:78:66:7a:fa:90:39:62:ca:52:77:ac:2d:fe:45:3e:51:b4: 06:8d:ed:92:d0:b3:05:e4:16:52:c1:ed:f1:50:3d:c8:76:ed: 83:df:8b:ae:97:92:58:6e:b8:9a:56:d2:0f:5b:70:2f:07:f0: 95:01:ab:b7:f2:0f:84:54:6f:e0:bf:d9:2c:ab:31:10:a9:e1: 5e:f6:95:8b:1e:e7:de:a1:5c:38:89:b1:2f:bf:32:8a:ca:36: b9:a0:a5:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7vr+ENBK9AQjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGI4Mzg2MWYtODM3Ni00YzcxLWJiYzItMWI5ODE5NGFiOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFNDpNBqYzvFai497ui4W969RRV44ISwFAQc yhZiQW+2UbrfSmfWzmHHo/FrjQrgX3kA6aJlB+w4nt7mPAKAzGF8dD873OLjykBx uG6BhzQ2uR82zL2Nug6n1lliPFT5mc0Ql/LGHfU1ogBqAr6AbqGOs2SjZT1c5UFi 9/eLn7WvckJUBlZL4M1fDd+hb3vaiXqCbOuYLcvWTDfv1nenGz4SZZdX/2ji/OMQ xV8BIzXl4NTHRhnbKPeOuZFWeO+F18U1sJzn9ORkDrzkZ/IK9BdyQS1U842P/7/V 9FGuysW0mUHhRmR5OjG+39vcEa6QpMKNomGtEmurSZ1A0LldvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE7wFs5+FR2bQvPl5L32qoxnOJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg5MWNlMzYtZjQ3NC0z ODU5LWJkMmQtZDdmNTI4OTk5MzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsxK1gemoiJSX4kenzCFlEAQTGIBih7FKEAP+5X6uZj3g/u0oQDxhvX EHlQ3yzkbaPHR1Cqd76GSdyOg5l8yzZAQ9zEvcRQWFxCZbErdBvHyNYb0ZfXQ5Kp 7zB3u26vDB8xQd4DoijtIthqAkQC/7D0oPfC36fU1Non9btQvTLLLubODr6C6JSC 77MR/S8tq99KG0iFHgJA1qwR7DY1A5+S0BN4Znr6kDliylJ3rC3+RT5RtAaN7ZLQ swXkFlLB7fFQPch27YPfi66XklhuuJpW0g9bcC8H8JUBq7fyD4RUb+C/2SyrMRCp 4V72lYse596hXDiJsS+/MorKNrmgpUs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:02:52 2025 by rpki-client