$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf3a2dd4-dfc0-34f3-8fd4-fa63ae412108.roa File: bf3a2dd4-dfc0-34f3-8fd4-fa63ae412108.roa (raw, json) Hash identifier: +e0vBP2hLWR86LZ/GJD3iNimzl4BobhJaS9zVI/AVW4= Subject key identifier: FD:84:A5:AA:5E:99:25:F5:8B:E6:6D:5B:68:E3:6F:1E:16:85:BE:18 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797BC1C2C5A7A65035AD200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf3a2dd4-dfc0-34f3-8fd4-fa63ae412108.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.98.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:bc:1c:2c:5a:7a:65:03:5a:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=e7195035-f533-4365-b5dc-210d40253d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:20:ac:cd:14:4f:f9:e7:17:c8:5d:46:d4:d6: 48:8b:41:23:e8:21:25:54:2b:c0:b8:f5:d2:c2:f4: ac:62:0c:45:91:83:eb:ef:a4:39:61:d7:9e:1b:20: 2d:fb:29:fa:f9:60:c4:4e:ad:16:58:83:a7:ce:d0: fe:3c:41:26:d9:3a:c4:9d:1c:cf:94:a5:01:b4:6c: 84:39:fd:04:78:e3:9b:99:55:4a:b9:6c:7b:6f:3a: bf:48:fc:1a:ed:c6:a1:4c:8c:69:09:36:f7:64:0e: 18:27:ff:08:67:2b:d2:06:8b:a3:da:0d:2f:77:9e: 4f:8e:e2:d8:2f:d6:af:92:57:e2:dd:4e:cc:97:ce: d2:29:db:fb:9b:ce:b5:d8:9e:54:12:5f:6c:8b:1d: 2e:e4:f9:30:75:be:09:02:e2:f6:fb:d7:75:23:84: 9d:d8:77:4a:85:0b:52:d4:0f:0e:8c:d9:39:23:f9: 10:c7:bf:9f:1f:d9:7f:98:d1:8b:6d:63:cf:ed:9c: 5c:93:ca:c6:51:0c:4f:41:61:97:89:95:6b:5a:1c: 3f:5f:ee:8c:a1:ef:5d:54:18:23:77:44:41:4c:83: ee:c5:8a:27:25:88:9a:11:94:5f:70:27:a6:65:88: 1e:40:73:bc:c4:24:b6:26:5b:4c:d2:5b:af:36:ff: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:84:A5:AA:5E:99:25:F5:8B:E6:6D:5B:68:E3:6F:1E:16:85:BE:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf3a2dd4-dfc0-34f3-8fd4-fa63ae412108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:c3:d8:c0:b8:b9:f3:7e:b3:d9:8b:88:d8:7b:01:bb:57:0b: ac:0a:e7:d5:08:39:7a:e0:df:e4:75:43:60:c7:81:be:24:16: f6:bd:18:64:c6:7e:8d:a5:49:a8:f3:40:57:5b:22:5d:71:2a: 19:fa:92:af:14:ec:db:df:f6:63:7d:8e:ec:0a:28:b7:89:3a: c9:bd:49:26:47:a8:6c:83:dc:40:7c:6c:fe:f1:e7:a7:cb:09: 68:53:c2:bf:92:07:00:cf:2a:e3:89:60:29:82:71:0e:77:f3: 78:e5:39:2b:dd:e6:e6:42:91:3a:25:3d:a6:a4:5e:9f:df:30: 59:5a:b0:86:6a:9e:85:0a:46:e8:10:fe:1e:3f:7f:8e:00:e8: 55:d2:b2:0b:27:27:4e:22:c6:09:6c:3a:13:b7:8a:0c:a4:9b: 09:c2:51:c1:cc:63:71:09:1e:2d:07:0e:39:f8:3e:ca:75:02: f6:d9:03:fe:2b:d6:d9:74:09:7a:ca:a4:cc:dd:ee:b9:84:6d: 59:f3:7f:11:e8:dd:5b:ee:b8:84:1b:0a:ea:1b:9a:48:bd:69: 55:fb:03:81:65:23:e5:06:b2:58:a7:4c:65:1d:88:82:79:29: 15:7d:00:49:53:c9:12:a8:22:4f:73:d4:8e:4d:55:4e:9c:58: 24:a9:d9:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7wcLFp6ZQNa0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTcxOTUwMzUtZjUzMy00MzY1LWI1ZGMtMjEwZDQwMjUzZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCCszRRP+ecXyF1G1NZIi0Ej6CElVCvAuPXS wvSsYgxFkYPr76Q5YdeeGyAt+yn6+WDETq0WWIOnztD+PEEm2TrEnRzPlKUBtGyE Of0EeOObmVVKuWx7bzq/SPwa7cahTIxpCTb3ZA4YJ/8IZyvSBouj2g0vd55PjuLY L9avklfi3U7Ml87SKdv7m8612J5UEl9six0u5Pkwdb4JAuL2+9d1I4Sd2HdKhQtS 1A8OjNk5I/kQx7+fH9l/mNGLbWPP7Zxck8rGUQxPQWGXiZVrWhw/X+6Moe9dVBgj d0RBTIPuxYonJYiaEZRfcCemZYgeQHO8xCS2JltM0luvNv8+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2EpapemSX1i+ZtW2jjbx4Whb4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYzYTJkZDQtZGZjMC0z NGYzLThmZDQtZmE2M2FlNDEyMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXD2MC4ufN+s9mLiNh7AbtXC6wK59UIOXrg3+R1Q2DHgb4kFva9GGTG fo2lSajzQFdbIl1xKhn6kq8U7Nvf9mN9juwKKLeJOsm9SSZHqGyD3EB8bP7x56fL CWhTwr+SBwDPKuOJYCmCcQ5383jlOSvd5uZCkTolPaakXp/fMFlasIZqnoUKRugQ /h4/f44A6FXSsgsnJ04ixglsOhO3igykmwnCUcHMY3EJHi0HDjn4Psp1AvbZA/4r 1tl0CXrKpMzd7rmEbVnzfxHo3VvuuIQbCuobmki9aVX7A4FlI+UGslinTGUdiIJ5 KRV9AElTyRKoIk9z1I5NVU6cWCSp2d8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:00 2025 by rpki-client