$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82fc4d28-9752-3c1b-bc83-b94e22707636.roa File: 82fc4d28-9752-3c1b-bc83-b94e22707636.roa (raw, json) Hash identifier: CC6txzpQkIYLMFpXDIXjdmoLTL5joFrM82wv00TH6Ls= Subject key identifier: 35:12:2D:F5:B2:B5:03:88:95:22:DC:41:3E:D3:B9:9F:33:43:1A:B8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679769053CE12FBF6D739800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82fc4d28-9752-3c1b-bc83-b94e22707636.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.3.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:69:05:3c:e1:2f:bf:6d:73:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3282fa4b-d014-4a93-b2c1-563e274f6d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:48:c5:c1:66:52:25:fd:d1:68:ea:a2:13: f1:4e:95:ba:5f:fa:84:bb:3c:da:1e:67:fc:cc:f8: 65:ad:bf:a0:13:c6:93:57:2b:4d:ba:37:5b:07:f3: a9:72:89:7c:2a:cf:d8:3d:25:59:a5:f9:b1:f0:2a: 4f:6a:57:4e:5e:0b:27:ee:2c:78:63:a9:d7:9d:6e: e7:46:75:d9:4e:31:e3:86:41:c2:f3:4f:fe:b4:18: 40:5c:c8:e0:5d:d8:ef:c8:85:15:1e:88:e6:5d:c8: 7d:12:7b:54:a4:06:61:2b:0d:63:08:84:be:14:e4: 74:0d:c4:0a:73:7e:5d:fb:0d:7c:6b:c8:48:5d:b9: 6f:6f:7c:cc:26:f1:f3:2e:c8:4f:32:89:f6:c8:ed: 18:e4:82:5c:d2:47:37:e2:77:ea:04:32:cc:54:59: c8:4a:4f:5f:c6:31:51:0f:6a:17:95:95:a5:a9:cc: 7d:e5:4b:9a:d9:4d:3b:a9:98:5a:0c:2d:69:3f:46: 58:c7:b7:67:f7:9f:39:eb:ef:b6:c2:51:0a:8d:10: 72:b9:02:d8:4a:e4:1f:c9:ba:68:1e:64:6d:b3:11: c3:be:09:bb:7b:db:60:1d:cb:b1:85:96:ef:fd:e6: 70:64:30:eb:78:9e:80:67:77:af:b1:cc:d4:20:52: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:12:2D:F5:B2:B5:03:88:95:22:DC:41:3E:D3:B9:9F:33:43:1A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82fc4d28-9752-3c1b-bc83-b94e22707636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4a:3a:e0:5d:f4:6a:7b:b4:0f:49:f2:81:a8:6b:94:d9:a9: 1c:1f:26:2d:dc:af:bd:b7:8f:a3:4e:63:e8:bc:15:60:9e:f6: ea:77:17:9f:01:1a:ee:98:15:43:cd:04:3d:6f:af:8a:be:4f: f0:f5:83:dc:98:25:2a:f6:f5:f2:d3:a0:16:14:90:50:8d:1d: cb:6e:1d:ab:87:92:7a:df:61:a5:c4:c7:30:e5:d0:f3:4d:20: 11:41:dc:6c:a8:12:43:35:ec:7b:f6:cb:ea:27:f3:4a:b3:b2: c9:19:32:e7:0a:52:2a:be:30:6f:39:e3:46:0f:73:82:7d:10: 1d:d1:c1:59:04:bd:a4:72:2f:ce:b4:e0:c6:2c:04:78:6a:02: 0b:b5:36:5d:cd:73:74:c3:6c:e6:a9:67:c6:ca:a8:0d:4f:99: 21:2e:7c:c3:c7:02:74:dd:0d:07:28:a3:72:3c:3c:76:0e:07: 9c:56:c9:83:79:02:65:63:f8:dc:13:60:43:11:79:f2:ac:a0: 0c:94:8f:bb:84:d4:1c:da:0b:a4:8a:e8:c7:55:52:3e:4a:24: e6:ad:ab:96:15:fd:63:d8:07:41:2a:6f:29:f3:39:da:45:57: ee:66:e1:bd:70:ba:b8:41:54:5e:1d:b1:c0:e8:71:28:07:ff: bf:2d:76:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2kFPOEvv21zmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MzI4MmZhNGItZDAxNC00YTkzLWIyYzEtNTYzZTI3NGY2ZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoZIxcFmUiX90WjqohPxTpW6X/qEuzzaHmf8 zPhlrb+gE8aTVytNujdbB/Opcol8Ks/YPSVZpfmx8CpPaldOXgsn7ix4Y6nXnW7n RnXZTjHjhkHC80/+tBhAXMjgXdjvyIUVHojmXch9EntUpAZhKw1jCIS+FOR0DcQK c35d+w18a8hIXblvb3zMJvHzLshPMon2yO0Y5IJc0kc34nfqBDLMVFnISk9fxjFR D2oXlZWlqcx95Uua2U07qZhaDC1pP0ZYx7dn95856++2wlEKjRByuQLYSuQfybpo HmRtsxHDvgm7e9tgHcuxhZbv/eZwZDDreJ6AZ3evsczUIFIKkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUSLfWytQOIlSLcQT7TuZ8zQxq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODJmYzRkMjgtOTc1Mi0z YzFiLWJjODMtYjk0ZTIyNzA3NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIgMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtKOuBd9Gp7tA9J8oGoa5TZqRwfJi3cr723j6NOY+i8FWCe9up3F58B Gu6YFUPNBD1vr4q+T/D1g9yYJSr29fLToBYUkFCNHctuHauHknrfYaXExzDl0PNN IBFB3GyoEkM17Hv2y+on80qzsskZMucKUiq+MG8540YPc4J9EB3RwVkEvaRyL860 4MYsBHhqAgu1Nl3Nc3TDbOapZ8bKqA1PmSEufMPHAnTdDQcoo3I8PHYOB5xWyYN5 AmVj+NwTYEMRefKsoAyUj7uE1BzaC6SK6MdVUj5KJOatq5YV/WPYB0EqbynzOdpF V+5m4b1wurhBVF4dscDocSgH/78tdv8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:33 2025 by rpki-client