$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa File: 86bed144-128f-3b1b-8d74-51dbbfc5c638.roa (raw, json) Hash identifier: N+UmxHG4cSccc2sTYw0BeYVfRMVRLgsjaAMuE7MpdHY= Subject key identifier: B4:5A:2D:49:E8:0B:61:66:09:BB:E2:27:40:64:72:42:29:76:F0:62 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797980A06AA9C7F8C268280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.134.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:98:0a:06:aa:9c:7f:8c:26:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=8e0a8aa3-0893-4311-8eb5-6e21e724e2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:83:09:e1:ba:09:77:ed:78:8b:63:da:4d: 86:0c:75:8e:ca:e7:c3:e4:e2:fe:47:95:27:87:01: 22:90:4f:ee:59:0b:07:50:96:69:aa:c3:9f:8c:32: 71:73:46:f3:73:a7:b0:2e:3f:11:aa:b2:19:36:a5: 28:c1:03:be:79:a8:0e:62:e0:fc:95:1e:86:ea:f5: d9:49:2c:bb:7d:71:8e:73:7d:36:58:2b:50:37:a6: cc:f8:cc:da:c8:47:c2:de:c5:a9:f7:7d:e9:3e:e9: e7:ef:84:12:1d:e9:dc:17:4d:25:a7:b5:a1:f7:4b: 46:5f:5a:95:04:f9:42:aa:87:2c:d2:6a:26:63:a4: f8:f6:8f:99:0e:b0:94:98:a7:b8:72:1f:29:14:dd: ff:80:8f:df:54:b9:c5:f8:fc:22:5d:f3:54:50:5e: 2e:88:c8:18:b0:c7:d4:cf:0b:f6:1a:cd:93:a9:d9: 09:21:73:13:cd:65:5b:1a:bd:e6:f3:18:72:c0:85: c9:2a:20:78:82:2f:93:ba:c2:57:a0:fb:7b:71:0c: f2:22:52:2a:a4:92:9d:f9:bd:fe:af:2c:61:25:c0: f4:c9:23:b1:0d:90:0b:eb:8d:94:ec:43:c8:c6:19: 41:3f:82:a0:79:26:42:8c:79:01:0d:91:d0:70:cb: 1d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5A:2D:49:E8:0B:61:66:09:BB:E2:27:40:64:72:42:29:76:F0:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f5:73:5e:56:65:1f:24:6f:d0:6d:65:f2:fa:67:c7:19:1c: 7d:46:e7:96:57:20:b5:6d:20:3e:0e:2e:66:e1:bb:2c:12:36: 71:74:74:8c:3d:8c:0b:65:c9:3d:fe:fc:52:96:11:9b:6f:b3: e9:7e:e5:86:ce:4d:74:cc:af:cc:ed:41:f2:e3:d5:3f:84:85: a8:54:1f:fb:96:bc:52:f9:2c:db:17:49:70:91:4d:61:e0:b2: 7e:80:f7:0a:99:f7:d6:b0:56:b4:dc:48:96:77:00:4a:c2:ba: 79:2a:11:ab:72:9e:eb:cb:cc:89:c7:af:2c:a6:3b:46:c3:e9: 52:08:9d:f2:09:f3:79:bc:a4:06:a4:ea:4a:5d:9a:ba:63:50: ca:87:a1:d9:40:9e:9f:6a:81:81:ae:82:97:9b:6b:3c:16:06: 7f:e5:f2:2d:bd:38:af:15:fb:24:d4:aa:ff:b1:e1:1f:e1:aa: d5:1a:82:cc:fc:0e:9d:01:c4:b8:24:5c:61:de:e0:d9:51:20: f2:5b:89:ea:e1:d2:67:4c:59:a7:78:94:36:47:05:97:2c:f1: 52:96:23:07:6a:fa:99:d2:39:4b:0d:be:18:8c:00:06:7a:73: f8:f1:dd:cd:34:9d:49:dc:00:af:cc:d7:43:33:7f:12:f1:a5: 70:30:d9:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5gKBqqcf4wmgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OGUwYThhYTMtMDg5My00MzExLThlYjUtNmUyMWU3MjRlMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4+DCeG6CXfteItj2k2GDHWOyufD5OL+R5Un hwEikE/uWQsHUJZpqsOfjDJxc0bzc6ewLj8RqrIZNqUowQO+eagOYuD8lR6G6vXZ SSy7fXGOc302WCtQN6bM+MzayEfC3sWp933pPunn74QSHencF00lp7Wh90tGX1qV BPlCqocs0momY6T49o+ZDrCUmKe4ch8pFN3/gI/fVLnF+PwiXfNUUF4uiMgYsMfU zwv2Gs2TqdkJIXMTzWVbGr3m8xhywIXJKiB4gi+TusJXoPt7cQzyIlIqpJKd+b3+ ryxhJcD0ySOxDZAL642U7EPIxhlBP4KgeSZCjHkBDZHQcMsd0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRaLUnoC2FmCbviJ0BkckIpdvBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZiZWQxNDQtMTI4Zi0z YjFiLThkNzQtNTFkYmJmYzVjNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/1c15WZR8kb9BtZfL6Z8cZHH1G55ZXILVtID4OLmbhuywSNnF0dIw9 jAtlyT3+/FKWEZtvs+l+5YbOTXTMr8ztQfLj1T+EhahUH/uWvFL5LNsXSXCRTWHg sn6A9wqZ99awVrTcSJZ3AErCunkqEatynuvLzInHryymO0bD6VIInfIJ83m8pAak 6kpdmrpjUMqHodlAnp9qgYGugpebazwWBn/l8i29OK8V+yTUqv+x4R/hqtUagsz8 Dp0BxLgkXGHe4NlRIPJbierh0mdMWad4lDZHBZcs8VKWIwdq+pnSOUsNvhiMAAZ6 c/jx3c00nUncAK/M10MzfxLxpXAw2Xc= -----END CERTIFICATE-----Generated at Mon Oct 20 05:29:36 2025 by rpki-client