$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756f9f1e-5648-3aae-9d0d-2d58ad24e58f.roa File: 756f9f1e-5648-3aae-9d0d-2d58ad24e58f.roa (raw, json) Hash identifier: Sc2uWAXPwLLPIt8R22mQBby/3C+AG9QlFWrx5TQTbL0= Subject key identifier: F5:3A:2E:8E:D7:E9:D6:05:B2:EB:70:CA:74:AF:A3:27:32:58:63:05 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679769F701C9E92D22EFAD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756f9f1e-5648-3aae-9d0d-2d58ad24e58f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.96.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:69:f7:01:c9:e9:2d:22:ef:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=85c3ea06-43dc-4949-9ef9-749358d1ae49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8d:03:18:c9:d3:bd:fd:87:d4:aa:48:73:cc: 5b:94:39:0f:92:19:70:dd:4d:8c:bf:b9:99:ef:31: e8:f0:ca:9e:24:05:3c:b8:69:e0:d5:2a:61:f2:bc: 4c:99:ce:1a:63:96:5d:f4:5d:e0:39:35:63:9b:96: d2:6c:9a:3c:fc:e3:b6:79:fe:f1:00:78:b3:57:f5: bb:02:5e:0e:82:be:b3:ca:ff:a5:7d:68:e7:ad:6e: 8d:76:8c:cb:6a:0d:85:da:ac:b4:48:6d:ff:60:51: 96:41:bf:d5:a9:2f:d0:32:1a:07:90:81:cc:06:88: 99:bd:56:f8:85:1e:78:82:62:5b:55:cf:8d:4e:06: 39:59:09:1f:8e:54:6e:4c:f4:6e:66:55:ea:12:6c: 76:e6:98:0c:e2:f5:b6:1d:97:41:28:ad:ba:4c:10: 1d:18:2d:ea:3f:21:7a:09:60:77:51:62:b0:9f:76: b5:14:40:e1:c7:41:47:0f:c8:ca:b4:3a:4d:90:70: 23:6e:51:aa:a8:e9:f1:a6:3c:57:58:fa:d1:62:50: 1a:53:2a:2d:8a:35:9f:fc:04:8a:b3:4f:d6:2e:9e: 88:75:bc:61:43:23:ce:1a:5b:8a:05:c6:18:71:44: 75:4f:16:f2:f0:02:7e:5d:50:e7:45:bb:e3:ed:1a: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3A:2E:8E:D7:E9:D6:05:B2:EB:70:CA:74:AF:A3:27:32:58:63:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756f9f1e-5648-3aae-9d0d-2d58ad24e58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b7:f0:ab:47:57:48:e2:88:d5:81:04:e2:75:60:99:cd:d3: 28:2f:5f:d2:a4:0e:21:cb:c6:08:04:c3:93:3a:8e:95:89:ff: f6:21:9d:6b:4e:f6:ef:11:81:83:10:5d:8f:1f:0c:33:48:90: b3:fa:47:46:e3:aa:b8:98:eb:67:0e:0c:ed:3e:62:c4:5a:f9: 5d:a6:4d:88:97:95:42:4f:2c:bd:47:1b:3d:99:75:ed:0e:54: cc:40:78:d6:83:08:ae:4a:eb:b5:51:e9:33:bd:72:ff:5d:1d: d6:7f:56:88:0c:ef:5d:f0:3a:77:6d:70:84:ab:38:ae:f8:d1: 62:0d:14:13:8b:b8:fd:d0:a7:76:fa:57:80:20:9a:73:00:5c: 53:9f:a7:95:2d:e6:e1:3f:8c:80:a8:57:25:44:90:82:af:57: 45:b9:49:a6:22:4a:21:77:e4:f8:aa:c8:50:81:29:36:17:21: b3:72:10:cd:d4:89:8f:27:1b:a8:bf:43:18:81:91:4d:72:4c: b7:9b:93:7e:4d:ea:ca:7a:29:0f:05:d2:44:77:48:b9:01:b0: 1e:84:23:ab:68:d3:4a:e3:80:0f:4b:7d:5d:5c:32:ad:62:d4: 27:78:e9:97:9d:12:c6:de:db:c0:79:c5:bb:9b:7c:e7:9d:76: 40:7c:63:09 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtnl2n3AcnpLSLvrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODVjM2VhMDYtNDNkYy00OTQ5LTllZjktNzQ5MzU4ZDFhZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI0DGMnTvf2H1KpIc8xblDkPkhlw3U2Mv7mZ 7zHo8MqeJAU8uGng1Sph8rxMmc4aY5Zd9F3gOTVjm5bSbJo8/OO2ef7xAHizV/W7 Al4Ogr6zyv+lfWjnrW6NdozLag2F2qy0SG3/YFGWQb/VqS/QMhoHkIHMBoiZvVb4 hR54gmJbVc+NTgY5WQkfjlRuTPRuZlXqEmx25pgM4vW2HZdBKK26TBAdGC3qPyF6 CWB3UWKwn3a1FEDhx0FHD8jKtDpNkHAjblGqqOnxpjxXWPrRYlAaUyotijWf/ASK s0/WLp6IdbxhQyPOGluKBcYYcUR1Txby8AJ+XVDnRbvj7RpWFwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPU6Lo7X6dYFsutwynSvoycyWGMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzU2ZjlmMWUtNTY0OC0z YWFlLTlkMGQtMmQ1OGFkMjRlNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEImAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAN7fwq0dXSOKI1YEE4nVgmc3TKC9f0qQOIcvGCATDkzqOlYn/9iGda072 7xGBgxBdjx8MM0iQs/pHRuOquJjrZw4M7T5ixFr5XaZNiJeVQk8svUcbPZl17Q5U zEB41oMIrkrrtVHpM71y/10d1n9WiAzvXfA6d21whKs4rvjRYg0UE4u4/dCndvpX gCCacwBcU5+nlS3m4T+MgKhXJUSQgq9XRblJpiJKIXfk+KrIUIEpNhchs3IQzdSJ jycbqL9DGIGRTXJMt5uTfk3qynopDwXSRHdIuQGwHoQjq2jTSuOAD0t9XVwyrWLU J3jpl50Sxt7bwHnFu5t85512QHxjCQ== -----END CERTIFICATE-----Generated at Mon Oct 20 18:18:49 2025 by rpki-client