$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9920f80f-2118-3005-9e83-91f8ec9c82ba.roa File: 9920f80f-2118-3005-9e83-91f8ec9c82ba.roa (raw, json) Hash identifier: GHEm7Eu1oy8N0j9tkzljXNBFmYYu/F1u9Y7KLW+LuPA= Subject key identifier: 67:56:8D:6E:5D:57:B1:BC:E6:C9:6B:8D:F7:01:D2:5A:14:78:45:F1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797AA92860C83612B992780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9920f80f-2118-3005-9e83-91f8ec9c82ba.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.146.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:aa:92:86:0c:83:61:2b:99:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=64b948e4-62aa-47b0-980d-870aa110ad42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a9:a3:20:11:fd:d6:7b:ff:d2:ff:50:b3:9e: ae:a2:9d:56:9c:f0:30:66:09:a6:e7:2f:39:4c:5b: f7:d0:ae:c5:9f:15:2f:d1:f3:d5:f8:8c:9f:eb:7a: c3:c4:c4:6d:d4:f6:15:7e:83:37:8f:ee:8e:94:07: ef:90:11:40:53:71:68:67:4f:52:de:90:a1:ec:de: 2d:3c:e0:38:ec:ff:02:ea:db:ff:1c:ca:f3:51:8f: 60:07:76:cb:01:ad:10:83:60:8f:c3:73:f6:cb:1e: fd:05:50:78:14:8b:be:fb:98:ca:5c:99:8d:5c:99: a6:af:89:e7:dc:cb:41:95:cf:2f:a9:42:5d:21:64: 6d:2b:46:3d:d6:62:e8:dc:74:13:74:00:f8:72:57: b8:d6:dd:bc:e7:fe:a0:7c:da:f9:e3:3d:af:d8:0f: bd:e6:27:09:93:51:aa:44:15:fc:4e:0d:53:3f:1d: db:61:cc:45:ae:5c:a4:fa:89:1c:76:65:ff:4a:74: f4:37:79:13:14:93:c0:65:6b:b7:77:ad:6f:9f:62: 5f:a1:91:07:0a:a5:9e:d5:33:90:10:1e:aa:c7:c9: fc:c1:85:7d:8f:0d:7e:ed:71:d4:a2:c0:89:7d:99: 28:3c:ae:22:70:f7:88:e5:6e:c4:f4:a3:81:62:4d: d6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:56:8D:6E:5D:57:B1:BC:E6:C9:6B:8D:F7:01:D2:5A:14:78:45:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9920f80f-2118-3005-9e83-91f8ec9c82ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.146.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:32:6c:c7:cf:b7:b5:a8:04:ae:b2:61:37:6c:03:a3:a3:dc: da:d9:42:97:96:14:43:a8:eb:e2:9d:4c:c6:86:5b:a3:31:49: 66:83:be:b1:cb:83:a5:3b:c3:05:48:27:e6:06:ea:4a:2f:e9: d0:13:26:51:1a:29:23:23:25:b0:7b:da:da:95:ad:fe:65:6b: df:62:a0:1f:82:04:6b:ae:53:c0:cf:75:7a:1b:46:50:e5:c3: a3:f7:2c:db:40:92:38:e5:f0:45:6f:b1:a9:d5:55:b7:2b:fc: 00:21:98:72:ff:96:85:1a:27:eb:4f:1a:b2:66:73:c5:34:e4: 5a:56:f2:6d:e1:64:87:f8:69:17:57:fb:eb:ba:4c:3e:0c:86: f4:b5:a7:f9:ba:f2:ec:b1:f8:3b:6d:60:2e:02:02:9a:2c:78: 7d:b3:08:cb:02:cc:e3:72:b0:aa:50:6f:9f:ee:50:ec:ba:2f: d5:27:7e:8c:f7:d7:89:db:a4:af:d9:9a:f2:27:72:1f:f7:08: 38:5f:a1:86:f8:02:dc:81:b4:1e:f3:be:48:57:d4:7d:22:d4: 1e:08:ae:29:16:da:de:2d:13:0c:ab:40:6f:55:18:75:9d:78: 22:8a:bf:e5:13:4d:7a:75:c0:ff:14:fa:b4:81:9a:aa:e8:fb: d1:71:d9:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6qShgyDYSuZJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjRiOTQ4ZTQtNjJhYS00N2IwLTk4MGQtODcwYWExMTBhZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlamjIBH91nv/0v9Qs56uop1WnPAwZgmm5y85 TFv30K7FnxUv0fPV+Iyf63rDxMRt1PYVfoM3j+6OlAfvkBFAU3FoZ09S3pCh7N4t POA47P8C6tv/HMrzUY9gB3bLAa0Qg2CPw3P2yx79BVB4FIu++5jKXJmNXJmmr4nn 3MtBlc8vqUJdIWRtK0Y91mLo3HQTdAD4cle41t285/6gfNr54z2v2A+95icJk1Gq RBX8Tg1TPx3bYcxFrlyk+okcdmX/SnT0N3kTFJPAZWu3d61vn2JfoZEHCqWe1TOQ EB6qx8n8wYV9jw1+7XHUosCJfZkoPK4icPeI5W7E9KOBYk3W6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdWjW5dV7G85slrjfcB0loUeEXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTkyMGY4MGYtMjExOC0z MDA1LTllODMtOTFmOGVjOWM4MmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAybMfPt7WoBK6yYTdsA6Oj3NrZQpeWFEOo6+KdTMaGW6MxSWaDvrHL g6U7wwVIJ+YG6kov6dATJlEaKSMjJbB72tqVrf5la99ioB+CBGuuU8DPdXobRlDl w6P3LNtAkjjl8EVvsanVVbcr/AAhmHL/loUaJ+tPGrJmc8U05FpW8m3hZIf4aRdX ++u6TD4MhvS1p/m68uyx+DttYC4CAposeH2zCMsCzONysKpQb5/uUOy6L9Unfoz3 14nbpK/ZmvInch/3CDhfoYb4AtyBtB7zvkhX1H0i1B4IrikW2t4tEwyrQG9VGHWd eCKKv+UTTXp1wP8U+rSBmqro+9Fx2U0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:00 2025 by rpki-client