$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb97bc54-5d13-3f4c-a924-b6d367c14f77.roa File: bb97bc54-5d13-3f4c-a924-b6d367c14f77.roa (raw, json) Hash identifier: SW+Y5XivJ1KMkrOSvxYg3R7vK9LPZliubIFZVXMRmKA= Subject key identifier: 8B:40:59:17:72:C7:B9:C7:2C:7E:B8:3C:FD:D0:89:A2:94:98:65:89 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D78B1BD86CBC4DCB2280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb97bc54-5d13-3f4c-a924-b6d367c14f77.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 34.164.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d7:8b:1b:d8:6c:bc:4d:cb:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f42a9608-4907-4c9f-9587-488d5d59a682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:84:42:4f:92:0c:a0:c2:38:68:e1:c9:f5:00: be:6f:93:a0:66:3b:fc:72:7a:c6:fa:79:1b:71:4d: 6f:bf:53:e9:95:4a:53:d6:f9:b2:ad:c8:4d:62:78: 32:c2:b0:32:fc:7c:34:46:ca:bc:ba:42:4e:ff:40: b3:ca:1d:04:58:9d:24:69:fa:39:34:a8:79:c7:23: af:6f:09:b0:1d:41:f2:64:b8:1f:e2:c6:37:b8:c8: 72:35:d3:1c:12:be:3e:d5:92:41:b5:1e:c4:b9:b1: 78:90:a5:58:94:be:6c:ae:34:25:a4:96:48:39:9b: 81:04:5f:01:3d:84:18:0a:5c:b4:b5:31:af:68:0a: 11:8e:e0:9f:02:00:50:bc:f3:ca:e2:79:bf:07:5a: 52:40:49:a9:ba:36:07:06:ae:31:a8:e5:44:29:55: 71:a0:01:ac:f8:f4:e8:9a:35:0d:cd:05:a6:53:b5: 76:8b:b6:3a:ec:12:04:d9:97:f8:0b:15:84:50:1a: ed:02:6a:7d:a6:19:89:15:5f:cf:54:a4:fc:9a:fb: 2e:3d:06:be:61:b5:56:bd:a1:3f:7c:44:67:42:64: 66:1e:46:32:bf:dc:67:39:65:6a:88:a3:7b:8e:69: 99:d8:ea:74:57:f9:e0:2c:34:47:00:e2:bc:91:ef: fd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:40:59:17:72:C7:B9:C7:2C:7E:B8:3C:FD:D0:89:A2:94:98:65:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb97bc54-5d13-3f4c-a924-b6d367c14f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.164.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:23:b3:23:69:b0:66:e0:31:60:46:99:b6:33:b9:64:bd:25: 34:14:e1:60:ef:53:0a:8f:60:bb:fd:e0:8e:5f:35:24:eb:0e: c2:21:bd:13:1a:69:27:23:61:25:9c:34:af:e4:bd:fc:a7:a4: cb:eb:cd:72:ad:64:b3:35:52:ac:a8:f6:82:e6:36:46:84:c3: 5f:8c:c6:41:68:61:e3:e7:6b:5f:21:52:d0:4f:36:cf:79:7d: 92:e0:7c:d6:f6:f8:f2:38:df:05:da:33:ee:e6:c2:e0:67:99: 11:ae:ad:f0:d9:eb:6b:dd:d2:58:9f:47:3e:10:37:54:e5:c7: 92:f3:93:7b:20:73:67:c6:b5:a5:a2:a9:41:4f:6e:8d:e2:c8: 42:cc:ec:80:ce:07:9c:e0:7f:24:d0:9b:fc:0c:ef:82:08:b1: 5a:fe:e9:62:8a:ed:8c:53:af:a9:12:14:82:c3:0d:55:47:e2: b0:84:f2:38:c8:9f:87:b5:ac:ff:55:3b:eb:f6:6b:21:99:bf: bc:37:d2:13:9e:96:e7:e5:09:b7:09:a9:c3:ed:ba:9a:bb:75: 8c:53:06:fb:a0:29:77:13:84:a5:c2:66:6f:64:ab:7b:89:e5: 2a:30:59:b9:fc:5e:3b:13:b9:68:1a:89:7f:08:c8:3e:c7:8d: 2e:4a:e4:71 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtnl9eLG9hsvE3LIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjQyYTk2MDgtNDkwNy00YzlmLTk1ODctNDg4ZDVkNTlhNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioRCT5IMoMI4aOHJ9QC+b5OgZjv8cnrG+nkb cU1vv1PplUpT1vmyrchNYngywrAy/Hw0Rsq8ukJO/0Czyh0EWJ0kafo5NKh5xyOv bwmwHUHyZLgf4sY3uMhyNdMcEr4+1ZJBtR7EubF4kKVYlL5srjQlpJZIOZuBBF8B PYQYCly0tTGvaAoRjuCfAgBQvPPK4nm/B1pSQEmpujYHBq4xqOVEKVVxoAGs+PTo mjUNzQWmU7V2i7Y67BIE2Zf4CxWEUBrtAmp9phmJFV/PVKT8mvsuPQa+YbVWvaE/ fERnQmRmHkYyv9xnOWVqiKN7jmmZ2Op0V/ngLDRHAOK8ke/9CQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFItAWRdyx7nHLH64PP3QiaKUmGWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmI5N2JjNTQtNWQxMy0z ZjRjLWE5MjQtYjZkMzY3YzE0Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPiOzI2mwZuAxYEaZtjO5ZL0lNBThYO9TCo9gu/3gjl81JOsOwiG9Expp JyNhJZw0r+S9/Keky+vNcq1kszVSrKj2guY2RoTDX4zGQWhh4+drXyFS0E82z3l9 kuB81vb48jjfBdoz7ubC4GeZEa6t8Nnra93SWJ9HPhA3VOXHkvOTeyBzZ8a1paKp QU9ujeLIQszsgM4HnOB/JNCb/AzvggixWv7pYortjFOvqRIUgsMNVUfisITyOMif h7Ws/1U76/ZrIZm/vDfSE56W5+UJtwmpw+26mrt1jFMG+6ApdxOEpcJmb2Sre4nl KjBZufxeOxO5aBqJfwjIPseNLkrkcQ== -----END CERTIFICATE-----Generated at Mon Oct 20 00:05:16 2025 by rpki-client