$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9c5a038d-f92e-3256-993e-252c529345f8.roa File: 9c5a038d-f92e-3256-993e-252c529345f8.roa (raw, json) Hash identifier: rwgq67kBbWqpVnm6JJBvFqcZKtV8eLix31aWbtilkNw= Subject key identifier: 9A:D6:BD:2C:5E:49:8F:81:86:C5:39:37:6D:79:82:A4:C1:82:40:34 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797BFE2BE949FC823FA83A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9c5a038d-f92e-3256-993e-252c529345f8.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.144.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:bf:e2:be:94:9f:c8:23:fa:83:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=044eafa6-619d-4399-a7ac-a697f912f5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:4c:d5:cc:08:5e:eb:fe:5d:5f:42:b8:86: 62:50:19:f2:c6:cc:be:ff:1b:f2:d6:70:83:eb:36: f2:12:40:3e:2c:22:8c:fb:d8:63:00:1b:ec:3d:4e: 6b:d4:1a:52:1e:a3:3d:b9:47:c7:2d:76:ee:a0:f5: 91:28:a5:0e:bf:8a:8f:02:67:77:37:87:a4:a9:77: 88:83:f6:d5:09:e0:a0:bd:c8:85:78:e7:5e:1d:10: 4b:fd:16:56:1e:3f:b7:7e:c5:fb:d0:55:81:d1:71: dc:ca:49:27:bd:ce:a8:bf:78:60:33:b8:ae:0c:c5: 9a:13:8d:59:23:d8:69:7d:47:18:9c:4e:60:72:f9: a5:1c:5d:b4:e8:42:8a:90:01:6d:61:2f:b8:ec:82: 7d:79:89:17:ec:1e:35:df:da:dc:65:4d:08:e1:73: 4d:65:56:56:d4:87:22:ae:8e:2b:29:09:eb:aa:63: 1e:09:cc:c0:bc:7c:17:8d:8c:38:8b:d5:fa:c5:65: 69:47:aa:7c:45:12:07:c1:b1:e1:a4:fa:e7:1c:1f: 0e:e6:16:59:e4:5d:77:97:ab:ea:4e:93:ab:e2:96: 95:83:a8:ff:c5:cc:a1:4b:81:5e:29:70:d9:db:47: 29:e9:ad:7d:2b:94:d2:93:86:f4:a8:c8:35:60:d9: 76:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D6:BD:2C:5E:49:8F:81:86:C5:39:37:6D:79:82:A4:C1:82:40:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9c5a038d-f92e-3256-993e-252c529345f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:02:e5:6b:dd:58:4f:b6:10:ed:f1:65:3a:04:70:77:5a:c2: d2:ec:dd:08:94:b7:4f:67:65:3b:58:76:a0:7f:46:a0:7c:1b: 7a:fc:0c:48:81:c3:11:9a:9a:6b:18:27:1f:c9:c9:d4:91:f6: 05:3a:e7:5d:d3:b7:95:c1:f0:5d:fa:d5:00:88:ff:57:ba:5f: 03:06:3a:87:d2:5e:22:b0:71:3d:e2:ef:18:d2:61:00:4b:55: 4f:e4:3d:93:4b:32:75:b7:1e:9b:0b:26:17:70:68:12:1f:f0: 13:2c:5d:cd:0e:23:5c:0c:93:1a:64:bc:84:7f:04:f6:5c:13: c4:91:d8:e7:ba:18:37:e9:b8:25:64:5b:a6:44:f4:53:f0:0e: 5d:1c:f7:e0:d5:3e:c9:8f:2b:2b:66:30:88:31:ac:24:60:46: 48:fd:a2:d4:04:6c:41:3d:c9:3a:7f:a8:a8:2e:b1:a0:8b:f3: f6:ae:98:52:a6:50:cf:0b:00:42:3d:89:f6:c7:fa:2b:21:93: 73:dd:13:b3:5e:b0:d5:a2:38:e1:06:98:c3:27:c2:2b:7a:10: 16:a9:f7:b9:20:19:94:ab:ea:1b:2a:60:31:c3:76:a9:1d:71: 19:52:75:d2:a5:d4:00:96:58:b0:2b:28:f0:53:26:79:82:f1: 98:b6:d4:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7/ivpSfyCP6g6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MDQ0ZWFmYTYtNjE5ZC00Mzk5LWE3YWMtYTY5N2Y5MTJmNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIxM1cwIXuv+XV9CuIZiUBnyxsy+/xvy1nCD 6zbyEkA+LCKM+9hjABvsPU5r1BpSHqM9uUfHLXbuoPWRKKUOv4qPAmd3N4ekqXeI g/bVCeCgvciFeOdeHRBL/RZWHj+3fsX70FWB0XHcykknvc6ov3hgM7iuDMWaE41Z I9hpfUcYnE5gcvmlHF206EKKkAFtYS+47IJ9eYkX7B4139rcZU0I4XNNZVZW1Ici ro4rKQnrqmMeCczAvHwXjYw4i9X6xWVpR6p8RRIHwbHhpPrnHB8O5hZZ5F13l6vq TpOr4paVg6j/xcyhS4FeKXDZ20cp6a19K5TSk4b0qMg1YNl2eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrWvSxeSY+BhsU5N215gqTBgkA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWM1YTAzOGQtZjkyZS0z MjU2LTk5M2UtMjUyYzUyOTM0NWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMC5WvdWE+2EO3xZToEcHdawtLs3QiUt09nZTtYdqB/RqB8G3r8DEiB wxGammsYJx/JydSR9gU6513Tt5XB8F361QCI/1e6XwMGOofSXiKwcT3i7xjSYQBL VU/kPZNLMnW3HpsLJhdwaBIf8BMsXc0OI1wMkxpkvIR/BPZcE8SR2Oe6GDfpuCVk W6ZE9FPwDl0c9+DVPsmPKytmMIgxrCRgRkj9otQEbEE9yTp/qKgusaCL8/aumFKm UM8LAEI9ifbH+ishk3PdE7NesNWiOOEGmMMnwit6EBap97kgGZSr6hsqYDHDdqkd cRlSddKl1ACWWLArKPBTJnmC8Zi21NY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:49 2025 by rpki-client