$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0988443-8f29-3a41-acf3-4bb52c91793b.roa File: a0988443-8f29-3a41-acf3-4bb52c91793b.roa (raw, json) Hash identifier: sQflQS/JKJjoHDV05ZZR9ufhJ0yeVP7VkawHUb+q3yg= Subject key identifier: E8:C4:20:E6:EB:16:82:37:A3:75:27:6C:44:04:CE:B9:F4:B7:5F:B4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679790CDA7BACC06DD766458 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0988443-8f29-3a41-acf3-4bb52c91793b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.78.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:90:cd:a7:ba:cc:06:dd:76:64:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=66dba592-9044-4453-9945-91268f706e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:59:08:97:98:bb:c4:c8:ce:d5:59:1c:07: 57:57:d9:ce:6d:ec:03:dc:58:2c:d5:cb:04:c0:b9: 9f:12:e5:53:d8:3b:95:22:01:1d:06:84:e3:6e:05: f8:30:80:99:5f:bb:19:27:c2:88:2e:5e:08:29:cf: a0:bf:fe:db:f2:0f:a8:73:3e:94:1d:5e:75:d5:28: f4:ed:67:e1:d6:a0:2b:89:23:5b:b2:30:65:d7:63: 3c:71:16:2f:74:bd:2b:ee:31:92:eb:ab:2f:a1:93: 96:41:cd:ee:8f:d8:af:fd:64:a7:ae:4f:14:87:6c: 3d:f6:b7:b0:5d:1c:1a:dd:e0:57:90:15:ca:09:7f: ad:72:9d:62:91:05:67:e7:ee:cc:82:3c:20:4c:c1: e0:5a:45:6d:96:a0:91:fd:6a:92:98:c9:09:01:1b: d7:de:7c:83:65:6d:1c:bb:44:47:0d:f6:f9:ae:ff: d3:63:a5:0b:03:24:42:dc:44:f8:83:c9:e7:ab:cc: 95:2a:bc:58:b9:e8:04:e5:77:3e:75:a4:57:7b:0c: 59:98:23:e3:9d:21:02:6f:b5:1e:e3:50:66:92:31: 13:0b:9d:b7:8a:49:fd:b7:df:42:06:07:0d:68:a0: 26:86:f3:d4:a3:28:ab:d5:de:3b:c5:b1:67:23:16: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C4:20:E6:EB:16:82:37:A3:75:27:6C:44:04:CE:B9:F4:B7:5F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0988443-8f29-3a41-acf3-4bb52c91793b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.78.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:0b:bb:9b:3f:f0:83:48:ab:bf:16:5f:04:c2:76:8f:b0:ee: 45:99:df:32:57:d4:3c:1b:3b:cc:25:64:a2:7e:42:93:66:f2: 43:9f:1c:68:20:c3:02:e3:99:f3:10:e9:db:0e:14:68:86:df: 47:23:c1:16:56:f0:10:71:27:34:61:6b:a2:1e:45:81:19:9d: 6d:8e:9e:7b:3f:ea:97:0d:b8:38:96:64:56:17:4f:e5:56:00: bd:48:60:18:85:fe:f2:cf:a1:a3:a4:3a:71:9f:57:cf:35:ca: d1:8a:52:ea:46:c6:20:7f:49:b7:f0:9f:ab:4e:29:40:9a:b9: 39:cb:37:73:6b:e7:c5:2f:0b:94:95:94:08:bf:07:44:cc:4f: 81:d4:0e:7a:dd:bf:cc:99:88:67:5b:1e:26:6a:be:6e:63:cd: f3:f9:e5:0d:35:0d:1b:d5:0a:95:30:f3:27:4c:9e:dc:09:77: 85:3b:55:13:bc:0d:1d:2b:1d:5e:49:0b:51:72:4b:47:7c:56: 0f:27:5a:6d:3a:3c:20:a7:20:28:f6:fc:a8:25:b1:29:15:31: 6b:16:cb:07:a8:2f:d8:c1:7b:cf:ef:7c:46:7a:6a:bf:d4:59: 57:a2:49:f0:3f:ee:28:8e:52:f5:96:a8:84:84:a0:15:42:2e: e0:14:05:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5DNp7rMBt12ZFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjZkYmE1OTItOTA0NC00NDUzLTk5NDUtOTEyNjhmNzA2ZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ElZCJeYu8TIztVZHAdXV9nObewD3Fgs1csE wLmfEuVT2DuVIgEdBoTjbgX4MICZX7sZJ8KILl4IKc+gv/7b8g+ocz6UHV511Sj0 7Wfh1qAriSNbsjBl12M8cRYvdL0r7jGS66svoZOWQc3uj9iv/WSnrk8Uh2w99rew XRwa3eBXkBXKCX+tcp1ikQVn5+7MgjwgTMHgWkVtlqCR/WqSmMkJARvX3nyDZW0c u0RHDfb5rv/TY6ULAyRC3ET4g8nnq8yVKrxYuegE5Xc+daRXewxZmCPjnSECb7Ue 41BmkjETC523ikn9t99CBgcNaKAmhvPUoyir1d47xbFnIxb0oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjEIObrFoI3o3UnbEQEzrn0t1+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTA5ODg0NDMtOGYyOS0z YTQxLWFjZjMtNGJiNTJjOTE3OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcLu5s/8INIq78WXwTCdo+w7kWZ3zJX1DwbO8wlZKJ+QpNm8kOfHGgg wwLjmfMQ6dsOFGiG30cjwRZW8BBxJzRha6IeRYEZnW2Onns/6pcNuDiWZFYXT+VW AL1IYBiF/vLPoaOkOnGfV881ytGKUupGxiB/Sbfwn6tOKUCauTnLN3Nr58UvC5SV lAi/B0TMT4HUDnrdv8yZiGdbHiZqvm5jzfP55Q01DRvVCpUw8ydMntwJd4U7VRO8 DR0rHV5JC1FyS0d8Vg8nWm06PCCnICj2/KglsSkVMWsWyweoL9jBe8/vfEZ6ar/U WVeiSfA/7iiOUvWWqISEoBVCLuAUBUk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:08:08 2025 by rpki-client