$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb3fc26a-fcca-3494-ae6a-328a5cce2b3a.roa File: bb3fc26a-fcca-3494-ae6a-328a5cce2b3a.roa (raw, json) Hash identifier: o62fKlFiTu0ZE3YTyCZjlOv2FEhQcSLOJ2j5RAUlxrQ= Subject key identifier: E0:38:27:D9:41:67:DF:35:37:78:32:7B:F9:B6:12:DF:92:EA:7A:FA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67978E92DBA5DCA9AB7EE300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb3fc26a-fcca-3494-ae6a-328a5cce2b3a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 34.98.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:8e:92:db:a5:dc:a9:ab:7e:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=ebeb7d24-e16e-4ca5-b204-665bf01aef31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:48:a8:fb:9d:2c:d7:c0:a0:a5:cd:c8:55: df:e1:06:a0:da:27:69:7d:7c:92:61:04:4e:4d:9e: 5b:77:b9:fe:06:0d:58:b9:e6:d4:d9:2a:50:42:51: 90:db:49:5c:1e:59:93:03:64:3e:f3:20:29:a5:70: 02:b6:0c:42:84:00:53:24:0e:13:80:26:48:cf:49: 26:97:98:11:96:2d:54:5c:b2:2c:94:32:96:ad:40: 20:1b:07:09:3f:41:1f:f0:8a:45:d7:4e:23:f7:5a: ad:21:3d:6a:f6:f0:f9:ac:63:47:89:94:8e:cf:d5: a5:a7:28:75:33:d2:f3:92:8c:cd:15:16:81:dd:d6: 3c:13:af:e6:d4:be:64:fe:88:07:25:20:5d:c9:f5: db:f1:e4:c9:26:69:9b:ec:34:20:20:30:84:b4:0a: 9a:57:53:88:81:d1:9f:c3:de:6f:40:8d:b3:f3:7c: b7:4d:4c:bd:06:70:b5:3d:b2:e6:ab:71:e5:ff:81: 46:05:d6:0a:70:b3:6a:5e:2f:59:f2:a6:76:bf:b0: 1c:96:b1:4b:57:7b:b5:94:a2:30:8f:45:1c:51:c6: 74:f2:ca:fc:55:e8:ec:35:10:7d:b1:57:df:04:72: 59:91:79:02:04:85:86:14:92:d0:47:b8:24:0d:b6: 68:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:38:27:D9:41:67:DF:35:37:78:32:7B:F9:B6:12:DF:92:EA:7A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb3fc26a-fcca-3494-ae6a-328a5cce2b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5a:c9:89:17:30:8c:7a:cf:08:47:4b:0d:a1:de:b3:69:42: 50:c4:5a:a1:e2:2e:c1:8f:ad:be:01:7c:a0:44:81:d6:c2:ce: 09:90:a8:c8:89:b0:ba:97:38:ab:bb:46:ec:c7:bb:ae:fa:32: 25:ec:a1:59:3d:4a:86:d5:7c:77:95:25:41:71:c4:93:ad:6d: c5:6c:29:f9:58:62:2b:f0:aa:4c:29:e9:46:40:e2:c3:77:96: c8:93:68:0f:07:d8:7b:09:83:5e:86:6f:7e:06:63:18:55:c7: 73:bb:05:4a:f0:30:c7:ae:1f:f3:0c:b3:d5:7f:52:40:22:66: 12:a9:33:ad:ad:bc:d3:2c:7f:a7:61:da:e3:60:29:59:a6:af: 25:9b:40:40:6a:af:21:0a:69:fe:ea:2e:3c:45:1c:cd:7a:23: e7:26:7c:9e:06:1f:4e:96:d2:80:a2:df:7a:7a:ac:3f:ab:8f: 67:47:65:2c:b8:c9:c6:35:df:cc:b2:c1:7e:4e:45:d3:4b:d8: 8c:5c:2e:fb:0e:d3:1c:85:f5:73:53:50:ad:05:a7:66:c7:c7: c0:8c:75:0f:6a:e1:7f:07:8d:f1:77:ca:69:5d:ca:cf:85:a5: f1:3b:d0:a9:df:1f:cd:7d:be:3b:7a:bc:d9:19:84:16:06:8b: 1a:cf:48:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl46S26Xcqat+4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWJlYjdkMjQtZTE2ZS00Y2E1LWIyMDQtNjY1YmYwMWFlZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNJIqPudLNfAoKXNyFXf4Qag2idpfXySYQRO TZ5bd7n+Bg1YuebU2SpQQlGQ20lcHlmTA2Q+8yAppXACtgxChABTJA4TgCZIz0km l5gRli1UXLIslDKWrUAgGwcJP0Ef8IpF104j91qtIT1q9vD5rGNHiZSOz9Wlpyh1 M9LzkozNFRaB3dY8E6/m1L5k/ogHJSBdyfXb8eTJJmmb7DQgIDCEtAqaV1OIgdGf w95vQI2z83y3TUy9BnC1PbLmq3Hl/4FGBdYKcLNqXi9Z8qZ2v7AclrFLV3u1lKIw j0UcUcZ08sr8VejsNRB9sVffBHJZkXkCBIWGFJLQR7gkDbZoEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA4J9lBZ981N3gye/m2Et+S6nr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmIzZmMyNmEtZmNjYS0z NDk0LWFlNmEtMzI4YTVjY2UyYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBImKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlayYkXMIx6zwhHSw2h3rNpQlDEWqHiLsGPrb4BfKBEgdbCzgmQqMiJ sLqXOKu7RuzHu676MiXsoVk9SobVfHeVJUFxxJOtbcVsKflYYivwqkwp6UZA4sN3 lsiTaA8H2HsJg16Gb34GYxhVx3O7BUrwMMeuH/MMs9V/UkAiZhKpM62tvNMsf6dh 2uNgKVmmryWbQEBqryEKaf7qLjxFHM16I+cmfJ4GH06W0oCi33p6rD+rj2dHZSy4 ycY138yywX5ORdNL2IxcLvsO0xyF9XNTUK0Fp2bHx8CMdQ9q4X8HjfF3ymldys+F pfE70KnfH819vjt6vNkZhBYGixrPSC4= -----END CERTIFICATE-----Generated at Sun Oct 19 23:59:23 2025 by rpki-client