$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ac4aadc-1ee2-34cf-b27b-4b7ac46f8fe4.roa File: 7ac4aadc-1ee2-34cf-b27b-4b7ac46f8fe4.roa (raw, json) Hash identifier: rJpLSsZiwjsQ3lhpKjLuBZawTBqSelQIGTgshbiTc/o= Subject key identifier: 54:D5:C1:C6:01:C0:52:A1:F3:14:3C:A2:6E:8C:B4:2A:16:5A:FD:BF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797E26F254AEC3375BC9F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ac4aadc-1ee2-34cf-b27b-4b7ac46f8fe4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.89.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e2:6f:25:4a:ec:33:75:bc:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d2667ac5-1641-43e4-be59-3df9685bf74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:14:08:4f:47:70:d1:8b:e8:f8:ee:37:d9:e5: 07:67:6f:d8:4e:35:72:79:69:6a:66:6a:8f:66:27: eb:8a:bd:0e:1d:67:80:bc:01:5f:81:13:57:7d:be: 50:eb:08:84:59:50:52:61:30:3a:0e:78:bd:15:28: e1:cc:a7:26:8c:4a:fc:92:9a:ee:36:43:53:62:7d: 26:3d:a9:14:e5:fc:d1:2a:9e:e0:f0:11:bd:f7:86: b9:d4:90:89:7b:aa:0d:ae:8d:fd:77:5d:77:71:17: de:2b:c9:aa:1d:00:87:bd:e1:e0:a8:87:15:7c:8c: 85:a3:22:1f:e1:1f:ce:e4:24:73:4a:7d:5c:a2:25: 34:31:64:51:fd:29:a6:cf:dd:41:90:9c:60:11:90: 0b:e3:3d:d7:56:2d:15:af:8d:82:d1:71:09:e6:3c: 52:4e:f3:66:40:4e:4f:c7:62:6d:a6:f7:19:81:45: e1:19:ed:9e:7b:ba:bf:5f:3b:4a:a2:a2:62:80:7e: fb:99:32:eb:95:8a:ba:73:ba:f2:bb:c1:c7:2b:89: d6:8a:d2:d5:4c:ce:5c:23:6b:a1:d1:f0:49:c5:23: 20:f5:74:1c:f3:e3:3c:43:eb:02:c2:c8:c2:8f:b0: 40:4e:8c:8d:82:69:ad:f7:b5:94:52:41:cc:64:c8: 1b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D5:C1:C6:01:C0:52:A1:F3:14:3C:A2:6E:8C:B4:2A:16:5A:FD:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ac4aadc-1ee2-34cf-b27b-4b7ac46f8fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:83:a3:95:1d:b3:bd:70:c6:e5:5e:6a:53:4f:87:4e:03:56: 02:3b:42:90:8e:1f:dc:9b:30:d5:80:ec:95:b8:92:5c:1d:a2: c7:5c:5f:c3:95:92:4d:8b:86:b9:e2:f0:29:1d:00:8b:06:bb: b3:60:2c:6f:8a:b5:84:59:17:ce:c4:7e:f6:7e:d4:06:a7:a2: f5:56:94:cf:9e:f2:e3:c3:7c:92:b5:40:d2:7e:59:2c:7b:20: 33:8f:45:8a:bb:25:20:3b:78:17:f3:10:b3:a8:74:19:45:31: b1:ee:68:cf:2e:50:9d:c0:9f:b9:84:c9:75:7f:bd:74:ac:4e: 31:d1:47:0e:f2:cb:45:51:cf:2a:80:b2:cf:b2:c9:11:dc:6b: 3c:92:a6:e1:96:59:a5:3b:a0:80:1b:7f:39:7e:5c:de:33:b1: 0a:5b:b7:41:1a:b0:4e:02:69:89:27:5c:9d:7e:00:a9:11:a0: 00:53:78:15:5a:c1:a7:6a:49:88:f1:aa:64:6e:3d:fe:c3:9b: 53:d5:8e:3f:48:d0:ab:a8:0c:f3:00:f6:a1:ec:b1:78:da:6c: ed:8c:0e:f6:1c:dc:a2:a3:66:b5:c8:5b:7b:8c:61:f2:48:0d: 9f:4c:32:60:af:b9:e0:dd:50:c9:5a:a3:51:2c:02:77:e4:b7: 5b:87:bb:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+JvJUrsM3W8n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDI2NjdhYzUtMTY0MS00M2U0LWJlNTktM2RmOTY4NWJmNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRQIT0dw0Yvo+O432eUHZ2/YTjVyeWlqZmqP Zifrir0OHWeAvAFfgRNXfb5Q6wiEWVBSYTA6Dni9FSjhzKcmjEr8kpruNkNTYn0m PakU5fzRKp7g8BG994a51JCJe6oNro39d113cRfeK8mqHQCHveHgqIcVfIyFoyIf 4R/O5CRzSn1coiU0MWRR/Smmz91BkJxgEZAL4z3XVi0Vr42C0XEJ5jxSTvNmQE5P x2JtpvcZgUXhGe2ee7q/XztKoqJigH77mTLrlYq6c7ryu8HHK4nWitLVTM5cI2uh 0fBJxSMg9XQc8+M8Q+sCwsjCj7BAToyNgmmt97WUUkHMZMgb+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTVwcYBwFKh8xQ8om6MtCoWWv2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2FjNGFhZGMtMWVlMi0z NGNmLWIyN2ItNGI3YWM0NmY4ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGDo5Uds71wxuVealNPh04DVgI7QpCOH9ybMNWA7JW4klwdosdcX8OV kk2Lhrni8CkdAIsGu7NgLG+KtYRZF87EfvZ+1AanovVWlM+e8uPDfJK1QNJ+WSx7 IDOPRYq7JSA7eBfzELOodBlFMbHuaM8uUJ3An7mEyXV/vXSsTjHRRw7yy0VRzyqA ss+yyRHcazySpuGWWaU7oIAbfzl+XN4zsQpbt0EasE4CaYknXJ1+AKkRoABTeBVa wadqSYjxqmRuPf7Dm1PVjj9I0KuoDPMA9qHssXjabO2MDvYc3KKjZrXIW3uMYfJI DZ9MMmCvueDdUMlao1EsAnfkt1uHuyQ= -----END CERTIFICATE-----Generated at Mon Oct 20 01:59:53 2025 by rpki-client