$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa File: 839e0e55-123b-3665-bb2c-36be8897a21f.roa (raw, json) Hash identifier: Fe/5LuuhQddwlyfx+5VcPoKAlcOwYmIzItpgnzo+gRg= Subject key identifier: 41:04:7A:AF:A9:91:98:20:93:4C:FA:DC:DC:10:10:EC:DB:D6:80:6E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D619F6A494EC17584F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.38.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d6:19:f6:a4:94:ec:17:58:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=bd24ae3d-576c-401e-a4ce-e4dc8a9900e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:53:37:cf:68:27:8b:1f:e7:e9:25:65:fc: bd:67:55:09:a4:4d:24:53:73:b2:f1:24:88:e5:75: 7e:8b:28:fc:78:49:c6:e1:ef:d6:fd:28:88:fc:f3: ed:53:8b:ad:32:b7:02:69:91:3c:d4:e3:95:28:7b: 74:04:a7:2f:5e:0a:76:3a:c3:fb:5e:ca:5d:6d:c0: 87:e7:e4:51:36:1b:41:29:99:c4:20:31:f9:c4:a4: b2:76:39:a7:d4:c0:3c:70:5e:d4:93:1d:16:b2:db: 9f:77:44:6c:6e:b1:09:2e:5b:8d:f5:62:e2:e5:c9: 5f:28:33:43:bb:05:4f:c6:7a:ed:de:13:5b:f0:28: 5b:9c:55:5a:71:30:50:71:b1:8a:07:e3:1b:7e:44: ce:d0:b9:d5:8a:26:2d:8f:c1:ac:98:cd:88:af:0e: 71:f9:1b:f1:ff:0f:2a:33:d8:7a:49:c3:1f:49:ee: ac:e7:8b:ed:88:26:84:55:fc:ba:38:a8:d2:b8:07: eb:3b:42:1c:ca:38:18:30:c6:3e:26:3e:ec:f5:34: 43:53:76:9f:2e:d0:cc:9d:eb:ad:94:47:c0:6b:7d: cb:1d:58:14:92:70:cb:13:da:81:6f:99:11:35:bc: 49:cd:ed:c9:7f:57:fa:33:16:ad:de:71:fc:a7:2b: 7e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:04:7A:AF:A9:91:98:20:93:4C:FA:DC:DC:10:10:EC:DB:D6:80:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.38.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:9d:db:02:56:48:3d:69:76:87:b8:b0:fb:56:4c:b7:56:ca: 2e:94:93:04:9f:52:0e:48:ea:43:71:f5:de:24:14:cd:cc:31: ee:45:6b:29:79:8f:19:e3:32:33:dd:d2:13:be:21:e8:16:db: 49:c1:73:a1:8d:90:79:19:27:3f:dc:5a:4f:21:10:e6:ff:80: b4:8b:8d:ac:ca:f9:19:23:73:22:2c:d9:d0:f2:41:10:36:22: a5:f2:4f:e1:4d:85:45:b7:45:da:68:56:17:cb:8b:9d:9e:11: 6e:53:82:68:ab:4e:51:e8:e5:36:74:08:96:70:35:f2:1d:4a: 01:62:fb:6b:74:a1:e7:b6:5c:27:58:17:58:f5:1e:f1:74:1e: 3c:a4:aa:62:f5:de:d8:67:90:51:55:9e:02:29:fa:31:63:50: a7:3e:9d:f4:b7:1b:c1:77:f9:11:60:fd:2e:d0:23:60:87:9c: a6:9d:00:79:e0:28:6d:e1:a7:aa:b6:8a:45:86:e8:e1:49:91: ce:8b:75:2e:3b:fc:09:91:53:f2:2e:6d:8c:ab:ed:0c:23:4d: 37:99:b2:df:ca:c7:3f:db:76:cf:20:01:e0:54:85:a0:b4:04: c1:2d:00:1a:f5:67:20:a2:97:bd:35:28:f8:36:32:b0:2b:eb: 38:40:5e:7e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtnl9YZ9qSU7BdYTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YmQyNGFlM2QtNTc2Yy00MDFlLWE0Y2UtZTRkYzhhOTkwMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquJTN89oJ4sf5+klZfy9Z1UJpE0kU3Oy8SSI 5XV+iyj8eEnG4e/W/SiI/PPtU4utMrcCaZE81OOVKHt0BKcvXgp2OsP7XspdbcCH 5+RRNhtBKZnEIDH5xKSydjmn1MA8cF7Ukx0Wstufd0RsbrEJLluN9WLi5clfKDND uwVPxnrt3hNb8ChbnFVacTBQcbGKB+MbfkTO0LnViiYtj8GsmM2Irw5x+Rvx/w8q M9h6ScMfSe6s54vtiCaEVfy6OKjSuAfrO0IcyjgYMMY+Jj7s9TRDU3afLtDMneut lEfAa33LHVgUknDLE9qBb5kRNbxJze3Jf1f6Mxat3nH8pyt+dwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEEEeq+pkZggk0z63NwQEOzb1oBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODM5ZTBlNTUtMTIzYi0z NjY1LWJiMmMtMzZiZTg4OTdhMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIiYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEApZ3bAlZIPWl2h7iw+1ZMt1bKLpSTBJ9SDkjqQ3H13iQUzcwx7kVrKXmP GeMyM93SE74h6BbbScFzoY2QeRknP9xaTyEQ5v+AtIuNrMr5GSNzIizZ0PJBEDYi pfJP4U2FRbdF2mhWF8uLnZ4RblOCaKtOUejlNnQIlnA18h1KAWL7a3Sh57ZcJ1gX WPUe8XQePKSqYvXe2GeQUVWeAin6MWNQpz6d9LcbwXf5EWD9LtAjYIecpp0AeeAo beGnqraKRYbo4UmRzot1Ljv8CZFT8i5tjKvtDCNNN5my38rHP9t2zyAB4FSFoLQE wS0AGvVnIKKXvTUo+DYysCvrOEBefg== -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:27 2025 by rpki-client