$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3b1de46-3cfb-3916-9f41-5aca55846c3c.roa File: a3b1de46-3cfb-3916-9f41-5aca55846c3c.roa (raw, json) Hash identifier: chFOBVZToSnD1fiRnUkMpCbLBqx9kPT7eZpWDZLRUOI= Subject key identifier: 2A:52:B5:F1:5F:73:BF:DC:B4:DC:91:FD:C1:1D:73:3D:3B:C5:F5:AD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67974C1FB3D1F38A45832880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3b1de46-3cfb-3916-9f41-5aca55846c3c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.170.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:4c:1f:b3:d1:f3:8a:45:83:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9f9b0b6b-178a-46d7-a2a3-7f61a72bacdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:55:4b:b6:15:55:57:ab:38:60:2a:63:d7:a1: 4a:e2:43:f0:ca:b2:a5:ea:6f:56:18:a6:5c:19:58: 7d:14:86:85:12:af:fe:11:62:73:7d:e0:6d:b3:7b: 96:09:2c:54:aa:2b:e7:ed:28:c8:dd:d9:42:07:65: f1:d8:fd:d6:da:d3:88:d2:99:50:bb:c9:8a:a2:27: 10:5a:76:e2:28:87:4e:e9:1c:95:39:3e:69:b5:ba: 01:46:b5:fe:91:f9:5a:9c:cd:75:01:e1:0f:1d:ba: ae:5c:16:0f:c6:c2:d4:37:bd:2e:d2:33:d0:b8:66: 5c:16:b6:cc:8f:98:b5:55:b3:d9:91:6e:3f:d7:48: 46:02:14:0f:7d:1e:ce:ef:5d:9d:52:77:93:67:1d: 71:6a:99:d9:ac:b1:ac:a2:19:93:2b:be:89:0f:01: 62:da:e7:1c:8d:d9:5d:d7:2e:54:f2:22:df:ac:27: 97:04:85:a4:08:e8:40:91:bf:cc:d6:72:c2:55:39: f7:52:86:56:e3:e3:6b:ef:8a:1f:a2:e0:91:e2:44: 5a:7e:dd:b2:42:84:20:18:53:e9:18:23:6c:fc:cc: d4:86:3d:9c:0e:40:97:94:f3:85:74:29:6f:50:94: 36:84:00:cf:12:18:9f:bc:0d:0c:2f:bd:28:3a:4c: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:B5:F1:5F:73:BF:DC:B4:DC:91:FD:C1:1D:73:3D:3B:C5:F5:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3b1de46-3cfb-3916-9f41-5aca55846c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.170.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:be:5b:ee:17:c6:0a:48:53:bf:9d:7b:1d:8f:f2:57:da:34: fd:e3:34:80:5b:58:0f:58:ee:4d:1f:a2:98:b7:02:73:fd:4b: c0:d6:8e:0d:a3:be:4f:0d:95:06:8d:d3:3f:a9:66:ca:fd:8f: b1:fb:d7:36:7f:d7:75:94:fc:44:48:1a:a9:df:e9:56:66:0b: 29:88:76:08:9b:21:9a:9b:ef:84:6f:b0:a5:30:81:71:63:04: 7e:9d:d9:3d:49:1e:53:89:ee:45:c9:0c:a8:97:5e:0c:3c:a8: 25:a9:c5:96:e0:64:84:e0:75:8c:ce:12:ae:d1:0d:85:24:e6: da:8c:44:87:7e:54:ca:57:9c:cd:76:17:fa:c7:11:4b:85:d8: 7c:ef:b2:9c:f3:26:db:be:14:80:ab:a0:87:51:b7:59:91:9e: 67:44:0f:36:de:14:27:26:29:68:a1:ed:cc:d3:44:b8:e0:63: 26:13:fc:1b:ad:46:3c:dd:fe:f4:d1:1e:f0:ad:a9:e7:df:cc: 3e:9a:1c:a0:90:39:32:3c:47:47:24:58:a0:b2:bb:d1:1c:7a: 10:e3:ce:73:07:18:50:52:1e:7f:98:ea:66:0d:17:aa:a7:4e: 83:04:a2:29:86:14:2d:56:90:49:5f:08:ed:0d:8b:b3:75:0b: 47:fd:13:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0wfs9HzikWDKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWY5YjBiNmItMTc4YS00NmQ3LWEyYTMtN2Y2MWE3MmJhY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFVLthVVV6s4YCpj16FK4kPwyrKl6m9WGKZc GVh9FIaFEq/+EWJzfeBts3uWCSxUqivn7SjI3dlCB2Xx2P3W2tOI0plQu8mKoicQ WnbiKIdO6RyVOT5ptboBRrX+kflanM11AeEPHbquXBYPxsLUN70u0jPQuGZcFrbM j5i1VbPZkW4/10hGAhQPfR7O712dUneTZx1xapnZrLGsohmTK76JDwFi2uccjdld 1y5U8iLfrCeXBIWkCOhAkb/M1nLCVTn3UoZW4+Nr74ofouCR4kRaft2yQoQgGFPp GCNs/MzUhj2cDkCXlPOFdClvUJQ2hADPEhifvA0ML70oOkx9TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpStfFfc7/ctNyR/cEdcz07xfWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTNiMWRlNDYtM2NmYi0z OTE2LTlmNDEtNWFjYTU1ODQ2YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu+W+4XxgpIU7+dex2P8lfaNP3jNIBbWA9Y7k0fopi3AnP9S8DWjg2j vk8NlQaN0z+pZsr9j7H71zZ/13WU/ERIGqnf6VZmCymIdgibIZqb74RvsKUwgXFj BH6d2T1JHlOJ7kXJDKiXXgw8qCWpxZbgZITgdYzOEq7RDYUk5tqMRId+VMpXnM12 F/rHEUuF2HzvspzzJtu+FICroIdRt1mRnmdEDzbeFCcmKWih7czTRLjgYyYT/But Rjzd/vTRHvCtqeffzD6aHKCQOTI8R0ckWKCyu9EcehDjznMHGFBSHn+Y6mYNF6qn ToMEoimGFC1WkElfCO0Ni7N1C0f9E9A= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:44 2025 by rpki-client