$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b04c07b8-cff9-318b-a338-11569a7f320a.roa File: b04c07b8-cff9-318b-a338-11569a7f320a.roa (raw, json) Hash identifier: oPfU+cUDJCejAcMgtzbJ0WEdG7Qjk/PN+0d4G0xco0U= Subject key identifier: 9C:4C:66:2E:7D:3C:2C:47:3F:C5:18:F9:90:45:DE:53:6E:4C:EE:E2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C7F171304C53C3457D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b04c07b8-cff9-318b-a338-11569a7f320a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.146.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c7:f1:71:30:4c:53:c3:45:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=6a33f8da-e644-4e8f-aac8-2541400db266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:57:28:bd:8b:ed:18:bf:46:91:66:93:7f: 71:0c:5a:fd:19:13:be:ca:4e:0b:db:0b:5f:b6:aa: a0:cc:6d:c3:85:20:a9:13:0e:f8:de:27:78:73:97: d3:9c:68:12:79:af:85:2c:36:23:c2:68:c0:ef:e0: 6f:1f:e5:23:31:8c:1f:c9:a0:5e:bb:af:1d:1c:8c: 76:3a:84:86:d8:9c:ef:04:9d:f7:b7:06:0c:6f:e5: 97:28:9f:ee:88:32:00:69:d1:6e:f6:b0:96:a1:69: 24:cf:81:cf:ab:40:8b:9c:b6:58:1d:d6:93:e3:27: 17:96:01:63:2f:63:a8:5d:a9:f2:15:4d:07:5a:e9: bb:10:9f:a8:73:aa:a5:12:99:d6:a0:75:58:ce:13: 27:83:27:46:00:a9:02:c4:23:0e:52:94:4c:4c:29: e5:57:4c:15:5f:07:d0:78:eb:29:e5:87:f8:fe:d3: 97:69:f8:bc:5d:0a:83:7e:b0:9e:31:be:7b:87:d0: e9:a7:96:2d:b3:85:f4:62:a8:c9:76:db:4e:ad:64: 61:26:45:b5:24:f5:99:c8:f0:28:d1:42:d2:3c:0e: 79:ba:6c:e2:de:45:e5:42:f4:83:6c:97:76:e4:67: 37:fb:d7:57:16:7b:a0:e1:eb:db:09:f7:6d:e5:bc: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4C:66:2E:7D:3C:2C:47:3F:C5:18:F9:90:45:DE:53:6E:4C:EE:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b04c07b8-cff9-318b-a338-11569a7f320a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.146.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:9c:5d:ab:70:25:82:32:5a:8e:dc:9c:69:c2:6c:1e:79:fe: 3f:e1:46:95:d0:4b:e3:a3:8a:03:e5:e3:29:5c:56:98:8c:ae: 12:90:32:d0:15:6d:5a:fa:30:bd:e3:b0:af:46:af:8d:9b:9c: 21:02:0b:af:dc:a8:7c:0f:eb:0e:23:3b:a6:9f:dc:f4:de:f9: 2c:44:d4:7f:b0:d4:ea:21:a5:43:f3:59:af:df:5d:a1:9d:5c: 2e:d0:a6:32:7d:a3:5e:20:14:23:ac:2b:ee:f6:f6:e7:98:d6: ac:07:18:3d:60:e7:cf:1f:ef:44:b0:f5:8d:ab:9b:f9:46:b9: 42:9c:f9:4b:c2:69:f7:bc:99:a3:d1:ee:f9:80:0b:bc:2f:4f: 95:76:7a:db:63:b0:64:96:ee:a3:0e:e9:22:95:19:01:1d:66: af:9a:9f:1e:3f:f1:94:85:3c:a3:e4:d4:a2:96:2f:82:ca:dc: 2a:da:17:31:5c:12:5b:f1:5e:d3:73:ae:4f:b2:b8:8b:cd:c1: 5d:cb:ce:f7:fd:2d:70:ec:8a:99:43:42:ab:1d:00:a1:0b:bb: 90:f2:9a:83:09:23:5c:50:e2:de:66:ca:d8:8f:46:b2:bb:81: b9:51:c6:4f:35:51:d5:41:b6:31:f1:13:94:39:a5:b2:05:4d: ea:49:0b:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8fxcTBMU8NFfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NmEzM2Y4ZGEtZTY0NC00ZThmLWFhYzgtMjU0MTQwMGRiMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTpXKL2L7Ri/RpFmk39xDFr9GRO+yk4L2wtf tqqgzG3DhSCpEw743id4c5fTnGgSea+FLDYjwmjA7+BvH+UjMYwfyaBeu68dHIx2 OoSG2JzvBJ33twYMb+WXKJ/uiDIAadFu9rCWoWkkz4HPq0CLnLZYHdaT4ycXlgFj L2OoXanyFU0HWum7EJ+oc6qlEpnWoHVYzhMngydGAKkCxCMOUpRMTCnlV0wVXwfQ eOsp5Yf4/tOXafi8XQqDfrCeMb57h9Dpp5Yts4X0YqjJdttOrWRhJkW1JPWZyPAo 0ULSPA55umzi3kXlQvSDbJd25Gc3+9dXFnug4evbCfdt5byvrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxMZi59PCxHP8UY+ZBF3lNuTO7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjA0YzA3YjgtY2ZmOS0z MThiLWEzMzgtMTE1NjlhN2YzMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6cXatwJYIyWo7cnGnCbB55/j/hRpXQS+OjigPl4ylcVpiMrhKQMtAV bVr6ML3jsK9Gr42bnCECC6/cqHwP6w4jO6af3PTe+SxE1H+w1OohpUPzWa/fXaGd XC7QpjJ9o14gFCOsK+729ueY1qwHGD1g588f70Sw9Y2rm/lGuUKc+UvCafe8maPR 7vmAC7wvT5V2ettjsGSW7qMO6SKVGQEdZq+anx4/8ZSFPKPk1KKWL4LK3CraFzFc ElvxXtNzrk+yuIvNwV3Lzvf9LXDsiplDQqsdAKELu5DymoMJI1xQ4t5mytiPRrK7 gblRxk81UdVBtjHxE5Q5pbIFTepJCzM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:41 2025 by rpki-client