$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa File: bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa (raw, json) Hash identifier: rXRhYLNy3V0aAcB4qM/Dy6uIGCpG4Wd2Bc91Kimlalk= Subject key identifier: 57:60:C2:A5:6A:8E:24:42:C9:A8:8F:FD:81:39:79:30:FC:A2:F1:C5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67975EC3D07CCA674A8CEEA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.138.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:5e:c3:d0:7c:ca:67:4a:8c:ee:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=97835b62-2a37-40c1-a271-9eef7b80bd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:5d:85:6b:8c:b4:b8:e4:80:9c:84:80:21: 00:1e:9e:b0:be:95:4a:ae:2d:14:aa:fc:e3:00:49: 6d:7a:34:60:2a:29:a7:bd:15:0f:b8:89:ef:b2:cd: 9c:6b:09:55:9d:83:b1:5e:4a:73:12:a8:38:44:28: 29:50:91:84:b9:86:2d:54:1e:7b:9c:55:1e:a8:40: cc:ce:01:34:45:f7:76:ee:3c:f7:3b:0d:8b:44:73: 44:b2:94:5d:9a:aa:2c:3a:94:1a:65:11:6e:ae:12: 29:7c:8a:78:5f:22:eb:7d:f4:f1:43:ee:f9:77:38: 21:72:a7:21:94:31:a4:9b:cc:ae:ed:f5:c6:51:ad: c5:1d:95:14:a9:8a:44:f4:59:c1:08:c1:ab:82:38: a6:0a:6a:ad:13:b9:47:a1:d6:e8:3d:e2:4d:a5:40: c6:6b:e7:9e:fe:be:90:ea:99:eb:dd:d2:11:1a:25: a9:a2:fe:d8:58:2a:d0:5a:07:6e:9e:80:8d:c6:fd: 08:10:5a:ce:9a:bd:a6:1d:d7:e1:f9:ee:56:99:85: a5:5a:5d:89:23:e5:90:f5:38:25:9e:a4:72:5c:19: 1a:da:f4:cc:89:67:05:82:cd:09:15:f8:41:ee:a1: 1b:82:3d:8d:ef:3e:82:5d:aa:53:63:32:c4:a4:ce: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:60:C2:A5:6A:8E:24:42:C9:A8:8F:FD:81:39:79:30:FC:A2:F1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1c:f6:b2:71:68:8c:3d:ec:63:39:02:71:eb:6a:82:68:6e: 60:27:9a:9f:97:d5:f2:4a:3a:71:74:67:e1:65:1e:b4:6e:81: 5d:ae:42:42:56:25:06:6a:ed:61:69:3b:8b:91:da:9b:f4:6c: fd:73:52:c2:cf:86:1c:6c:89:02:c0:4e:7b:06:d4:69:bc:3f: 02:68:52:56:b5:4c:dc:7f:3b:f6:74:d2:67:3a:af:cc:3a:ab: ee:81:e6:bd:0c:28:bd:bb:b4:42:72:ee:2d:07:e7:9d:44:6f: 74:f0:1b:ab:85:ee:78:99:fc:b3:29:b0:b9:ff:da:23:4d:b8: 7a:82:dd:25:46:6d:87:89:b8:92:6a:e6:d6:86:37:49:62:66: 48:b6:8c:b6:ea:76:2d:b3:b4:ce:f0:ef:04:2f:02:35:01:1a: 01:2a:ef:19:72:77:c6:28:2d:44:ad:7b:48:0f:02:d1:64:77: 5d:77:18:15:57:8d:4d:0c:43:ef:db:bf:0a:59:3f:56:b5:d2: 10:cd:9a:61:83:7d:ef:14:a0:0f:b0:4f:9e:3a:2c:bc:78:f4: c4:1b:ac:f8:b4:64:22:e3:97:9c:41:c2:6e:0c:cd:fe:9d:ef: 0e:85:aa:4e:1d:1d:83:39:58:89:fa:20:75:b9:e8:94:ae:b4: 74:ad:eb:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl17D0HzKZ0qM7qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OTc4MzViNjItMmEzNy00MGMxLWEyNzEtOWVlZjdiODBiZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKVdhWuMtLjkgJyEgCEAHp6wvpVKri0Uqvzj AEltejRgKimnvRUPuInvss2cawlVnYOxXkpzEqg4RCgpUJGEuYYtVB57nFUeqEDM zgE0Rfd27jz3Ow2LRHNEspRdmqosOpQaZRFurhIpfIp4XyLrffTxQ+75dzghcqch lDGkm8yu7fXGUa3FHZUUqYpE9FnBCMGrgjimCmqtE7lHodboPeJNpUDGa+ee/r6Q 6pnr3dIRGiWpov7YWCrQWgdunoCNxv0IEFrOmr2mHdfh+e5WmYWlWl2JI+WQ9Tgl nqRyXBka2vTMiWcFgs0JFfhB7qEbgj2N7z6CXapTYzLEpM6ipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdgwqVqjiRCyaiP/YE5eTD8ovHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmJjZDVmZmItNzcwOS0z NDljLTlkY2ItNjk4MDFiMjUwNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIc9rJxaIw97GM5AnHraoJobmAnmp+X1fJKOnF0Z+FlHrRugV2uQkJW JQZq7WFpO4uR2pv0bP1zUsLPhhxsiQLATnsG1Gm8PwJoUla1TNx/O/Z00mc6r8w6 q+6B5r0MKL27tEJy7i0H551Eb3TwG6uF7niZ/LMpsLn/2iNNuHqC3SVGbYeJuJJq 5taGN0liZki2jLbqdi2ztM7w7wQvAjUBGgEq7xlyd8YoLUSte0gPAtFkd113GBVX jU0MQ+/bvwpZP1a10hDNmmGDfe8UoA+wT546LLx49MQbrPi0ZCLjl5xBwm4Mzf6d 7w6Fqk4dHYM5WIn6IHW56JSutHSt6/Q= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:43 2025 by rpki-client