$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d8cc26-2181-3324-a473-ee0b0e445357.roa File: 87d8cc26-2181-3324-a473-ee0b0e445357.roa (raw, json) Hash identifier: BUWN8wm9AprEbVybKTJex4YXXTYTHTijhO/URIv2+7U= Subject key identifier: 71:1E:47:B3:C7:8A:E2:B2:84:BE:E9:F1:0E:B0:42:09:0A:46:D1:DA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B72C1EFB3CFD56D4974C59E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d8cc26-2181-3324-a473-ee0b0e445357.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 19527 IP address blocks: 34.0.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:ef:b3:cf:d5:6d:49:74:c5:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=00f8cb98-afcb-4afa-9eab-ba7c4637ad74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:29:d8:c0:e4:35:d5:da:b0:bf:f4:1b:2f: a0:36:5a:82:64:0b:c4:3b:37:a3:ce:8d:13:e6:08: 2d:4f:f0:5b:e3:3d:14:c1:8b:93:4e:ac:88:14:57: 72:e9:b8:5d:6e:00:1e:09:d8:cd:17:04:98:3d:21: 0d:b2:0a:49:1b:32:d1:ac:b2:69:53:dc:e0:72:ce: 57:46:0b:aa:48:a1:f3:ba:01:aa:8d:9c:0e:a6:6a: b4:5e:7a:55:e8:c7:7c:b4:30:1d:b9:2e:f5:fb:0a: 00:76:51:c7:6f:b7:84:7d:c3:bc:9e:26:0a:ae:38: 6c:da:39:c5:5c:c6:7f:fc:7e:82:3b:76:66:eb:81: e6:69:02:e2:6b:fc:91:e2:57:e1:cf:31:db:b3:38: f4:29:6f:c7:dd:df:a0:27:1c:f7:0a:33:20:8d:f7: 0b:26:46:a3:ee:18:cd:a5:5d:9c:91:c9:67:14:c1: 55:4f:47:be:64:a4:e4:08:ce:35:82:e8:43:a0:1b: c5:42:68:cb:a9:0b:e8:92:b3:7d:71:60:ac:81:2d: 57:c7:4d:79:e0:d5:fb:6e:ca:ff:95:58:18:66:c6: 65:2e:dd:a9:7e:86:79:d3:c6:fa:b5:cb:8b:99:a5: ae:12:cc:0d:b4:be:97:01:79:84:39:8f:56:7d:fe: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1E:47:B3:C7:8A:E2:B2:84:BE:E9:F1:0E:B0:42:09:0A:46:D1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d8cc26-2181-3324-a473-ee0b0e445357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a1:b6:0b:47:7a:e2:95:ce:6e:71:83:57:26:62:c2:d6:96: ca:d7:b9:84:27:2c:2a:5c:ef:7e:8d:ce:a6:73:3c:b8:a2:7c: 47:66:88:27:75:38:ce:e3:bd:21:85:53:6d:ac:40:51:76:48: b6:19:f4:ad:a3:2e:80:5b:a1:3c:17:df:37:b3:8a:f5:d1:a6: 8c:6b:f3:58:00:25:5f:bb:66:3e:02:9e:ae:2a:1f:2e:8f:71: 33:60:3b:1d:3f:05:7d:32:7a:e6:7d:25:d5:7d:66:23:85:68: f8:f2:49:ef:26:e8:da:82:4b:9e:82:34:95:ae:9d:a6:51:aa: a5:18:d7:f1:c5:24:dc:56:fd:8c:0b:81:f7:a1:dd:3b:ea:34: 45:cd:5e:0d:5e:48:51:f6:99:a9:dc:48:86:9b:b0:30:ce:72: f9:fa:f8:b3:49:a7:fa:07:c4:c6:8b:14:fc:7e:de:25:17:5c: 30:be:bc:a3:b7:bc:7d:cc:d3:b3:e5:a3:0f:c1:a9:92:3a:19: 00:c6:23:3d:5b:a2:46:a2:bf:aa:77:1f:f6:61:24:20:f5:3f: f8:b2:5b:dd:11:49:95:eb:a0:72:b0:5d:cc:31:fb:6b:1c:5f: 4e:d0:1f:6f:d0:e9:f7:aa:44:19:f8:b0:bd:9f:99:e4:0b:35: c6:cd:50:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywe+zz9VtSXTFnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk MDBmOGNiOTgtYWZjYi00YWZhLTllYWItYmE3YzQ2MzdhZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvYp2MDkNdXasL/0Gy+gNlqCZAvEOzejzo0T 5ggtT/Bb4z0UwYuTTqyIFFdy6bhdbgAeCdjNFwSYPSENsgpJGzLRrLJpU9zgcs5X RguqSKHzugGqjZwOpmq0XnpV6Md8tDAduS71+woAdlHHb7eEfcO8niYKrjhs2jnF XMZ//H6CO3Zm64HmaQLia/yR4lfhzzHbszj0KW/H3d+gJxz3CjMgjfcLJkaj7hjN pV2ckclnFMFVT0e+ZKTkCM41guhDoBvFQmjLqQvokrN9cWCsgS1Xx0154NX7bsr/ lVgYZsZlLt2pfoZ508b6tcuLmaWuEswNtL6XAXmEOY9Wff7BuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEeR7PHiuKyhL7p8Q6wQgkKRtHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODdkOGNjMjYtMjE4MS0z MzI0LWE0NzMtZWUwYjBlNDQ1MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqhtgtHeuKVzm5xg1cmYsLWlsrXuYQnLCpc736NzqZzPLiifEdmiCd1 OM7jvSGFU22sQFF2SLYZ9K2jLoBboTwX3zezivXRpoxr81gAJV+7Zj4Cnq4qHy6P cTNgOx0/BX0yeuZ9JdV9ZiOFaPjySe8m6NqCS56CNJWunaZRqqUY1/HFJNxW/YwL gfeh3TvqNEXNXg1eSFH2mancSIabsDDOcvn6+LNJp/oHxMaLFPx+3iUXXDC+vKO3 vH3M07Plow/BqZI6GQDGIz1bokaiv6p3H/ZhJCD1P/iyW90RSZXroHKwXcwx+2sc X07QH2/Q6feqRBn4sL2fmeQLNcbNUMA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:27 2025 by rpki-client