$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b90c383e-65b6-359a-9be7-febe063f8838.roa File: b90c383e-65b6-359a-9be7-febe063f8838.roa (raw, json) Hash identifier: 9Zudl3satPbLb0CdMyfU4Jz11Fbh45lfwS4OpXIngfY= Subject key identifier: C4:36:07:25:2F:31:95:CF:BE:38:B1:0A:40:D3:17:BD:16:CD:58:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797CD689D64C189B5EC8EC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b90c383e-65b6-359a-9be7-febe063f8838.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.131.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:cd:68:9d:64:c1:89:b5:ec:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=e8ac70ea-3220-48e1-ae48-b617cba06e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:c2:4c:1b:9f:00:18:b4:1a:a2:b4:97:17: d6:75:f9:d7:e2:65:f5:80:9a:bf:3c:c5:09:6e:0b: 13:03:6a:68:8a:86:5d:de:f1:bf:c8:98:61:46:29: 48:e8:86:6e:e4:32:d8:ca:6a:05:83:6e:0e:5b:53: 10:d9:46:b4:f3:69:50:da:3a:c0:9d:e1:a4:cc:f4: 89:2f:ee:5a:4e:af:9c:0e:b0:35:cb:29:a4:83:2a: f6:f8:98:69:47:13:49:b4:cd:4b:68:4c:53:14:d6: 39:54:17:7d:0a:ff:1e:52:28:99:f3:52:da:9c:97: 41:a4:a0:cf:b2:1c:68:f3:01:c9:78:03:56:b9:fc: 37:81:40:3b:e7:65:4c:7c:3b:df:d6:a8:c4:19:29: 17:29:38:4a:86:9a:f2:ea:32:80:d2:62:94:66:41: 60:b5:71:2e:ca:ab:6b:b7:51:6e:fa:ed:df:5c:01: 8d:cb:63:8e:83:e4:fd:55:36:cc:e0:01:ba:09:2f: c4:98:29:b0:f2:7c:bd:fa:dc:63:53:99:dc:08:cd: 89:0d:aa:39:f2:8f:b9:02:5a:65:32:64:cf:c5:dd: f2:1e:5e:76:b5:14:55:e8:ca:3d:de:f4:ad:cf:a4: fe:c6:b5:d8:05:ce:06:00:bd:98:1f:7d:d8:7d:47: 4c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:36:07:25:2F:31:95:CF:BE:38:B1:0A:40:D3:17:BD:16:CD:58:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b90c383e-65b6-359a-9be7-febe063f8838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6a:f1:1e:25:c6:4e:cf:75:50:f5:62:67:36:a5:73:cc:c0: 37:38:50:76:bd:64:9c:0b:b3:69:05:e4:e1:af:47:b0:6f:22: 10:94:bd:d7:0d:59:86:df:27:a0:18:6d:e8:f0:17:9c:95:82: 6b:09:e1:63:4c:71:fa:b6:86:ec:b4:ec:06:9c:73:6f:f9:bf: 05:5d:4f:ca:22:7d:51:ee:f6:9b:6c:22:a5:7d:3d:34:2d:1b: ca:95:f1:38:a2:1d:a2:68:1a:d6:55:13:4a:80:63:ec:3a:61: 1d:19:65:88:47:7a:c7:aa:49:45:d6:e6:ec:aa:92:b4:30:ef: 34:f4:db:71:b7:99:a8:14:a7:52:b6:e3:3f:a3:84:9e:81:36: f3:8b:e9:39:31:ff:40:d5:54:29:12:b9:24:43:95:f7:e6:8e: 95:c2:a8:cd:0e:1b:ab:4f:d0:b2:99:41:40:46:0f:ed:c1:2d: c6:f6:9c:9a:61:70:9d:12:73:b8:fd:62:c7:bd:a6:bb:28:1b: 62:9e:98:79:ee:69:c4:22:fc:63:1c:4f:91:57:02:54:29:05: c9:e6:8d:d4:8b:0f:85:e9:f6:e3:d5:8b:da:47:e3:5d:f8:9d: 77:75:32:5f:c8:26:50:79:dc:ad:00:56:a3:93:8c:3b:1b:56: 3b:f6:48:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl81onWTBibXsjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZThhYzcwZWEtMzIyMC00OGUxLWFlNDgtYjYxN2NiYTA2ZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZDCTBufABi0GqK0lxfWdfnX4mX1gJq/PMUJ bgsTA2poioZd3vG/yJhhRilI6IZu5DLYymoFg24OW1MQ2Ua082lQ2jrAneGkzPSJ L+5aTq+cDrA1yymkgyr2+JhpRxNJtM1LaExTFNY5VBd9Cv8eUiiZ81LanJdBpKDP shxo8wHJeANWufw3gUA752VMfDvf1qjEGSkXKThKhpry6jKA0mKUZkFgtXEuyqtr t1Fu+u3fXAGNy2OOg+T9VTbM4AG6CS/EmCmw8ny9+txjU5ncCM2JDao58o+5Alpl MmTPxd3yHl52tRRV6Mo93vStz6T+xrXYBc4GAL2YH33YfUdMEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ2ByUvMZXPvjixCkDTF70WzVhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjkwYzM4M2UtNjViNi0z NTlhLTliZTctZmViZTA2M2Y4ODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1q8R4lxk7PdVD1Ymc2pXPMwDc4UHa9ZJwLs2kF5OGvR7BvIhCUvdcN WYbfJ6AYbejwF5yVgmsJ4WNMcfq2huy07Aacc2/5vwVdT8oifVHu9ptsIqV9PTQt G8qV8TiiHaJoGtZVE0qAY+w6YR0ZZYhHeseqSUXW5uyqkrQw7zT023G3magUp1K2 4z+jhJ6BNvOL6Tkx/0DVVCkSuSRDlffmjpXCqM0OG6tP0LKZQUBGD+3BLcb2nJph cJ0Sc7j9Yse9prsoG2KemHnuacQi/GMcT5FXAlQpBcnmjdSLD4Xp9uPVi9pH4134 nXd1Ml/IJlB53K0AVqOTjDsbVjv2SCY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:51 2025 by rpki-client