$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69a9dd20-3f71-3de9-9723-7f330c58715d.roa File: 69a9dd20-3f71-3de9-9723-7f330c58715d.roa (raw, json) Hash identifier: 4JTBlSGYihW9H3c8RGI/I/eFK3fig+YKaEzlZvEGF/s= Subject key identifier: 38:D8:F7:A6:51:92:30:66:7E:8E:E5:ED:6F:FF:3C:E0:52:1F:97:4D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B2A2C4E26984DE139EF105F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69a9dd20-3f71-3de9-9723-7f330c58715d.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 34.2.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4e:26:98:4d:e1:39:ef:10:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=f39d42cd-18fd-49e3-9f48-d76b2e2c4301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8e:70:50:1e:79:50:90:00:f3:fc:50:99:31: 78:3e:54:c4:5d:85:a7:69:99:7a:ff:4c:1b:ce:49: fb:1b:25:db:db:dd:f2:1a:28:36:87:48:fc:6c:6e: 0b:d6:18:4e:7a:e6:36:01:4e:99:e0:d2:bc:0d:70: 0e:49:62:c4:02:54:16:6e:54:aa:f5:77:03:1d:53: ce:78:88:a4:35:b9:4c:64:13:58:b0:21:1f:3d:a9: b5:72:7d:86:33:ee:de:4a:b4:10:9d:0b:16:21:e0: b2:d2:5c:bd:85:20:f9:f0:ae:dd:e2:42:49:fa:3d: fc:04:59:cb:c7:5a:f3:19:dc:f5:f0:fd:d6:8d:f4: e9:74:2a:cc:19:7d:14:0a:ff:f0:55:ce:15:a6:75: b6:75:ef:cf:f1:d5:0d:ff:0b:b1:e0:95:d9:18:7e: 4b:4c:60:8a:53:c4:9f:37:6d:1d:b1:ff:eb:70:12: 6f:29:9e:bc:73:a6:01:9f:5c:e8:25:45:bd:cc:8f: bf:0f:c7:69:a4:da:6e:77:cd:83:97:f1:10:c4:39: 9e:03:e3:56:cf:a5:78:6b:a1:6f:fb:7b:1d:8d:00: 45:73:a4:de:2f:f0:77:6f:d1:77:75:3e:d4:f0:6a: 20:d1:6d:8f:d3:82:22:5e:c4:27:04:ab:8b:62:86: 39:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:F7:A6:51:92:30:66:7E:8E:E5:ED:6F:FF:3C:E0:52:1F:97:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69a9dd20-3f71-3de9-9723-7f330c58715d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:88:a6:24:67:16:3e:56:99:e6:0e:cd:9c:d7:56:bc:5d:e6: 2c:c3:e8:c1:32:7b:6a:75:f1:be:29:c7:5f:b3:eb:5a:a4:aa: ed:53:ed:f6:f1:97:5b:4f:4c:41:36:7a:08:b8:b0:ff:18:7e: 4e:a4:06:5a:29:6a:1e:31:da:f4:a4:06:f6:16:60:52:02:d9: 59:d0:d6:35:54:9a:80:be:76:8a:39:03:62:e6:25:e0:22:d0: 0d:6e:d8:6e:cc:df:c6:7b:ce:58:b3:77:5f:04:63:36:1a:28: fc:87:95:47:29:9b:75:f6:8c:6c:a5:d2:cc:c3:36:59:36:45: 54:27:51:3b:9b:c7:42:5a:3e:0f:9a:db:ca:5f:c8:e3:35:87: 60:d5:e6:c3:4a:68:f9:74:64:80:db:1a:61:c7:aa:10:f7:63: 66:f4:5e:40:29:7f:f7:5b:92:bf:af:89:42:14:61:b0:71:3a: bf:47:86:3b:56:3d:61:08:37:63:8b:1f:da:57:7e:7d:b3:70: ff:e5:65:dc:06:13:b5:73:bb:54:dc:0b:b4:6a:ad:4a:86:ff: e6:84:e8:08:b2:e9:f4:a9:1f:6f:ef:75:e3:d8:83:fa:85:b7: 42:7d:c3:c1:a7:40:38:06:2d:ae:15:ed:82:2f:5a:07:87:96: f0:80:3a:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLE4mmE3hOe8QXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjM5ZDQyY2QtMThmZC00OWUzLTlmNDgtZDc2YjJlMmM0MzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr45wUB55UJAA8/xQmTF4PlTEXYWnaZl6/0wb zkn7GyXb293yGig2h0j8bG4L1hhOeuY2AU6Z4NK8DXAOSWLEAlQWblSq9XcDHVPO eIikNblMZBNYsCEfPam1cn2GM+7eSrQQnQsWIeCy0ly9hSD58K7d4kJJ+j38BFnL x1rzGdz18P3WjfTpdCrMGX0UCv/wVc4VpnW2de/P8dUN/wux4JXZGH5LTGCKU8Sf N20dsf/rcBJvKZ68c6YBn1zoJUW9zI+/D8dppNpud82Dl/EQxDmeA+NWz6V4a6Fv +3sdjQBFc6TeL/B3b9F3dT7U8Gog0W2P04IiXsQnBKuLYoY53QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjY96ZRkjBmfo7l7W//POBSH5dNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjlhOWRkMjAtM2Y3MS0z ZGU5LTk3MjMtN2YzMzBjNTg3MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6IpiRnFj5WmeYOzZzXVrxd5izD6MEye2p18b4px1+z61qkqu1T7fbx l1tPTEE2egi4sP8Yfk6kBlopah4x2vSkBvYWYFIC2VnQ1jVUmoC+doo5A2LmJeAi 0A1u2G7M38Z7zlizd18EYzYaKPyHlUcpm3X2jGyl0szDNlk2RVQnUTubx0JaPg+a 28pfyOM1h2DV5sNKaPl0ZIDbGmHHqhD3Y2b0XkApf/dbkr+viUIUYbBxOr9HhjtW PWEIN2OLH9pXfn2zcP/lZdwGE7Vzu1TcC7RqrUqG/+aE6Aiy6fSpH2/vdePYg/qF t0J9w8GnQDgGLa4V7YIvWgeHlvCAOgE= -----END CERTIFICATE-----Generated at Mon Oct 20 20:23:11 2025 by rpki-client