$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afca1274-387b-3c98-94ee-429f3b804b79.roa File: afca1274-387b-3c98-94ee-429f3b804b79.roa (raw, json) Hash identifier: Z5JJuvMjlWqAAMjCuUjahUGYquh+hwPOKK17L7zNAMw= Subject key identifier: 2B:B0:AB:B2:A7:D4:8A:E4:28:94:DD:E0:7B:93:F1:E2:99:34:19:77 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A293865A677E8EB7CE40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afca1274-387b-3c98-94ee-429f3b804b79.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.176.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a2:93:86:5a:67:7e:8e:b7:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=41ea13c4-a3f7-4a3b-a13a-f6ad70dbe9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:29:26:96:1e:3e:ce:c4:bb:5e:67:90:c2:a7: f5:1a:ce:ee:95:aa:b8:3d:ed:57:0b:fa:95:e3:5d: d2:e0:47:39:02:2b:50:ed:10:ca:49:50:b8:44:10: 34:b2:69:d1:9b:19:0c:0b:3c:49:23:26:18:eb:86: 68:b0:6a:39:6c:f2:a9:85:e9:d8:f8:c6:d5:f1:81: 79:80:14:71:a7:36:60:59:68:c2:cf:cd:cc:53:77: 2a:9e:b5:7d:64:99:32:f1:07:ca:93:5f:f6:c3:da: 4b:45:15:d3:bf:0f:91:71:34:76:35:27:78:f4:15: 2a:eb:84:f4:18:c0:61:f6:f5:7c:2a:92:15:cc:a5: fa:72:84:2d:24:e5:6b:e9:fa:77:6e:56:56:81:44: 15:72:53:c3:9c:22:bb:ac:b4:e9:d8:98:db:28:48: 37:1a:e4:5a:a2:a0:f4:65:db:3f:61:09:ef:be:59: f4:ee:89:cb:aa:4f:34:a6:b3:5c:93:2c:4c:8b:e2: 86:49:7d:c8:88:f8:e8:4c:6f:38:cf:9b:6f:28:2f: 3e:cd:b2:a9:b5:21:04:50:29:ba:b3:88:bf:60:f1: 24:1c:cb:5c:fb:30:7d:da:5e:c2:cd:40:39:e9:50: 49:b4:db:e5:ed:3f:b3:08:12:f4:43:09:4a:22:76: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B0:AB:B2:A7:D4:8A:E4:28:94:DD:E0:7B:93:F1:E2:99:34:19:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afca1274-387b-3c98-94ee-429f3b804b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ce:46:6f:a2:c9:88:8b:bd:f0:52:ec:82:65:df:f8:e2:f6: fe:ad:b6:82:e0:7b:3d:c9:8f:2c:53:0e:f0:13:10:87:94:61: e4:36:da:92:04:3a:1d:db:29:77:97:47:c5:bf:73:d7:56:9a: da:27:a4:2e:00:9e:e5:bb:95:59:6c:78:85:84:2f:48:db:33: 2e:99:19:cd:74:9d:c5:fb:25:02:87:29:82:91:08:91:09:29: 55:cc:a7:fd:77:bc:ad:5c:8e:3c:f8:5f:70:91:74:f0:26:cc: 9d:9d:7f:91:18:a1:73:32:1f:b7:be:a9:0c:b3:a2:18:bb:2e: 92:f1:da:90:90:3c:69:86:d1:57:07:e8:a0:79:04:b1:d3:ce: 7e:1d:23:f6:9d:c2:69:41:67:7d:1c:e3:2c:ab:96:b8:ec:f9: 62:12:36:a7:52:ae:5b:9a:2b:1b:c2:58:78:63:af:a1:81:02: 24:f0:62:50:ce:f5:61:a7:85:cb:64:44:89:70:45:57:ba:f2: 16:b5:50:f1:1c:c0:35:45:5c:06:1b:b7:57:7b:eb:ec:37:43: ab:aa:51:13:ae:ad:8a:5d:15:f3:b6:d1:4a:55:3e:5d:cd:75: 34:c1:82:04:85:15:75:ff:7f:86:2d:d7:f8:11:01:ce:3d:36: 0e:2b:45:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6KThlpnfo63zkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDFlYTEzYzQtYTNmNy00YTNiLWExM2EtZjZhZDcwZGJlOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmykmlh4+zsS7XmeQwqf1Gs7ulaq4Pe1XC/qV 413S4Ec5AitQ7RDKSVC4RBA0smnRmxkMCzxJIyYY64ZosGo5bPKphenY+MbV8YF5 gBRxpzZgWWjCz83MU3cqnrV9ZJky8QfKk1/2w9pLRRXTvw+RcTR2NSd49BUq64T0 GMBh9vV8KpIVzKX6coQtJOVr6fp3blZWgUQVclPDnCK7rLTp2JjbKEg3GuRaoqD0 Zds/YQnvvln07onLqk80prNckyxMi+KGSX3IiPjoTG84z5tvKC8+zbKptSEEUCm6 s4i/YPEkHMtc+zB92l7CzUA56VBJtNvl7T+zCBL0QwlKInYPmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuwq7Kn1IrkKJTd4HuT8eKZNBl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZjYTEyNzQtMzg3Yi0z Yzk4LTk0ZWUtNDI5ZjNiODA0Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/ORm+iyYiLvfBS7IJl3/ji9v6ttoLgez3JjyxTDvATEIeUYeQ22pIE Oh3bKXeXR8W/c9dWmtonpC4AnuW7lVlseIWEL0jbMy6ZGc10ncX7JQKHKYKRCJEJ KVXMp/13vK1cjjz4X3CRdPAmzJ2df5EYoXMyH7e+qQyzohi7LpLx2pCQPGmG0VcH 6KB5BLHTzn4dI/adwmlBZ30c4yyrlrjs+WISNqdSrluaKxvCWHhjr6GBAiTwYlDO 9WGnhctkRIlwRVe68ha1UPEcwDVFXAYbt1d76+w3Q6uqUROurYpdFfO20UpVPl3N dTTBggSFFXX/f4Yt1/gRAc49Ng4rRZQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:25:01 2025 by rpki-client