$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e25e040-1fb6-36d8-af77-6865c30c0697.roa File: 8e25e040-1fb6-36d8-af77-6865c30c0697.roa (raw, json) Hash identifier: DvtzmpXcnJE1+5Ilqm+NSGCzp82A14w5Z9+VyZMoe2I= Subject key identifier: CE:9D:7C:BA:7D:7A:85:C8:D7:F1:9E:7A:41:F5:17:5D:AE:32:A6:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B9F118202873EB5B4C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e25e040-1fb6-36d8-af77-6865c30c0697.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.80.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b9:f1:18:20:28:73:eb:5b:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3a136a53-553b-4121-99d0-acb09e8a1dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:d0:a6:ad:9c:db:89:fd:08:72:17:ce:b8: c0:95:91:71:ed:88:71:61:81:30:5f:3f:ad:cb:68: 4a:d1:38:b0:9e:f5:69:9f:de:8d:8d:11:e3:de:81: fb:ab:fa:e6:dd:da:4c:d5:a6:03:92:6b:fc:04:33: 21:73:90:2e:ec:a7:23:80:6b:e6:0d:d0:ec:e8:e4: 40:16:29:fb:76:11:d3:27:f0:e5:1a:46:19:18:67: d7:dc:7a:c0:b0:38:51:eb:9e:82:f6:ae:ee:d5:fe: 56:37:d0:96:07:bc:3c:bd:e0:f4:ae:30:cd:3d:98: 2b:3c:87:fa:d7:bf:0f:a4:6e:d5:02:03:5f:de:b6: 92:6e:2a:2c:d0:c5:1e:b5:74:6b:3a:05:77:21:24: 9f:25:ad:f1:04:bd:88:35:3e:2a:41:31:c2:d1:6d: 4e:0b:54:13:6e:b8:d0:1d:89:2e:c0:6f:2e:2e:2d: 5d:de:6c:03:7f:d3:61:cb:d8:9e:78:68:fc:0f:25: 8e:e2:66:fd:5d:0b:e4:bc:76:22:91:cb:3a:67:31: 4d:a9:ab:7f:d9:83:4b:0f:5b:f8:a5:da:23:8c:f1: a3:30:a3:1d:53:53:71:5a:a7:4d:b7:1b:fe:6e:35: 23:d4:a6:1c:9e:ab:c4:23:d3:4f:75:32:52:e5:d3: 84:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9D:7C:BA:7D:7A:85:C8:D7:F1:9E:7A:41:F5:17:5D:AE:32:A6:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e25e040-1fb6-36d8-af77-6865c30c0697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.80.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:63:11:b4:85:b1:8d:76:ff:7b:e6:10:bb:43:80:d0:49:cd: 71:d3:a3:b0:29:13:c8:3a:95:c7:51:7d:36:53:9f:35:05:3b: 80:92:dd:34:cd:31:3b:71:dc:58:b5:b3:06:8d:0c:65:a7:14: db:6a:6e:f2:1f:0f:fc:21:02:61:db:a9:1c:a9:b6:1c:2d:f7: d5:a6:0d:7b:03:c8:54:94:ab:bb:f0:25:f6:97:43:e6:27:65: 8d:26:26:47:67:65:22:24:ea:8d:8f:7c:d0:02:bb:f9:7e:01: ac:37:75:be:9c:b4:aa:9d:7c:a2:dc:20:77:44:10:2c:b8:3a: 98:f7:4a:98:79:59:61:8c:4a:9d:81:bd:c1:71:91:fc:79:cf: 6c:09:39:10:39:f2:4f:d2:aa:c2:89:e0:32:aa:ec:34:f1:00: c5:51:ba:c5:e2:03:91:fe:5a:66:ef:09:5e:20:35:c3:d9:19: 41:8a:a1:b3:ba:43:c7:78:bc:a9:98:b3:6a:8f:9e:b6:59:f6: e4:51:2a:5d:cc:56:85:b2:8e:34:70:f5:f3:04:4b:cb:8e:84: 94:2a:54:15:ca:6b:0f:a6:6e:bb:3b:22:4c:c1:b7:62:a6:2b: 93:d4:d4:4a:48:14:80:2f:e7:f7:4d:40:05:83:3f:94:03:88: 51:54:03:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7nxGCAoc+tbTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2ExMzZhNTMtNTUzYi00MTIxLTk5ZDAtYWNiMDllOGExZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngPQpq2c24n9CHIXzrjAlZFx7YhxYYEwXz+t y2hK0TiwnvVpn96NjRHj3oH7q/rm3dpM1aYDkmv8BDMhc5Au7KcjgGvmDdDs6ORA Fin7dhHTJ/DlGkYZGGfX3HrAsDhR656C9q7u1f5WN9CWB7w8veD0rjDNPZgrPIf6 178PpG7VAgNf3raSbios0MUetXRrOgV3ISSfJa3xBL2INT4qQTHC0W1OC1QTbrjQ HYkuwG8uLi1d3mwDf9Nhy9ieeGj8DyWO4mb9XQvkvHYikcs6ZzFNqat/2YNLD1v4 pdojjPGjMKMdU1NxWqdNtxv+bjUj1KYcnqvEI9NPdTJS5dOEJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6dfLp9eoXI1/GeekH1F12uMqaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGUyNWUwNDAtMWZiNi0z NmQ4LWFmNzctNjg2NWMzMGMwNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5jEbSFsY12/3vmELtDgNBJzXHTo7ApE8g6lcdRfTZTnzUFO4CS3TTN MTtx3Fi1swaNDGWnFNtqbvIfD/whAmHbqRypthwt99WmDXsDyFSUq7vwJfaXQ+Yn ZY0mJkdnZSIk6o2PfNACu/l+Aaw3db6ctKqdfKLcIHdEECy4Opj3Sph5WWGMSp2B vcFxkfx5z2wJORA58k/SqsKJ4DKq7DTxAMVRusXiA5H+WmbvCV4gNcPZGUGKobO6 Q8d4vKmYs2qPnrZZ9uRRKl3MVoWyjjRw9fMES8uOhJQqVBXKaw+mbrs7IkzBt2Km K5PU1EpIFIAv5/dNQAWDP5QDiFFUAzs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:39 2025 by rpki-client