$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/775456b7-aced-3875-b48d-e18040e4e518.roa File: 775456b7-aced-3875-b48d-e18040e4e518.roa (raw, json) Hash identifier: Yr4MwEqG8W6b+fqixn37jc9uExAS9M/8iKW6R9a0yRg= Subject key identifier: 07:AD:AC:B3:58:CD:AC:43:A7:9E:E4:E2:C5:2D:3C:8F:6E:7D:69:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67974DF0D440DDAC2CEF5E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/775456b7-aced-3875-b48d-e18040e4e518.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.148.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:4d:f0:d4:40:dd:ac:2c:ef:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=4e49bdbe-015f-4f24-a83e-8ae4f9b2e723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d7:c2:e5:6e:b2:1c:84:00:cb:e1:64:16:0e: 48:fb:09:7e:4f:bb:62:ee:59:8f:33:47:87:a3:97: 52:3a:de:4c:52:df:e7:af:a4:6b:a4:c4:20:16:4d: 73:d4:a4:85:8e:a4:54:80:64:0a:bd:c9:99:00:39: fa:cf:18:d6:7a:5f:48:1f:03:eb:9a:ba:36:6a:38: 83:cd:c0:61:4c:fa:29:56:b1:28:18:fc:0e:7f:0a: 76:bd:79:d0:a5:9c:3d:bd:5f:d2:e4:4a:00:01:4b: 50:74:90:bb:bf:e4:3b:a2:6b:36:d2:da:33:01:30: 23:f8:64:84:7f:c0:6f:e2:fe:b1:bd:d8:29:aa:66: dc:99:fe:9b:a2:60:a3:62:d5:d4:00:09:a6:7d:6a: 46:c7:b0:d2:01:46:55:41:58:9b:ef:a2:73:da:6a: 8b:c1:95:d5:77:78:9b:58:91:9a:33:57:90:4f:e8: 9e:95:9b:89:e0:66:d7:76:a2:c6:97:94:9d:50:f0: aa:31:29:a7:ad:c7:80:9b:f5:6a:e4:91:80:07:b3: de:f7:76:16:30:2a:c7:1c:12:ea:3d:a9:18:51:cd: ee:cc:93:db:25:1d:c2:56:93:e7:52:5d:db:81:79: bc:31:84:cf:ec:f5:27:48:7d:66:42:09:c1:17:d2: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AD:AC:B3:58:CD:AC:43:A7:9E:E4:E2:C5:2D:3C:8F:6E:7D:69:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/775456b7-aced-3875-b48d-e18040e4e518.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.148.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:5a:57:18:39:5b:19:74:73:aa:87:29:83:18:28:34:06:53: 44:2a:46:54:a9:f8:db:67:43:62:d1:76:73:46:c2:49:bd:4d: 67:03:77:bb:0e:4c:2c:92:0f:30:ee:e5:b1:62:20:03:5f:e9: 33:df:59:a3:8a:3d:70:18:81:35:64:88:f8:3f:6b:61:57:1b: 28:e1:48:bb:6b:c1:fc:ac:1a:51:4f:98:0a:84:d2:64:d6:52: 11:b2:d5:a8:00:71:70:16:53:73:32:bc:d8:96:bb:f1:60:f3: 3c:d3:49:00:29:26:03:a7:0e:f4:cd:e0:40:49:9d:9d:1f:92: e0:07:83:25:82:bd:e4:e9:72:78:2f:92:fa:c8:b9:a5:7e:89: 22:f7:9a:da:fd:9f:fe:12:6c:ac:9c:fd:df:b9:fc:40:57:a5: 5e:fa:c3:65:0b:7f:ca:46:b2:a5:14:9d:00:34:49:23:03:4c: 13:12:42:de:3e:81:33:f7:b7:2b:d6:a8:fa:5c:b1:ed:a1:c3: 8d:50:d9:2e:91:34:c5:03:c8:a6:db:a3:9d:d1:6d:21:b1:84: 90:97:90:97:61:08:8a:4b:47:17:45:b7:7d:f2:cd:5b:ad:aa: dd:b7:e8:39:ab:66:9e:cf:9b:7a:b5:6a:2e:18:26:ae:8c:c0: 79:e2:24:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl03w1EDdrCzvXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NGU0OWJkYmUtMDE1Zi00ZjI0LWE4M2UtOGFlNGY5YjJlNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9fC5W6yHIQAy+FkFg5I+wl+T7ti7lmPM0eH o5dSOt5MUt/nr6RrpMQgFk1z1KSFjqRUgGQKvcmZADn6zxjWel9IHwPrmro2ajiD zcBhTPopVrEoGPwOfwp2vXnQpZw9vV/S5EoAAUtQdJC7v+Q7oms20tozATAj+GSE f8Bv4v6xvdgpqmbcmf6bomCjYtXUAAmmfWpGx7DSAUZVQVib76Jz2mqLwZXVd3ib WJGaM1eQT+ielZuJ4GbXdqLGl5SdUPCqMSmnrceAm/Vq5JGAB7Pe93YWMCrHHBLq PakYUc3uzJPbJR3CVpPnUl3bgXm8MYTP7PUnSH1mQgnBF9Kf4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAetrLNYzaxDp57k4sUtPI9ufWk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzc1NDU2YjctYWNlZC0z ODc1LWI0OGQtZTE4MDQwZTRlNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpaVxg5Wxl0c6qHKYMYKDQGU0QqRlSp+NtnQ2LRdnNGwkm9TWcDd7sO TCySDzDu5bFiIANf6TPfWaOKPXAYgTVkiPg/a2FXGyjhSLtrwfysGlFPmAqE0mTW UhGy1agAcXAWU3MyvNiWu/Fg8zzTSQApJgOnDvTN4EBJnZ0fkuAHgyWCveTpcngv kvrIuaV+iSL3mtr9n/4SbKyc/d+5/EBXpV76w2ULf8pGsqUUnQA0SSMDTBMSQt4+ gTP3tyvWqPpcse2hw41Q2S6RNMUDyKbbo53RbSGxhJCXkJdhCIpLRxdFt33yzVut qt236DmrZp7Pm3q1ai4YJq6MwHniJAA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:58 2025 by rpki-client