$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90b32a53-22e0-38a3-ad94-85dcb9e9de80.roa File: 90b32a53-22e0-38a3-ad94-85dcb9e9de80.roa (raw, json) Hash identifier: KWtMgWnVAdbFuMsuL8aGDIOdS8/9cqMZGeTiIhIjxJQ= Subject key identifier: A7:3C:71:8D:9A:E3:C3:68:C7:0C:1A:05:BE:58:DE:09:48:66:90:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797E2093D23BFBC11DB9B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90b32a53-22e0-38a3-ad94-85dcb9e9de80.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.138.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e2:09:3d:23:bf:bc:11:db:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a775d856-0bad-4b33-b8fb-a07bc6098389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5f:d6:a7:17:a3:a4:bf:b9:92:03:44:98:80: 20:49:e9:59:bc:6a:23:45:58:36:f2:ea:84:0a:be: c3:7f:4e:13:b3:d4:2e:8d:84:04:8f:59:70:7b:ba: 97:d6:e0:2f:54:d5:f9:d8:50:55:94:45:ed:7c:84: 5e:a4:57:50:e3:ad:ce:f2:7b:a9:b1:82:99:da:60: ff:a7:ed:bd:d2:8f:44:a3:1e:4d:52:e3:16:83:51: 1e:a3:58:83:89:69:1d:ea:36:37:fb:a7:48:73:0c: 2a:3f:a9:85:c2:0c:34:a6:b4:62:38:fa:48:2e:f5: a7:08:f9:f3:a8:ed:84:27:45:60:f9:80:ba:5a:be: d1:85:3f:bb:82:ec:6b:82:5f:d1:b0:d3:0b:cf:53: 1c:34:35:c6:49:c3:20:b6:50:47:ff:34:59:88:e4: 5c:bb:fd:32:d9:61:62:0c:4a:93:8b:83:75:6e:26: 56:0c:2f:81:83:97:5e:d9:c3:34:0a:44:53:aa:94: 03:38:1e:05:8c:50:2a:4f:7b:34:34:1d:27:17:50: 4d:68:e8:cb:e5:82:1e:92:66:14:05:50:88:9a:ae: 88:2d:ca:9b:f2:88:fa:13:96:13:19:dd:b9:32:39: d3:d2:90:42:4b:04:9b:2b:15:df:da:22:26:7c:f9: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:71:8D:9A:E3:C3:68:C7:0C:1A:05:BE:58:DE:09:48:66:90:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90b32a53-22e0-38a3-ad94-85dcb9e9de80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1e:ea:97:5e:a5:e6:15:33:b7:00:cf:37:98:f8:07:61:26: e2:31:55:fc:b7:cc:72:0c:63:24:c3:48:70:dd:74:62:e7:c7: ee:35:0b:9f:12:3f:2a:14:22:59:9c:1f:a1:78:c2:6b:b2:8b: 09:53:82:ac:dd:6a:a4:2a:30:7a:b3:1b:00:9c:6e:68:29:c9: f6:6b:29:9a:75:4a:98:4f:c4:a1:29:ba:90:35:a7:bb:6d:52: cf:30:ba:0b:c7:f4:0a:9e:33:fc:05:40:7c:8c:55:14:da:e4: bf:b4:00:32:83:b0:bb:9a:f9:fa:e7:7f:54:04:53:f4:17:ff: ac:23:b5:af:72:9e:34:7a:ff:10:3b:f6:46:0e:72:07:61:20: e6:d3:f0:ec:19:fa:1c:41:2f:6f:6d:77:e8:b2:6c:d8:4e:92: 33:e1:c0:5a:a4:95:cb:fe:00:6f:31:d6:40:db:8f:eb:41:f5: 30:de:34:f2:ec:f3:e9:c0:4e:6d:62:af:33:a2:41:6c:42:88: 71:44:04:e7:e4:b3:66:9d:a4:c7:e3:92:a6:39:c8:cc:eb:d9: 0c:ce:59:de:10:97:83:39:2b:56:2c:f3:12:58:8a:f1:bf:be: 55:e4:29:20:7e:c0:5c:47:47:ef:34:67:49:f8:65:b1:59:d8: f8:50:19:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+IJPSO/vBHbmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTc3NWQ4NTYtMGJhZC00YjMzLWI4ZmItYTA3YmM2MDk4Mzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1/WpxejpL+5kgNEmIAgSelZvGojRVg28uqE Cr7Df04Ts9QujYQEj1lwe7qX1uAvVNX52FBVlEXtfIRepFdQ463O8nupsYKZ2mD/ p+290o9Eox5NUuMWg1Eeo1iDiWkd6jY3+6dIcwwqP6mFwgw0prRiOPpILvWnCPnz qO2EJ0Vg+YC6Wr7RhT+7guxrgl/RsNMLz1McNDXGScMgtlBH/zRZiORcu/0y2WFi DEqTi4N1biZWDC+Bg5de2cM0CkRTqpQDOB4FjFAqT3s0NB0nF1BNaOjL5YIekmYU BVCImq6ILcqb8oj6E5YTGd25MjnT0pBCSwSbKxXf2iImfPmzXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc8cY2a48NoxwwaBb5Y3glIZpA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTBiMzJhNTMtMjJlMC0z OGEzLWFkOTQtODVkY2I5ZTlkZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIorwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACke6pdepeYVM7cAzzeY+AdhJuIxVfy3zHIMYyTDSHDddGLnx+41C58S PyoUIlmcH6F4wmuyiwlTgqzdaqQqMHqzGwCcbmgpyfZrKZp1SphPxKEpupA1p7tt Us8wugvH9AqeM/wFQHyMVRTa5L+0ADKDsLua+frnf1QEU/QX/6wjta9ynjR6/xA7 9kYOcgdhIObT8OwZ+hxBL29td+iybNhOkjPhwFqklcv+AG8x1kDbj+tB9TDeNPLs 8+nATm1irzOiQWxCiHFEBOfks2adpMfjkqY5yMzr2QzOWd4Ql4M5K1Ys8xJYivG/ vlXkKSB+wFxHR+80Z0n4ZbFZ2PhQGXI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:17:22 2025 by rpki-client