$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ba5ace5-0233-36ea-a4f1-84080f919ac7.roa File: 9ba5ace5-0233-36ea-a4f1-84080f919ac7.roa (raw, json) Hash identifier: Mf9uelLQlVYtrdTmis/iKR/t6RkpTxpq26inmjlrY1o= Subject key identifier: A9:33:4F:43:DE:AD:C8:85:60:D2:E9:24:4B:3E:CA:C8:64:D0:EA:4D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797928329FDF9739BC08600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ba5ace5-0233-36ea-a4f1-84080f919ac7.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.68.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:92:83:29:fd:f9:73:9b:c0:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3b3028af-f00e-4ddf-b42b-4c65815b1f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dd:ab:36:ad:5c:3d:93:6d:ea:6f:06:2e:a3: bf:44:ab:df:39:30:06:f1:67:ef:47:ce:91:36:24: 48:00:87:c8:ab:90:10:33:03:b4:5d:22:d4:8b:9c: f2:2e:6a:74:4d:b0:2f:15:e6:43:92:47:05:13:ef: 46:41:23:35:f2:4a:04:de:3a:a1:8e:39:b3:d0:05: e4:74:36:e5:35:3d:21:e0:3d:e9:d0:27:d7:b4:8f: f9:67:ef:69:a1:e9:53:ab:51:09:95:e0:cf:80:19: 47:48:ee:87:02:d3:01:06:59:f7:aa:13:4b:fa:27: 9c:57:7d:0e:be:a9:7d:c1:53:4a:92:32:d7:de:9a: c7:cb:73:5f:ef:d6:56:86:62:d2:46:7b:28:45:f0: 79:89:ac:32:d2:8b:7e:f2:40:19:6a:a2:bd:0d:39: a7:29:53:d4:0d:94:a4:aa:b1:5d:e4:50:40:94:2e: 4a:98:2a:eb:fa:30:7c:2b:91:5c:34:44:b9:de:b5: 27:64:0a:88:ef:27:80:72:d9:1b:20:1a:d1:76:cd: 24:2b:a5:85:44:69:ec:30:19:e0:de:b3:45:52:fe: a8:0c:9a:f3:6d:00:7d:f7:8e:6f:d1:35:bb:f0:c0: 66:76:48:97:da:84:a3:7e:4e:1e:3b:68:60:85:c4: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:33:4F:43:DE:AD:C8:85:60:D2:E9:24:4B:3E:CA:C8:64:D0:EA:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ba5ace5-0233-36ea-a4f1-84080f919ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b3:55:d1:19:bd:ec:df:4e:95:47:6d:fc:3a:fd:bc:2c:72: 8d:23:70:80:ce:7c:75:e5:3c:4b:36:d7:6b:62:29:8d:5d:3a: dc:26:f0:05:a9:bc:d9:d3:91:13:ff:1a:6d:4e:b3:26:fa:57: 68:fc:4f:cd:80:f6:e6:b8:f4:d8:7f:1e:88:95:bf:2a:42:2f: 79:b8:7f:9d:a7:b8:3e:91:ce:99:aa:a5:b8:fa:d1:d1:e2:e5: 13:a0:61:0e:6f:84:aa:bc:14:ee:12:5a:17:3b:6e:a3:9e:d6: 74:c9:6e:91:59:5e:34:0d:a0:89:ab:cb:48:cd:2b:8b:19:34: fd:0b:fb:da:f2:89:91:aa:6e:81:07:14:4a:52:2c:13:ae:d6: ce:ae:ab:01:4f:60:5c:8e:d1:03:de:b0:ff:c6:93:a9:d6:5c: df:bb:2c:b7:9c:ac:33:fb:ee:46:d3:c1:c0:d9:d9:4a:3a:96: 10:c5:71:24:5e:e7:70:b8:fd:5b:d5:63:d1:4a:89:bb:3d:96: 33:b4:40:df:0d:72:02:31:7d:23:29:db:80:cc:05:e3:f3:0b: 4f:32:20:b3:b5:ce:7e:11:64:9d:6a:1a:5b:5c:d8:19:e2:87: 36:75:d1:8b:16:b3:e0:74:9a:45:0b:ae:9e:1a:19:4a:df:b8: 43:bf:8b:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5KDKf35c5vAhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2IzMDI4YWYtZjAwZS00ZGRmLWI0MmItNGM2NTgxNWIxZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx92rNq1cPZNt6m8GLqO/RKvfOTAG8WfvR86R NiRIAIfIq5AQMwO0XSLUi5zyLmp0TbAvFeZDkkcFE+9GQSM18koE3jqhjjmz0AXk dDblNT0h4D3p0CfXtI/5Z+9poelTq1EJleDPgBlHSO6HAtMBBln3qhNL+iecV30O vql9wVNKkjLX3prHy3Nf79ZWhmLSRnsoRfB5iawy0ot+8kAZaqK9DTmnKVPUDZSk qrFd5FBAlC5KmCrr+jB8K5FcNES53rUnZAqI7yeActkbIBrRds0kK6WFRGnsMBng 3rNFUv6oDJrzbQB9945v0TW78MBmdkiX2oSjfk4eO2hghcSUlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkzT0PerciFYNLpJEs+yshk0OpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWJhNWFjZTUtMDIzMy0z NmVhLWE0ZjEtODQwODBmOTE5YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJazVdEZvezfTpVHbfw6/bwsco0jcIDOfHXlPEs212tiKY1dOtwm8AWp vNnTkRP/Gm1Osyb6V2j8T82A9ua49Nh/HoiVvypCL3m4f52nuD6Rzpmqpbj60dHi 5ROgYQ5vhKq8FO4SWhc7bqOe1nTJbpFZXjQNoImry0jNK4sZNP0L+9ryiZGqboEH FEpSLBOu1s6uqwFPYFyO0QPesP/Gk6nWXN+7LLecrDP77kbTwcDZ2Uo6lhDFcSRe 53C4/VvVY9FKibs9ljO0QN8NcgIxfSMp24DMBePzC08yILO1zn4RZJ1qGltc2Bni hzZ10YsWs+B0mkULrp4aGUrfuEO/i4M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:16:03 2025 by rpki-client