$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4b5fbda-9f99-3103-95a1-23ba74645b75.roa File: b4b5fbda-9f99-3103-95a1-23ba74645b75.roa (raw, json) Hash identifier: erdY+FSp4TBrjBVHJjM1KwUN0b4ozU5YmJl7tDbqrZI= Subject key identifier: 66:25:46:7A:E0:7E:7C:5B:86:F9:32:29:1D:2B:82:68:05:4A:82:BE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679770211146ABD2B5F09680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4b5fbda-9f99-3103-95a1-23ba74645b75.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.86.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:70:21:11:46:ab:d2:b5:f0:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=604903e0-e000-4cb7-b219-47972ac5c007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:a0:b5:05:d5:f1:68:84:9c:48:dc:8b:7d: 62:dc:b4:c2:af:5c:fe:5f:86:68:a2:5a:78:84:a2: dc:d4:1b:fd:15:93:22:e2:f1:68:61:b2:fa:c0:43: ca:b2:86:9c:3f:53:e2:e3:03:9e:7c:eb:e4:2d:0d: 7c:47:5f:82:dc:2f:71:a0:ce:41:6a:1a:f8:2e:2b: bb:fc:e4:1c:89:a9:b3:80:b4:e6:4e:3a:07:13:9f: f5:cf:5c:fa:07:14:33:7f:d9:d7:bf:4f:b8:8a:74: af:0f:20:18:f5:e6:12:72:53:eb:e9:83:5f:6b:0b: eb:ea:c0:57:89:4b:c1:a1:38:be:b2:6d:fc:0e:4b: fd:3e:06:72:93:3c:55:d0:a8:db:57:3a:fc:a7:58: ab:69:59:54:46:17:d0:0c:13:dd:b6:fc:16:00:59: 67:dc:b0:76:45:3e:97:dd:2a:fd:4b:57:65:ee:66: c6:8d:9c:7d:55:f5:cf:f7:fe:29:1f:91:5d:7a:34: 9c:c4:cd:a9:66:4b:36:e2:49:79:04:4a:83:d8:e6: 54:ff:8b:82:11:5c:78:f7:c6:04:40:05:fa:69:d3: 5e:22:78:bb:ff:87:1f:6f:aa:f6:5b:83:1e:7f:75: 24:18:4d:48:43:17:4f:7a:5f:8d:69:85:4c:61:e6: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:25:46:7A:E0:7E:7C:5B:86:F9:32:29:1D:2B:82:68:05:4A:82:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4b5fbda-9f99-3103-95a1-23ba74645b75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:0e:be:0e:32:db:87:0f:73:dc:e7:4c:35:84:ac:3f:4d:9b: cb:6d:e7:2a:95:87:62:f4:fa:4c:f9:3e:a0:06:92:6e:14:ab: ee:78:94:e8:90:bd:a3:30:c4:04:98:bc:b8:72:72:47:0b:0f: 57:0d:89:95:7d:d5:3e:9b:ee:71:f7:95:6c:8f:c2:fb:07:66: 94:3c:06:06:30:34:fb:f7:e8:14:98:64:c6:ad:95:ed:bf:92: 71:78:18:b4:ec:de:d8:98:8e:38:f2:35:cb:ca:be:6d:79:f7: b0:b5:81:a3:12:6b:5c:4f:3f:bb:1a:be:7e:bb:c7:bb:85:99: 80:99:7a:a9:45:72:88:41:b1:7e:0b:3d:6b:a4:0a:0a:1d:d8: 1c:e4:61:34:48:79:80:95:c8:e6:44:a3:3a:e6:57:5b:02:a0: f6:e9:fb:f4:be:98:63:ab:b3:4b:5a:bd:35:fe:f4:f8:f2:59: 63:f2:9d:54:9c:1e:ba:21:7f:9a:56:e9:5d:22:6c:d6:bb:a8: 85:31:79:bf:44:57:02:53:e2:d4:27:59:ce:d6:57:ac:0e:47: b1:55:ca:9b:c9:41:d5:c2:52:fb:a0:c9:1b:93:ff:ee:ed:81: 41:47:f7:bf:9f:9f:12:bc:f7:95:f7:7d:72:52:77:e6:36:6e: a8:0d:96:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3AhEUar0rXwloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjA0OTAzZTAtZTAwMC00Y2I3LWIyMTktNDc5NzJhYzVjMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK2gtQXV8WiEnEjci31i3LTCr1z+X4Zoolp4 hKLc1Bv9FZMi4vFoYbL6wEPKsoacP1Pi4wOefOvkLQ18R1+C3C9xoM5Bahr4Liu7 /OQciamzgLTmTjoHE5/1z1z6BxQzf9nXv0+4inSvDyAY9eYSclPr6YNfawvr6sBX iUvBoTi+sm38Dkv9PgZykzxV0KjbVzr8p1iraVlURhfQDBPdtvwWAFln3LB2RT6X 3Sr9S1dl7mbGjZx9VfXP9/4pH5FdejScxM2pZks24kl5BEqD2OZU/4uCEVx498YE QAX6adNeIni7/4cfb6r2W4Mef3UkGE1IQxdPel+NaYVMYebF3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYlRnrgfnxbhvkyKR0rgmgFSoK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjRiNWZiZGEtOWY5OS0z MTAzLTk1YTEtMjNiYTc0NjQ1Yjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0Ovg4y24cPc9znTDWErD9Nm8tt5yqVh2L0+kz5PqAGkm4Uq+54lOiQ vaMwxASYvLhyckcLD1cNiZV91T6b7nH3lWyPwvsHZpQ8BgYwNPv36BSYZMatle2/ knF4GLTs3tiYjjjyNcvKvm1597C1gaMSa1xPP7savn67x7uFmYCZeqlFcohBsX4L PWukCgod2BzkYTRIeYCVyOZEozrmV1sCoPbp+/S+mGOrs0tavTX+9PjyWWPynVSc Hrohf5pW6V0ibNa7qIUxeb9EVwJT4tQnWc7WV6wOR7FVypvJQdXCUvugyRuT/+7t gUFH97+fnxK895X3fXJSd+Y2bqgNlrU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:55 2025 by rpki-client