$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7952b232-2166-3b48-9296-d28e96a2e8ca.roa File: 7952b232-2166-3b48-9296-d28e96a2e8ca.roa (raw, json) Hash identifier: 1uzf0G80IYghUIs4QRYgMbo2sJaJ/DJ3bhlcZ0bDkDo= Subject key identifier: 97:14:65:48:2D:4D:27:40:4B:0F:A7:02:5B:19:A9:5E:6D:15:07:8C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67978F52BCB5F846A0499660 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7952b232-2166-3b48-9296-d28e96a2e8ca.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.147.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:8f:52:bc:b5:f8:46:a0:49:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=0085c1b1-26a9-4f3c-810a-b9266f3fdc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:b6:c1:34:ba:75:ab:2d:ce:71:ec:5b:37: 0c:54:53:f2:33:81:d5:0b:4d:e1:2b:03:b6:a0:54: cb:1f:60:39:8d:b5:8a:de:f6:d7:d6:0d:c5:6d:2f: 47:b2:9a:06:a8:ee:21:41:8b:b8:61:52:ce:c5:90: cb:95:bc:fe:09:f4:29:1e:36:99:66:d5:bd:f5:0b: fe:9b:47:84:49:68:f3:f2:a2:d8:7f:37:85:3a:29: 8f:5e:4b:f1:92:29:22:7c:59:2c:50:e4:ce:fc:7a: 54:39:04:6f:3a:b2:5d:56:5b:68:8e:7b:40:d3:f5: 11:75:01:58:ce:95:56:c1:db:bf:cd:c0:42:45:04: e3:e5:72:f2:1d:60:2b:21:cd:d3:4f:4a:3f:bf:03: 55:48:60:f5:70:1b:86:2a:c5:fb:dd:95:51:23:82: be:02:84:a2:f6:19:6a:90:e2:ca:12:ee:e2:5b:ba: e7:10:54:ed:e6:96:04:ac:d8:4e:f9:7e:36:55:6d: 8f:d6:2b:27:0e:e8:05:ca:d4:6a:8f:bd:9d:4d:a6: 59:6c:1a:e8:dd:da:ed:39:b9:d9:08:76:9c:e1:96: 95:5e:c5:93:77:9e:ac:b5:de:18:4f:42:2e:26:ce: a7:31:28:7e:b0:f7:38:ca:3f:9b:12:6e:c6:af:43: eb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:14:65:48:2D:4D:27:40:4B:0F:A7:02:5B:19:A9:5E:6D:15:07:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7952b232-2166-3b48-9296-d28e96a2e8ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:bf:89:08:2d:2c:6c:d5:c7:30:27:bc:d7:6d:1b:a9:e6:47: 54:34:2c:72:f5:ec:6c:44:1d:e2:08:4a:6d:20:3b:96:88:25: ff:bf:d9:7a:f0:fe:63:01:20:9d:31:ce:e1:70:98:ac:f2:0d: ea:d5:28:6f:33:0d:35:19:9b:94:cb:a6:89:22:1f:91:8b:14: 0d:f5:7d:52:2a:63:a6:63:cb:34:49:6b:e5:5a:fe:eb:4d:19: e3:2e:82:f5:69:c0:cd:20:fb:c8:46:f6:72:91:32:1d:36:bb: ca:01:99:23:2d:fa:9f:b7:77:91:c9:5a:c9:eb:4d:8d:55:49: 67:16:a5:f2:dc:be:55:70:32:eb:09:1c:27:13:67:9d:86:96: 5e:e9:a2:a5:c2:e8:03:6d:5e:05:bd:d0:68:4d:39:9b:8f:ab: a3:d6:8b:7f:a6:a8:fd:9a:17:63:fa:2a:71:ec:cc:76:da:c6: fd:5a:7d:5a:e4:bf:6c:cd:54:90:33:9c:e1:b8:a1:9d:ba:de: 74:c2:77:56:cf:e7:29:ba:a2:ac:76:05:66:6d:cf:e7:67:16: c3:5c:2a:f8:40:bc:1c:94:df:20:bf:50:68:1b:19:e5:d0:aa: d1:05:1c:5f:02:09:3e:d6:b9:6c:77:bc:6c:dc:75:cf:8d:42: 71:bf:66:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl49SvLX4RqBJlmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MDA4NWMxYjEtMjZhOS00ZjNjLTgxMGEtYjkyNjZmM2ZkYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJa2wTS6dastznHsWzcMVFPyM4HVC03hKwO2 oFTLH2A5jbWK3vbX1g3FbS9HspoGqO4hQYu4YVLOxZDLlbz+CfQpHjaZZtW99Qv+ m0eESWjz8qLYfzeFOimPXkvxkikifFksUOTO/HpUOQRvOrJdVltojntA0/URdQFY zpVWwdu/zcBCRQTj5XLyHWArIc3TT0o/vwNVSGD1cBuGKsX73ZVRI4K+AoSi9hlq kOLKEu7iW7rnEFTt5pYErNhO+X42VW2P1isnDugFytRqj72dTaZZbBro3drtObnZ CHac4ZaVXsWTd56std4YT0IuJs6nMSh+sPc4yj+bEm7Gr0PrJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcUZUgtTSdASw+nAlsZqV5tFQeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzk1MmIyMzItMjE2Ni0z YjQ4LTkyOTYtZDI4ZTk2YTJlOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+/iQgtLGzVxzAnvNdtG6nmR1Q0LHL17GxEHeIISm0gO5aIJf+/2Xrw /mMBIJ0xzuFwmKzyDerVKG8zDTUZm5TLpokiH5GLFA31fVIqY6ZjyzRJa+Va/utN GeMugvVpwM0g+8hG9nKRMh02u8oBmSMt+p+3d5HJWsnrTY1VSWcWpfLcvlVwMusJ HCcTZ52Gll7poqXC6ANtXgW90GhNOZuPq6PWi3+mqP2aF2P6KnHszHbaxv1afVrk v2zNVJAznOG4oZ263nTCd1bP5ym6oqx2BWZtz+dnFsNcKvhAvByU3yC/UGgbGeXQ qtEFHF8CCT7WuWx3vGzcdc+NQnG/Zl0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:38:56 2025 by rpki-client