$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8280e08a-ebbb-3ea7-99a3-d450dd18c02e.roa File: 8280e08a-ebbb-3ea7-99a3-d450dd18c02e.roa (raw, json) Hash identifier: sOHfVU9HcWsHE/5Ay8GcT/TT7MLjJvQyaF4AC38NmOQ= Subject key identifier: 0C:55:93:9A:74:03:AB:17:44:39:A4:DD:BC:21:14:8B:C1:29:BA:6F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B864CB497DCE011F3D48F9200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8280e08a-ebbb-3ea7-99a3-d450dd18c02e.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 19527 IP address blocks: 34.190.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b4:97:dc:e0:11:f3:d4:8f:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=fab220f9-843a-472e-89dc-9bd0f56b7c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e9:13:af:45:35:57:67:3b:c6:96:84:85:7a: d9:01:47:9e:74:6b:50:8d:68:19:fe:7f:0b:a5:4f: 09:80:a6:67:e8:b5:f8:ff:7d:37:77:ee:db:11:bd: 0d:8e:a8:47:8d:75:44:9c:cd:83:b2:6c:28:da:d1: 40:6a:86:37:90:71:45:8c:57:01:2c:66:82:cc:3f: d2:73:c1:55:cc:0f:c1:ea:4a:1f:00:49:f3:62:f4: a9:87:5a:2b:f9:b0:b8:1d:6f:7b:d2:23:b7:b9:c4: f2:70:b1:69:37:df:38:0e:f9:7f:b2:58:95:7a:e5: a2:75:ab:d6:bc:9a:8b:f1:06:7c:73:b9:61:4c:8e: 20:88:f6:88:92:9d:57:3e:c3:44:a7:df:ec:72:6f: 41:11:a1:56:73:c0:2d:a6:41:0a:ae:a1:66:4a:6e: db:96:c9:4e:d4:4d:b7:db:ca:f3:c0:98:cb:09:53: 3d:c6:ea:49:29:30:e5:af:a2:d9:e7:1b:5e:f7:84: 3f:d6:e4:3e:6f:d7:db:f9:1a:33:7a:76:55:a5:f4: 93:3b:e7:8e:cd:2a:74:33:d8:f3:d2:73:4c:41:8a: c8:6d:30:ea:07:a6:29:e3:45:94:91:55:ac:de:0c: 44:76:bc:8a:0d:0b:d3:e2:e7:a3:b9:e5:17:e7:9c: 87:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:55:93:9A:74:03:AB:17:44:39:A4:DD:BC:21:14:8B:C1:29:BA:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8280e08a-ebbb-3ea7-99a3-d450dd18c02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d5:33:45:e7:a1:81:d3:a1:9f:1e:86:4d:9d:89:11:6f:00: 96:e0:a0:65:50:60:7d:cb:0b:3c:24:9c:03:af:61:5f:84:91: 3c:89:f4:d6:51:46:24:86:bd:9f:eb:31:34:f1:20:ed:c6:b8: 3d:da:bf:37:85:3a:df:29:d1:04:b5:0c:40:53:9f:a1:5d:ad: fd:30:0a:92:65:fb:e2:27:d5:0f:c6:9b:c2:50:9c:c5:d9:26: 60:d4:ee:78:02:83:51:a9:9f:21:2c:17:fa:f3:25:31:94:52: 59:02:17:58:a2:17:1a:7d:33:c6:e8:2c:9c:cf:89:aa:e8:7b: 7d:f9:6b:25:a7:1d:af:40:33:c8:83:b1:26:c1:54:83:d8:a8: 7c:9a:5e:ca:c4:78:96:57:0b:e6:78:d7:dd:a0:9e:12:8e:1e: c9:8f:0e:a4:0f:20:99:00:1b:c0:df:eb:e8:4a:6f:ff:4b:80: 7b:38:23:46:3f:7b:60:a2:fa:26:5f:3d:c3:30:17:7a:87:90: 0b:54:e6:e0:75:c4:02:21:da:d6:87:b2:47:54:66:0a:b0:33: 7b:25:c6:a8:5e:2f:47:b2:83:f3:44:2b:8c:bf:2d:c8:64:55: 1c:d6:a5:76:c1:dc:0f:f2:85:63:ed:88:28:d7:e4:a9:45:61: 0e:a0:d9:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTLSX3OAR89SPkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk ZmFiMjIwZjktODQzYS00NzJlLTg5ZGMtOWJkMGY1NmI3YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+kTr0U1V2c7xpaEhXrZAUeedGtQjWgZ/n8L pU8JgKZn6LX4/303d+7bEb0NjqhHjXVEnM2Dsmwo2tFAaoY3kHFFjFcBLGaCzD/S c8FVzA/B6kofAEnzYvSph1or+bC4HW970iO3ucTycLFpN984Dvl/sliVeuWidavW vJqL8QZ8c7lhTI4giPaIkp1XPsNEp9/scm9BEaFWc8AtpkEKrqFmSm7blslO1E23 28rzwJjLCVM9xupJKTDlr6LZ5xte94Q/1uQ+b9fb+RozenZVpfSTO+eOzSp0M9jz 0nNMQYrIbTDqB6Yp40WUkVWs3gxEdryKDQvT4uejueUX55yH/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxVk5p0A6sXRDmk3bwhFIvBKbpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODI4MGUwOGEtZWJiYi0z ZWE3LTk5YTMtZDQ1MGRkMThjMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELVM0XnoYHToZ8ehk2diRFvAJbgoGVQYH3LCzwknAOvYV+EkTyJ9NZR RiSGvZ/rMTTxIO3GuD3avzeFOt8p0QS1DEBTn6Fdrf0wCpJl++In1Q/Gm8JQnMXZ JmDU7ngCg1GpnyEsF/rzJTGUUlkCF1iiFxp9M8boLJzPiaroe335ayWnHa9AM8iD sSbBVIPYqHyaXsrEeJZXC+Z4192gnhKOHsmPDqQPIJkAG8Df6+hKb/9LgHs4I0Y/ e2Ci+iZfPcMwF3qHkAtU5uB1xAIh2taHskdUZgqwM3slxqheL0eyg/NEK4y/Lchk VRzWpXbB3A/yhWPtiCjX5KlFYQ6g2R8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:02 2025 by rpki-client