$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba16e950-9f8f-3ed5-908c-b78f97624cc4.roa File: ba16e950-9f8f-3ed5-908c-b78f97624cc4.roa (raw, json) Hash identifier: WEjAC2t+EEJr1iXT2m2Fml+KUHbeYY988l56DgX9/Fw= Subject key identifier: 0E:10:64:AD:54:48:92:A8:0F:D8:5A:E3:90:7C:AD:86:AD:2E:02:E3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE1E144241D252865C5F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba16e950-9f8f-3ed5-908c-b78f97624cc4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.119.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:1e:14:42:41:d2:52:86:5c:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3f92c9b7-5d5d-4d97-be84-9d2c2cbe7575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:f8:34:cf:90:4f:42:9e:e7:8b:55:3d:e6: 00:cb:9f:6e:ce:f7:4e:22:a6:d7:81:f8:08:05:d1: 79:60:0d:a7:b2:9f:55:44:2d:3f:a8:00:8c:d6:96: 2c:2a:68:81:70:7c:5c:36:3b:37:bc:7b:5e:30:d6: 3d:60:12:28:91:08:32:34:e6:d8:d8:d2:41:0a:98: 26:22:4f:15:2a:0d:c4:5e:e6:9c:86:85:18:51:3d: 0a:0e:c0:e3:8f:30:09:bf:5c:32:4b:9a:c3:2a:34: fa:cf:2d:9d:95:c8:dc:56:b9:83:73:80:2f:cd:56: 3c:28:93:b3:0d:1b:18:c9:0e:0a:85:e2:77:8f:e7: 34:e1:7b:67:03:82:a6:ac:15:25:08:a2:af:0c:b5: 32:32:a7:da:9a:e2:02:78:b5:73:08:38:22:5c:26: 90:7d:a7:9b:ec:ff:d2:c1:29:a2:3b:10:b6:11:82: ac:24:eb:3e:4b:f5:c8:43:7b:b6:6f:96:ab:44:df: 58:87:36:26:61:96:34:73:03:c0:5c:e5:f1:74:da: 80:c9:7f:86:0d:e3:ea:5f:98:d9:21:25:db:f6:66: 3f:e9:cf:64:4a:ce:ab:6b:ae:8f:d3:14:3e:63:ea: 41:90:18:da:38:6d:d7:67:17:86:e7:07:fa:81:c1: 24:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:10:64:AD:54:48:92:A8:0F:D8:5A:E3:90:7C:AD:86:AD:2E:02:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba16e950-9f8f-3ed5-908c-b78f97624cc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:74:ef:86:5b:e7:4a:94:0c:57:97:2a:00:fd:6d:48:38:c0: f0:08:1b:6e:94:43:83:8c:73:41:42:91:6d:4f:51:bd:67:56: d4:e0:c4:73:28:b1:9d:3f:2f:99:fb:e5:20:22:4f:fe:28:4e: 34:e5:99:9c:cc:46:bd:9e:08:99:3b:99:83:7e:3c:4b:1f:91: 92:10:a3:77:35:6e:f3:b5:55:6a:e7:df:04:35:65:1a:33:3c: b7:f6:84:e2:2d:39:6a:04:9f:28:2d:29:73:ca:a1:64:fb:42: ad:44:76:3b:54:2f:64:30:2d:ff:e1:76:a7:19:94:2a:08:57: 46:86:e1:e7:5d:87:96:ad:3f:fe:f3:41:1d:8d:db:ee:58:84: 63:eb:f2:30:95:4e:ad:70:37:4c:58:39:45:c0:c6:f7:ec:69: 17:b8:41:62:2c:41:fd:2e:54:59:ec:a7:63:50:9f:e6:da:3c: ef:76:a9:34:f6:3b:9f:93:bf:57:d5:66:e6:73:e6:ff:b7:e5: ee:53:97:53:82:34:fc:5c:91:a7:1e:07:c1:31:9e:dd:f2:05: f6:1d:85:12:a8:8d:6d:95:93:3c:9a:82:c6:b9:11:14:a6:af: da:25:57:75:46:bd:e6:f1:51:6e:48:36:23:87:6e:56:b0:09: 60:04:87:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzh4UQkHSUoZcX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2Y5MmM5YjctNWQ1ZC00ZDk3LWJlODQtOWQyYzJjYmU3NTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1/4NM+QT0Ke54tVPeYAy59uzvdOIqbXgfgI BdF5YA2nsp9VRC0/qACM1pYsKmiBcHxcNjs3vHteMNY9YBIokQgyNObY2NJBCpgm Ik8VKg3EXuachoUYUT0KDsDjjzAJv1wyS5rDKjT6zy2dlcjcVrmDc4AvzVY8KJOz DRsYyQ4KheJ3j+c04XtnA4KmrBUlCKKvDLUyMqfamuICeLVzCDgiXCaQfaeb7P/S wSmiOxC2EYKsJOs+S/XIQ3u2b5arRN9YhzYmYZY0cwPAXOXxdNqAyX+GDePqX5jZ ISXb9mY/6c9kSs6ra66P0xQ+Y+pBkBjaOG3XZxeG5wf6gcEkvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4QZK1USJKoD9ha45B8rYatLgLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmExNmU5NTAtOWY4Zi0z ZWQ1LTkwOGMtYjc4Zjk3NjI0Y2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF074Zb50qUDFeXKgD9bUg4wPAIG26UQ4OMc0FCkW1PUb1nVtTgxHMo sZ0/L5n75SAiT/4oTjTlmZzMRr2eCJk7mYN+PEsfkZIQo3c1bvO1VWrn3wQ1ZRoz PLf2hOItOWoEnygtKXPKoWT7Qq1EdjtUL2QwLf/hdqcZlCoIV0aG4eddh5atP/7z QR2N2+5YhGPr8jCVTq1wN0xYOUXAxvfsaRe4QWIsQf0uVFnsp2NQn+baPO92qTT2 O5+Tv1fVZuZz5v+35e5Tl1OCNPxckaceB8Exnt3yBfYdhRKojW2Vkzyagsa5ERSm r9olV3VGvebxUW5INiOHblawCWAEhwk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:54 2025 by rpki-client