$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa File: ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa (raw, json) Hash identifier: brDYFhqVhHkQN/nUMAFmzOhSWyBheoT6P+F+UIgPZKw= Subject key identifier: 62:DB:A4:FA:FC:F2:85:EA:C9:02:70:CA:97:D9:82:AD:97:B3:14:8D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A64E32E5CEB068862D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 19527 IP address blocks: 34.3.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a6:4e:32:e5:ce:b0:68:86:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=45478639-5ba3-47e5-a65e-d87b3cb37619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:2b:eb:94:6b:9e:85:84:a6:32:dc:42:e3: fd:21:c6:ef:49:0e:c2:a8:fe:6e:7c:fa:bd:47:f8: a8:65:3c:01:0d:8e:b4:86:63:b4:2a:5d:0b:68:82: 6d:b3:7f:27:4c:10:a6:9a:a5:fd:fd:bf:d1:8c:28: 58:bd:54:3d:8c:65:d8:db:1e:98:df:b6:79:5c:cf: 8e:53:63:06:ac:5d:dd:87:fe:09:2f:fc:32:47:85: 67:83:6f:ef:e1:b5:4a:43:71:be:78:15:07:70:15: a4:90:98:69:42:eb:61:75:94:25:11:e4:05:94:4d: 96:b7:7e:1f:56:a7:d1:0f:b5:24:ba:fc:9e:cb:f1: 5a:85:de:ff:36:f0:d4:07:5b:1d:f8:51:d7:86:6b: 39:1c:a8:4f:bb:43:cb:58:2c:75:77:7c:aa:45:54: 64:52:0e:98:bc:f1:aa:06:3c:ef:41:01:fc:90:a1: a0:dd:8c:d2:e2:8e:13:98:eb:12:88:31:06:48:56: 70:2f:25:42:e4:a2:80:71:13:b5:30:ac:cd:02:1d: f7:5e:5f:bc:83:2e:b6:10:91:02:c3:00:87:31:cf: cd:55:12:fd:04:6e:4f:15:2e:2c:fd:b9:7a:b8:33: 27:fe:00:c9:ee:24:d5:49:3b:c6:39:f1:7a:ee:d6: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DB:A4:FA:FC:F2:85:EA:C9:02:70:CA:97:D9:82:AD:97:B3:14:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ea:ba:95:46:a9:3f:d7:c4:b7:f9:af:e4:dd:40:67:6b:be: a7:41:6a:ac:b2:b6:8c:6a:66:75:66:ab:39:b6:1c:aa:01:67: f3:25:ec:90:ca:7c:03:52:31:e0:af:86:0c:9c:86:24:f9:37: 7d:52:5b:54:b5:f5:00:0c:15:6a:ce:39:c0:a8:38:f2:33:5d: a7:26:8f:fe:b0:0f:fa:1a:78:ee:13:39:63:f5:21:19:31:45: 1b:f2:2f:c2:c8:03:71:92:6b:40:46:d1:14:db:73:e6:35:af: c5:a9:3b:33:17:67:5b:f9:21:47:5e:aa:bd:4a:31:07:2b:9a: 8a:e7:ce:ea:e3:ad:85:0a:8b:77:0b:77:6e:ad:86:f7:7e:ee: b2:0c:bd:7e:70:93:e4:6c:d5:ed:10:e9:19:61:90:23:7a:9f: fc:92:70:81:f3:69:66:f1:ff:43:85:3c:ca:3c:e1:66:c7:a5: 63:ae:91:0f:fb:8f:72:1b:0a:54:8b:72:89:9f:b6:3f:40:62: 78:b8:1b:93:bb:a1:0a:01:15:70:7e:45:ce:3b:5b:74:bd:f7: f8:64:f5:67:b0:d0:a7:75:04:8c:5c:fa:f0:62:2c:35:8d:fe: bb:54:ce:dd:55:45:c3:8a:39:d6:78:10:95:63:a7:cd:0b:5c: b4:45:b6:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6ZOMuXOsGiGLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDU0Nzg2MzktNWJhMy00N2U1LWE2NWUtZDg3YjNjYjM3NjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNQr65RrnoWEpjLcQuP9IcbvSQ7CqP5ufPq9 R/ioZTwBDY60hmO0Kl0LaIJts38nTBCmmqX9/b/RjChYvVQ9jGXY2x6Y37Z5XM+O U2MGrF3dh/4JL/wyR4Vng2/v4bVKQ3G+eBUHcBWkkJhpQuthdZQlEeQFlE2Wt34f VqfRD7Ukuvyey/Fahd7/NvDUB1sd+FHXhms5HKhPu0PLWCx1d3yqRVRkUg6YvPGq BjzvQQH8kKGg3YzS4o4TmOsSiDEGSFZwLyVC5KKAcRO1MKzNAh33Xl+8gy62EJEC wwCHMc/NVRL9BG5PFS4s/bl6uDMn/gDJ7iTVSTvGOfF67taEYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLbpPr88oXqyQJwypfZgq2XsxSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmEyYTFhM2UtYmI5Ni0z NDhkLWE4MzMtZDc2ZmZkM2Q4MjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfqupVGqT/XxLf5r+TdQGdrvqdBaqyytoxqZnVmqzm2HKoBZ/Ml7JDK fANSMeCvhgychiT5N31SW1S19QAMFWrOOcCoOPIzXacmj/6wD/oaeO4TOWP1IRkx RRvyL8LIA3GSa0BG0RTbc+Y1r8WpOzMXZ1v5IUdeqr1KMQcrmornzurjrYUKi3cL d26thvd+7rIMvX5wk+Rs1e0Q6RlhkCN6n/yScIHzaWbx/0OFPMo84WbHpWOukQ/7 j3IbClSLcomftj9AYni4G5O7oQoBFXB+Rc47W3S99/hk9Wew0Kd1BIxc+vBiLDWN /rtUzt1VRcOKOdZ4EJVjp80LXLRFtgU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:52 2025 by rpki-client