$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa File: 9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa (raw, json) Hash identifier: 5kLnINyDWcFG2o02/CDQzKH+irJP0d2Fz6BlT9cl7bE= Subject key identifier: 3B:12:57:A9:51:7D:DE:04:5E:A9:6B:60:DA:EF:15:61:11:5B:2C:9C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797E81C7D6A1899088FA4E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.143.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e8:1c:7d:6a:18:99:08:8f:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1b546dec-6518-4160-a219-a87c5214234b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:96:ac:c6:4f:02:c5:71:ec:21:67:49:3d: 71:49:c2:83:da:02:cf:7f:af:06:dd:10:5b:2c:4b: ce:5f:08:42:ca:8a:6f:85:07:8b:c5:38:21:8b:15: 36:bd:6a:18:c4:17:fa:ce:92:f3:d6:6f:ca:91:9e: 8e:15:29:25:3e:80:c6:f2:d4:5e:19:42:90:d2:5b: 6f:ab:28:78:ca:2c:54:bc:ea:e5:76:34:d6:28:f1: a3:e0:11:ed:bb:37:a8:79:ac:11:b1:c7:97:b2:b6: 1f:d7:ef:3a:bf:26:b7:5a:36:cf:bd:d5:6b:1f:71: b1:bc:6b:c9:27:81:2f:34:d3:0a:4f:db:3a:8b:7f: ad:2c:a0:22:eb:0e:f1:cf:27:fb:c7:7b:b3:e3:1e: 82:7a:3a:ec:34:14:3c:91:8e:53:34:34:72:53:a2: 4c:d1:ce:88:51:52:47:c9:d0:21:ee:84:d8:b9:15: e7:27:c2:60:1b:28:9c:b5:e1:4e:8a:92:1e:7e:12: a3:35:c3:76:c7:50:59:69:51:2c:d9:bf:87:26:bf: 16:7a:2d:08:f5:6f:90:57:05:e6:4b:dd:29:83:b8: 57:6c:85:3a:61:e8:d6:df:45:ab:d9:77:37:f1:40: 25:ce:fd:93:88:75:e5:d8:f4:1b:74:0f:6b:cc:49: 17:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:12:57:A9:51:7D:DE:04:5E:A9:6B:60:DA:EF:15:61:11:5B:2C:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.143.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:57:d0:33:2e:50:3c:12:81:ad:3e:39:f0:85:f1:cd:db:b8: dd:86:0f:f4:e6:f3:11:4d:6c:da:95:82:fa:74:18:2e:30:17: 42:48:9b:d1:e1:58:a1:6d:ba:b6:c1:7e:a1:56:a0:87:76:a8: 69:76:be:dd:ff:8f:7f:26:44:d4:a8:6f:a4:a7:b6:a7:c4:b7: 91:5a:bd:45:24:58:73:37:ec:68:45:8e:ba:34:cf:78:cb:fe: 27:70:c2:d1:7a:67:a7:2d:10:bd:30:07:08:45:fb:94:2a:ac: de:4b:53:13:cb:70:08:56:9c:ec:9d:21:ed:4f:44:89:9d:a1: 43:55:00:e3:a5:00:3d:36:62:c6:fc:8b:0f:ae:30:94:0d:30: dc:9d:8f:79:e8:63:14:ab:f6:a1:31:ae:70:85:b6:02:ce:41: 2f:57:ae:1d:a0:64:8b:a7:1a:1c:c7:08:34:54:0d:09:d2:63: b6:06:59:9a:86:12:92:44:58:5e:69:66:73:cd:d4:79:eb:77: f5:58:10:24:65:3f:32:35:62:d6:fd:1f:f6:b0:af:e1:c7:21: d8:12:ed:ae:4b:23:6a:12:69:8b:18:63:c0:78:d3:05:49:1a: 67:33:ea:64:18:fc:0a:4c:0b:17:0c:5d:e4:00:28:1e:1c:c1: 1b:e1:b7:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+gcfWoYmQiPpOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWI1NDZkZWMtNjUxOC00MTYwLWEyMTktYTg3YzUyMTQyMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN2WrMZPAsVx7CFnST1xScKD2gLPf68G3RBb LEvOXwhCyopvhQeLxTghixU2vWoYxBf6zpLz1m/KkZ6OFSklPoDG8tReGUKQ0ltv qyh4yixUvOrldjTWKPGj4BHtuzeoeawRsceXsrYf1+86vya3WjbPvdVrH3GxvGvJ J4EvNNMKT9s6i3+tLKAi6w7xzyf7x3uz4x6CejrsNBQ8kY5TNDRyU6JM0c6IUVJH ydAh7oTYuRXnJ8JgGyicteFOipIefhKjNcN2x1BZaVEs2b+HJr8Wei0I9W+QVwXm S90pg7hXbIU6YejW30Wr2Xc38UAlzv2TiHXl2PQbdA9rzEkXEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsSV6lRfd4EXqlrYNrvFWERWyycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWE4YjAyZTQtMDRmMS0z YmMwLTk5NDktYTUxNDFjYmQ4YjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIo9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNX0DMuUDwSga0+OfCF8c3buN2GD/Tm8xFNbNqVgvp0GC4wF0JIm9Hh WKFturbBfqFWoId2qGl2vt3/j38mRNSob6SntqfEt5FavUUkWHM37GhFjro0z3jL /idwwtF6Z6ctEL0wBwhF+5QqrN5LUxPLcAhWnOydIe1PRImdoUNVAOOlAD02Ysb8 iw+uMJQNMNydj3noYxSr9qExrnCFtgLOQS9Xrh2gZIunGhzHCDRUDQnSY7YGWZqG EpJEWF5pZnPN1Hnrd/VYECRlPzI1Ytb9H/awr+HHIdgS7a5LI2oSaYsYY8B40wVJ Gmcz6mQY/ApMCxcMXeQAKB4cwRvht24= -----END CERTIFICATE-----Generated at Tue Oct 21 02:00:54 2025 by rpki-client