$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b26896a9-451a-3681-84a5-078e952fc131.roa File: b26896a9-451a-3681-84a5-078e952fc131.roa (raw, json) Hash identifier: XRYiELiLLsuXyXzdySVwI8u/RBcd3cKWqq2zk/eQ0cU= Subject key identifier: 78:FB:12:38:BF:BF:9E:1A:EE:14:EE:61:8A:71:87:7B:79:C7:43:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C6498D4FBBF0B3397580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b26896a9-451a-3681-84a5-078e952fc131.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.133.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c6:49:8d:4f:bb:f0:b3:39:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a21a86aa-abe0-4136-a199-95b747e5889c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:c2:26:c7:72:b1:2e:bc:20:2c:0e:07:36: 6d:cf:2a:c7:20:cc:27:f2:c3:be:82:8d:f1:13:7e: ce:af:19:a7:38:ee:7c:4d:44:aa:f6:e4:23:2b:8a: 98:2d:73:56:e1:b6:3f:98:e7:d3:78:f0:0a:7a:db: 21:12:6d:28:2d:8f:3a:12:c9:91:13:02:47:de:4a: b9:a9:29:3c:3f:42:7a:e6:ea:61:ee:28:06:5d:d4: 9b:23:74:22:b9:83:03:60:a7:22:53:ee:82:85:3e: b3:48:8d:1f:eb:e3:a3:98:57:a2:82:fe:e2:a5:d2: 0f:a9:0b:3f:bc:1d:1a:2f:79:69:ea:f0:ef:9f:e1: d6:15:d9:97:98:f1:20:da:41:c5:f9:0f:9d:95:5d: 37:38:96:e4:89:34:19:5f:73:e0:4c:20:f5:1d:61: e0:06:90:f0:3e:f6:0e:22:96:cf:ec:94:a5:c0:4f: 10:f0:84:f4:d5:52:a3:a4:38:cb:75:0b:60:2e:93: 98:7c:0f:88:55:e5:7e:76:56:6a:40:0c:4e:89:be: 56:46:e6:21:68:12:7b:30:c3:89:92:27:9c:06:58: 3c:b2:f4:24:b1:c9:0a:42:b7:be:76:8d:13:5a:28: 8b:11:ca:46:74:d3:f7:c7:cd:12:c5:e8:7b:02:d0: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FB:12:38:BF:BF:9E:1A:EE:14:EE:61:8A:71:87:7B:79:C7:43:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b26896a9-451a-3681-84a5-078e952fc131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e6:e7:5a:7d:1a:4d:32:3e:22:70:dc:05:5e:87:ea:6d:84: 01:ee:d7:20:1c:20:b3:5d:3a:dc:65:b1:8e:99:be:4d:b2:7f: 9c:62:2e:ec:8a:b3:58:7e:08:14:38:87:13:5a:ff:7c:5c:7d: 9c:93:20:35:21:9e:20:52:7e:c5:e5:51:7e:6e:aa:89:59:c6: 38:14:30:7f:4d:8a:0e:d5:c1:23:43:74:18:5c:c1:8f:0f:e8: f4:6e:70:e3:08:71:68:11:d7:d3:2f:e4:65:37:09:80:11:45: 16:7d:6d:00:22:2f:38:f7:82:3e:da:5c:10:ed:48:f1:72:ab: 71:2c:71:a2:05:21:0c:9c:2f:90:44:29:b6:c9:03:7d:7e:64: ad:d3:ca:35:87:7d:6b:73:e7:51:f4:45:de:b6:48:60:25:b9: 17:c0:11:0a:1b:c3:8a:bd:65:2e:0f:64:2b:68:02:09:db:84: cb:e3:a7:c1:3b:38:8c:b3:ad:a2:ec:19:74:80:48:e6:a4:22: 67:53:ca:ed:1c:1d:d3:f3:4f:27:1a:20:60:07:3b:48:c0:7a: a3:cd:91:9d:da:f6:21:90:40:65:e3:59:3b:df:19:0d:7d:54: f9:fb:5e:f5:f9:36:1e:6f:9e:4c:76:77:6c:d2:f4:cc:8b:0c: 6d:c1:51:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8ZJjU+78LM5dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTIxYTg2YWEtYWJlMC00MTM2LWExOTktOTViNzQ3ZTU4ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm43CJsdysS68ICwOBzZtzyrHIMwn8sO+go3x E37OrxmnOO58TUSq9uQjK4qYLXNW4bY/mOfTePAKetshEm0oLY86EsmREwJH3kq5 qSk8P0J65uph7igGXdSbI3QiuYMDYKciU+6ChT6zSI0f6+OjmFeigv7ipdIPqQs/ vB0aL3lp6vDvn+HWFdmXmPEg2kHF+Q+dlV03OJbkiTQZX3PgTCD1HWHgBpDwPvYO IpbP7JSlwE8Q8IT01VKjpDjLdQtgLpOYfA+IVeV+dlZqQAxOib5WRuYhaBJ7MMOJ kiecBlg8svQksckKQre+do0TWiiLEcpGdNP3x80Sxeh7AtAUIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHj7Eji/v54a7hTuYYpxh3t5x0OiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjI2ODk2YTktNDUxYS0z NjgxLTg0YTUtMDc4ZTk1MmZjMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3m51p9Gk0yPiJw3AVeh+pthAHu1yAcILNdOtxlsY6Zvk2yf5xiLuyK s1h+CBQ4hxNa/3xcfZyTIDUhniBSfsXlUX5uqolZxjgUMH9Nig7VwSNDdBhcwY8P 6PRucOMIcWgR19Mv5GU3CYARRRZ9bQAiLzj3gj7aXBDtSPFyq3EscaIFIQycL5BE KbbJA31+ZK3TyjWHfWtz51H0Rd62SGAluRfAEQobw4q9ZS4PZCtoAgnbhMvjp8E7 OIyzraLsGXSASOakImdTyu0cHdPzTycaIGAHO0jAeqPNkZ3a9iGQQGXjWTvfGQ19 VPn7XvX5Nh5vnkx2d2zS9MyLDG3BUV8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:21:29 2025 by rpki-client