$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e586e27-366f-3114-916b-691e605b157a.roa File: 5e586e27-366f-3114-916b-691e605b157a.roa (raw, json) Hash identifier: mU1LKH48XBbzswIN3ICbiGWSprBqYDVloFYmpx1O3o0= Subject key identifier: 89:3B:A9:FD:58:1D:9F:E4:84:5D:35:B4:80:79:31:89:45:0F:4F:0D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD6F0F91BE2920677CF9A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e586e27-366f-3114-916b-691e605b157a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.108.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6f:0f:91:be:29:20:67:7c:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a949f227-9a73-4863-bbb4-9c267a9ba3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:ea:28:76:82:f0:8f:b4:80:23:4f:00:bb: 7e:8f:72:a5:35:88:37:55:87:d4:d9:ea:c1:04:2c: 9e:38:94:a8:8c:34:69:3b:88:52:b1:a2:38:d6:fd: 21:d9:37:c2:11:8e:11:e4:05:76:7b:cb:ab:58:ef: 59:e4:d2:c3:38:bf:64:65:43:2b:fd:6c:2b:b8:89: b5:73:fe:df:80:d0:b9:68:e5:11:e0:68:fa:80:d0: 60:10:f5:e1:4a:12:2a:7e:d3:fe:81:8b:cd:a2:49: 86:ad:d9:4e:a3:b9:2d:70:c1:ea:c4:df:0f:bf:b7: a2:df:ae:85:9d:ef:61:a3:0b:c1:a3:cc:04:c8:65: 3c:2e:44:a2:86:47:12:4c:7e:ee:41:62:2f:1b:0d: 92:ea:93:98:b2:c1:cf:9b:8f:33:1c:90:d2:2b:2e: fc:36:76:76:95:3e:60:1b:30:45:29:58:0c:8e:5d: 49:22:40:0b:96:09:6d:73:84:de:f8:5e:ff:7b:fe: 81:09:90:33:a8:42:8e:6f:6d:5a:ff:6b:51:50:a8: 87:19:9d:4a:6a:b6:8b:73:06:31:f8:a7:c9:fd:4a: aa:30:48:e2:8d:04:7c:e4:c3:8f:6d:95:bb:ff:51: ac:fd:c0:32:e5:fb:0a:89:af:60:06:d5:78:7c:31: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3B:A9:FD:58:1D:9F:E4:84:5D:35:B4:80:79:31:89:45:0F:4F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e586e27-366f-3114-916b-691e605b157a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ed:04:34:d4:f7:9c:62:96:04:bd:c7:0e:14:73:51:e6:2e: 26:e9:5f:52:fe:65:1d:84:af:92:e0:2c:3d:a7:ec:7a:d2:2d: b6:b9:14:77:0c:70:45:00:78:0f:62:56:fa:c5:21:59:d8:ab: 93:cf:95:1a:27:e2:1c:29:ba:19:48:de:c7:b5:2f:ae:34:55: ab:cf:1b:68:c9:5c:bc:da:03:3d:77:e0:5a:fc:40:f9:78:e4: 36:11:5b:ec:15:ce:29:28:ec:e3:2f:bb:41:12:55:1c:2d:63: 10:54:dc:ea:1c:c4:d1:0b:ea:4b:66:8e:b3:72:64:e5:ae:a3: 23:0b:a9:c8:a5:22:d3:65:40:63:b0:42:10:c2:18:5f:e7:cc: 19:4a:3e:31:74:f7:c8:7e:fd:83:fe:0f:04:26:66:21:09:cb: 20:2b:a5:a7:e3:89:6d:93:39:fe:73:e5:df:5e:37:f8:0f:b3: 2b:56:b7:83:ae:14:72:f0:d6:a1:6e:31:4f:ae:79:6c:89:21: e8:8d:13:ca:02:86:08:2e:9f:29:93:d7:83:83:fa:44:f8:07: 9f:a5:19:3a:c3:de:6f:52:44:b1:27:fc:02:9b:99:bb:93:88: 47:01:f2:33:2d:9a:fa:61:cc:8c:cd:9a:3b:7b:35:b3:92:bf: 92:04:5c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzW8Pkb4pIGd8+aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTk0OWYyMjctOWE3My00ODYzLWJiYjQtOWMyNjdhOWJhM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicTqKHaC8I+0gCNPALt+j3KlNYg3VYfU2erB BCyeOJSojDRpO4hSsaI41v0h2TfCEY4R5AV2e8urWO9Z5NLDOL9kZUMr/WwruIm1 c/7fgNC5aOUR4Gj6gNBgEPXhShIqftP+gYvNokmGrdlOo7ktcMHqxN8Pv7ei366F ne9howvBo8wEyGU8LkSihkcSTH7uQWIvGw2S6pOYssHPm48zHJDSKy78NnZ2lT5g GzBFKVgMjl1JIkALlgltc4Te+F7/e/6BCZAzqEKOb21a/2tRUKiHGZ1KaraLcwYx +KfJ/UqqMEjijQR85MOPbZW7/1Gs/cAy5fsKia9gBtV4fDEdgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk7qf1YHZ/khF01tIB5MYlFD08NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWU1ODZlMjctMzY2Zi0z MTE0LTkxNmItNjkxZTYwNWIxNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbtBDTU95xilgS9xw4Uc1HmLibpX1L+ZR2Er5LgLD2n7HrSLba5FHcM cEUAeA9iVvrFIVnYq5PPlRon4hwpuhlI3se1L640VavPG2jJXLzaAz134Fr8QPl4 5DYRW+wVziko7OMvu0ESVRwtYxBU3OocxNEL6ktmjrNyZOWuoyMLqcilItNlQGOw QhDCGF/nzBlKPjF098h+/YP+DwQmZiEJyyArpafjiW2TOf5z5d9eN/gPsytWt4Ou FHLw1qFuMU+ueWyJIeiNE8oChggunymT14OD+kT4B5+lGTrD3m9SRLEn/AKbmbuT iEcB8jMtmvphzIzNmjt7NbOSv5IEXIQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:04 2025 by rpki-client