$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa File: bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa (raw, json) Hash identifier: tzmlJyOGU8YcHLVgDhan3VKP+uCmgTvkaFdiYL8ZASw= Subject key identifier: 30:E3:2B:94:3D:14:E5:22:80:3D:CA:F2:EC:85:9F:69:BC:ED:D4:2A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679765F9AB4721DCD0BF76A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.145.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:65:f9:ab:47:21:dc:d0:bf:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=16a2c9ab-73c4-479f-a8d4-aa73cce6e607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:86:a8:f1:de:9c:9f:2d:2f:fc:60:54:59: 18:16:7c:f2:16:12:af:26:96:74:e5:45:1e:d0:a4: 92:64:ae:43:94:04:8e:60:18:dd:7b:06:4b:b1:2e: f0:02:64:47:82:c7:60:51:9e:df:d5:b5:90:11:8b: ea:56:37:5f:75:20:ea:de:b8:1e:34:b4:98:23:40: 5c:cf:74:26:14:08:da:67:82:d4:06:67:99:cf:22: ad:79:1a:46:69:74:c9:1e:47:7e:07:c5:0a:e1:a7: 47:b4:e0:23:1f:0b:d9:e5:dd:4d:32:92:f1:4d:c4: b4:5d:d7:f9:4c:e2:1d:8c:34:04:cc:2e:85:05:cc: 81:5d:5c:a0:10:1b:ff:17:07:af:67:cb:b9:09:45: 83:29:f4:ec:0b:91:09:60:db:0c:7b:a7:4a:8c:59: 00:75:7a:d3:c9:73:47:e6:be:60:d2:b3:e4:52:a2: 87:33:07:13:ea:05:26:66:85:c5:0c:f7:a0:4c:1d: cd:c9:b8:74:f0:9d:60:a2:ba:a1:e0:c2:a5:bf:a9: a3:ac:20:ea:b2:74:67:81:74:37:78:ee:5e:e2:9f: 12:aa:75:8f:57:46:76:57:6d:f3:60:af:26:ad:5d: 79:a9:24:f3:9d:11:d9:6b:a0:94:5a:cb:81:12:fb: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E3:2B:94:3D:14:E5:22:80:3D:CA:F2:EC:85:9F:69:BC:ED:D4:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:89:30:39:84:c7:28:fa:49:e2:d2:21:63:9a:d6:c9:b6:2e: 61:90:9d:30:80:70:28:7a:37:ea:41:46:8f:24:df:e5:2d:06: c0:eb:e7:c8:48:6d:0a:58:7f:e5:4b:46:8c:f9:cf:47:20:a0: 14:38:77:75:ce:87:38:36:6c:cb:f7:e6:18:6a:f1:0d:5d:ea: d7:72:c3:26:91:fa:ec:99:90:99:ff:8a:72:48:79:9a:7f:ee: 6e:ad:b1:32:3f:9d:c2:72:9a:f1:4b:e5:95:68:86:22:a1:c0: 2f:23:9d:9c:1c:93:d6:7f:fa:72:e6:f9:79:13:7e:b8:af:69: e4:79:f3:9c:00:03:2b:19:29:26:4a:ac:ce:a1:b7:8a:3c:aa: dc:52:22:12:c3:59:5b:6e:54:a7:fd:51:57:87:9c:6c:82:ef: 2a:9f:ae:a5:80:1a:e7:be:b9:dc:b1:97:15:03:12:69:04:6c: 62:3f:90:8e:a5:76:c1:a4:cc:e7:93:77:8f:ba:79:c0:93:15: c8:5c:4c:ce:aa:6b:aa:fb:15:2f:be:b4:64:d0:38:b4:bc:68: 41:37:48:fe:d4:8a:ea:54:78:56:8d:cf:3a:94:be:77:82:f6: 11:48:87:ec:85:87:f5:74:2d:98:53:61:ac:f8:fe:89:9d:46: bd:4a:b2:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2X5q0ch3NC/dqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTZhMmM5YWItNzNjNC00NzlmLWE4ZDQtYWE3M2NjZTZlNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9WGqPHenJ8tL/xgVFkYFnzyFhKvJpZ05UUe 0KSSZK5DlASOYBjdewZLsS7wAmRHgsdgUZ7f1bWQEYvqVjdfdSDq3rgeNLSYI0Bc z3QmFAjaZ4LUBmeZzyKteRpGaXTJHkd+B8UK4adHtOAjHwvZ5d1NMpLxTcS0Xdf5 TOIdjDQEzC6FBcyBXVygEBv/FwevZ8u5CUWDKfTsC5EJYNsMe6dKjFkAdXrTyXNH 5r5g0rPkUqKHMwcT6gUmZoXFDPegTB3Nybh08J1gorqh4MKlv6mjrCDqsnRngXQ3 eO5e4p8SqnWPV0Z2V23zYK8mrV15qSTznRHZa6CUWsuBEvuefwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDjK5Q9FOUigD3K8uyFn2m87dQqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY2NTI5YzEtZjIwMS0z YmY1LThjM2EtYTkwNjVjODkzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqJMDmExyj6SeLSIWOa1sm2LmGQnTCAcCh6N+pBRo8k3+UtBsDr58hI bQpYf+VLRoz5z0cgoBQ4d3XOhzg2bMv35hhq8Q1d6tdywyaR+uyZkJn/inJIeZp/ 7m6tsTI/ncJymvFL5ZVohiKhwC8jnZwck9Z/+nLm+XkTfrivaeR585wAAysZKSZK rM6ht4o8qtxSIhLDWVtuVKf9UVeHnGyC7yqfrqWAGue+udyxlxUDEmkEbGI/kI6l dsGkzOeTd4+6ecCTFchcTM6qa6r7FS++tGTQOLS8aEE3SP7UiupUeFaNzzqUvneC 9hFIh+yFh/V0LZhTYaz4/omdRr1KsrY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:33:39 2025 by rpki-client