$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fff4cb6-5851-357d-ba9d-d80a38f4b404.roa File: 5fff4cb6-5851-357d-ba9d-d80a38f4b404.roa (raw, json) Hash identifier: XkOMZgCIqPCQPPLkCvAQ6cnEgpNGjb556LPKnfKOWVk= Subject key identifier: 52:9C:95:F7:7D:37:4A:65:1E:0A:23:91:E0:66:B0:46:BD:9F:69:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797855DD0460046E6775B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fff4cb6-5851-357d-ba9d-d80a38f4b404.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.84.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:85:5d:d0:46:00:46:e6:77:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9522873c-cf1c-4663-8392-4950a46e66f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:eb:ce:56:d5:e9:90:15:d3:b9:c2:69:76:dc: 58:88:ff:1d:43:6e:18:15:f7:e4:9a:57:95:4a:0c: 62:fb:a0:6a:9a:ad:3d:fb:2f:2e:8c:89:32:f5:ee: 6a:c2:65:d6:02:a0:8b:df:0e:53:b0:c4:ef:1d:f8: 54:39:38:8a:f3:86:4e:ef:b3:98:83:d7:04:3b:2d: b0:1e:90:63:f3:9c:76:82:71:37:80:79:ec:ae:4b: e4:5b:a2:1f:6d:56:8f:8c:ac:c8:0e:b7:8f:33:cf: ed:6d:b8:26:66:d2:b4:21:18:4d:27:47:18:e9:bd: 93:ee:57:9a:d4:9c:6e:c9:52:26:9e:79:8e:d4:dd: 19:ca:03:c9:ee:e7:56:56:a9:11:48:02:d0:fc:0f: 4a:95:c4:8d:53:35:a1:53:6d:58:99:21:15:09:b9: ef:de:6f:7f:80:69:42:9a:70:07:32:b5:5b:85:8d: db:2d:64:8a:25:cb:a5:e2:97:3e:40:d5:2a:0f:0c: d7:ea:47:a3:56:f7:84:71:94:3f:4b:1c:87:e4:4a: e1:f4:61:cc:1a:4f:95:d9:92:be:0b:4e:34:72:25: 79:81:e4:cd:03:52:62:ee:1e:6a:7c:45:32:b8:a4: 73:be:ab:49:da:2a:08:04:3f:39:f4:db:78:8b:e8: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9C:95:F7:7D:37:4A:65:1E:0A:23:91:E0:66:B0:46:BD:9F:69:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fff4cb6-5851-357d-ba9d-d80a38f4b404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2f:0d:b2:02:a0:14:54:22:ec:24:9f:ec:34:2c:7d:4b:77: 2f:a3:89:1a:5b:fe:f6:88:64:3a:e7:e6:a4:98:a6:fe:9b:04: a5:c3:17:01:7e:6d:d4:f5:f3:ae:4e:26:c1:67:70:ce:7d:ad: 4f:0c:0b:d0:9f:1f:1b:a5:27:39:e0:e2:24:ba:25:7e:3f:fc: 12:2e:34:72:c1:85:62:1a:f2:f2:e8:b5:a7:c1:83:44:f8:33: 63:86:06:81:46:58:60:c6:cf:ca:4a:c0:b3:40:ba:d5:31:75: db:ee:d4:02:f1:d8:65:7e:83:60:23:08:8c:e3:e8:d0:a6:7d: 77:b3:c3:2f:92:ac:3e:a1:37:df:f3:0b:90:c8:04:ff:a9:9e: 30:4f:4d:e9:64:93:88:ca:9f:4f:a1:45:78:ce:3e:a3:99:ab: 20:5c:7f:87:55:05:e8:f7:47:12:c7:50:cb:da:8e:dc:2e:33: d1:6c:3a:35:15:18:3f:d3:8a:46:5a:73:7e:1e:4b:5c:cb:68: 14:a2:c0:8e:04:b1:9d:41:7f:ff:cb:f9:7b:cf:f3:d0:d1:db: 91:4a:40:af:61:c0:df:70:80:50:53:5e:0c:60:a6:f8:1e:82: cf:02:b2:16:43:36:7e:39:72:31:57:de:e6:79:5b:8f:84:1a: e8:fb:5b:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4Vd0EYARuZ3W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OTUyMjg3M2MtY2YxYy00NjYzLTgzOTItNDk1MGE0NmU2NmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+vOVtXpkBXTucJpdtxYiP8dQ24YFffkmleV Sgxi+6Bqmq09+y8ujIky9e5qwmXWAqCL3w5TsMTvHfhUOTiK84ZO77OYg9cEOy2w HpBj85x2gnE3gHnsrkvkW6IfbVaPjKzIDrePM8/tbbgmZtK0IRhNJ0cY6b2T7lea 1JxuyVImnnmO1N0ZygPJ7udWVqkRSALQ/A9KlcSNUzWhU21YmSEVCbnv3m9/gGlC mnAHMrVbhY3bLWSKJcul4pc+QNUqDwzX6kejVveEcZQ/SxyH5Erh9GHMGk+V2ZK+ C040ciV5geTNA1Ji7h5qfEUyuKRzvqtJ2ioIBD859Nt4i+ivIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKclfd9N0plHgojkeBmsEa9n2l9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZmZjRjYjYtNTg1MS0z NTdkLWJhOWQtZDgwYTM4ZjRiNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMvDbICoBRUIuwkn+w0LH1Ldy+jiRpb/vaIZDrn5qSYpv6bBKXDFwF+ bdT1865OJsFncM59rU8MC9CfHxulJzng4iS6JX4//BIuNHLBhWIa8vLotafBg0T4 M2OGBoFGWGDGz8pKwLNAutUxddvu1ALx2GV+g2AjCIzj6NCmfXezwy+SrD6hN9/z C5DIBP+pnjBPTelkk4jKn0+hRXjOPqOZqyBcf4dVBej3RxLHUMvajtwuM9FsOjUV GD/TikZac34eS1zLaBSiwI4EsZ1Bf//L+XvP89DR25FKQK9hwN9wgFBTXgxgpvge gs8CshZDNn45cjFX3uZ5W4+EGuj7W4g= -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:23 2025 by rpki-client