$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa File: 5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa (raw, json) Hash identifier: 1NNP//KTO+fbXA/kbE2YqZ83F3NgkLFJQCvUGn1Sv88= Subject key identifier: D5:AE:20:95:37:73:24:A2:E0:20:A2:2F:F6:A6:D2:2F:B6:91:4D:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B33F1B5A58F126E34A7975B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 19527 IP address blocks: 34.2.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b5:a5:8f:12:6e:34:a7:97:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=a51daceb-a36f-4f3a-83e2-19150e447e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:1f:d9:f1:14:18:1d:3f:54:81:cf:bd:10: 34:3d:cd:c4:37:e4:69:4e:8b:29:99:6e:5f:ab:4e: 11:01:d7:dc:27:88:1d:23:af:18:54:d8:c3:db:3d: 41:6e:33:43:6d:e2:e7:75:87:84:61:bb:30:28:6a: 25:f6:d6:46:f0:e7:d1:ec:0b:30:02:0e:72:a4:12: 2e:be:7b:e7:e2:08:2b:71:f9:73:bc:73:ee:9b:51: 05:e1:50:7a:80:1d:1d:47:7e:58:52:60:0d:c2:03: a6:40:e0:8a:01:c9:0e:20:d0:51:40:95:92:ca:97: 93:dc:b4:dc:e8:90:82:8a:b2:1a:15:cf:d9:2f:f6: 10:d8:19:c4:0e:28:b1:5f:09:7d:7d:cf:cd:ca:22: 4f:b7:0d:6f:cc:d6:ea:a4:1b:12:a6:34:40:0f:eb: 71:5b:7c:2d:ac:ae:9d:86:2b:5f:70:13:94:e4:db: e1:58:85:fa:87:fc:e8:ba:66:27:ed:db:6f:47:f8: 0b:9b:30:12:17:69:2f:22:cb:75:19:8c:ef:eb:73: be:ac:ed:63:7a:a6:a5:ef:23:89:c7:19:aa:f9:95: 37:6b:d1:36:63:a3:8a:44:58:0f:1f:13:61:76:52: 4a:d5:46:80:70:47:26:0d:7c:a9:31:0b:cc:50:56: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AE:20:95:37:73:24:A2:E0:20:A2:2F:F6:A6:D2:2F:B6:91:4D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a2:89:73:e0:72:af:10:29:bd:6f:64:d8:4e:4b:1b:49:12: 92:ad:d3:68:ad:e8:9f:e2:e8:f3:16:53:5b:08:e7:a3:d9:f3: b4:02:89:f3:da:d7:b8:a4:11:97:99:f8:9d:25:d8:01:72:30: 80:c9:e9:80:0c:e0:44:3e:32:85:89:aa:10:db:22:bb:df:74: 16:dc:2b:8f:1e:e2:b6:70:97:b2:48:48:8b:85:f3:ad:57:d5: d0:4d:8b:86:99:cd:3a:90:e0:81:1e:ab:9d:05:66:37:59:d4: 1b:eb:42:02:62:89:ec:92:f2:49:6b:19:03:ac:d7:c8:24:ea: 86:69:7f:8f:cc:f6:f6:f4:ba:d7:d7:80:15:15:9e:e0:3f:35: 28:91:97:00:a8:51:3b:36:50:be:c7:e6:97:32:5f:56:22:ef: 21:4d:f1:3a:43:c2:0f:e5:41:95:b4:3d:db:bf:e2:63:28:3d: 72:dd:22:e6:0a:67:f5:91:96:b9:df:99:f8:b2:48:28:30:bb: e2:3f:08:a3:41:8a:cf:c5:8f:bc:78:55:3b:7c:a8:25:d7:99: 70:e9:b8:60:e5:0b:5f:ee:04:65:25:19:eb:af:06:d7:17:d0: a2:63:44:0c:ef:42:e3:5f:df:16:91:70:ab:e2:cf:a8:ca:9d: e8:02:74:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8bWljxJuNKeXW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YTUxZGFjZWItYTM2Zi00ZjNhLTgzZTItMTkxNTBlNDQ3ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a0f2fEUGB0/VIHPvRA0Pc3EN+RpTospmW5f q04RAdfcJ4gdI68YVNjD2z1BbjNDbeLndYeEYbswKGol9tZG8OfR7AswAg5ypBIu vnvn4ggrcflzvHPum1EF4VB6gB0dR35YUmANwgOmQOCKAckOINBRQJWSypeT3LTc 6JCCirIaFc/ZL/YQ2BnEDiixXwl9fc/NyiJPtw1vzNbqpBsSpjRAD+txW3wtrK6d hitfcBOU5NvhWIX6h/zoumYn7dtvR/gLmzASF2kvIst1GYzv63O+rO1jeqal7yOJ xxmq+ZU3a9E2Y6OKRFgPHxNhdlJK1UaAcEcmDXypMQvMUFaiXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWuIJU3cySi4CCiL/am0i+2kU2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWY1M2Y1ZmQtMTM3MS0z ZjExLTkzZDktZWZjNTczZWExMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmiiXPgcq8QKb1vZNhOSxtJEpKt02it6J/i6PMWU1sI56PZ87QCifPa 17ikEZeZ+J0l2AFyMIDJ6YAM4EQ+MoWJqhDbIrvfdBbcK48e4rZwl7JISIuF861X 1dBNi4aZzTqQ4IEeq50FZjdZ1BvrQgJiieyS8klrGQOs18gk6oZpf4/M9vb0utfX gBUVnuA/NSiRlwCoUTs2UL7H5pcyX1Yi7yFN8TpDwg/lQZW0Pdu/4mMoPXLdIuYK Z/WRlrnfmfiySCgwu+I/CKNBis/Fj7x4VTt8qCXXmXDpuGDlC1/uBGUlGeuvBtcX 0KJjRAzvQuNf3xaRcKviz6jKnegCdHg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:54 2025 by rpki-client