$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa File: bfbbd772-9e31-38b1-a655-e7c84ef58361.roa (raw, json) Hash identifier: OkAqErEbY6ARQ+kNtrgvmMiMfY53anjWQ6fRYdfvVvI= Subject key identifier: A3:8C:DC:AC:82:73:6F:31:C5:DA:13:9E:62:F2:17:68:B7:87:DC:B5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67975027E2EC549C2E9C7C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.135.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:50:27:e2:ec:54:9c:2e:9c:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=df42f84c-466d-486e-b0c0-678942ded549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:93:89:6d:6e:16:62:3d:35:a2:79:cf:5b: a5:96:c8:f4:5f:11:b7:2a:8b:32:91:35:f0:1f:8d: 17:60:0a:ac:3b:1a:d9:29:b1:b0:af:c3:8d:a3:89: ad:ef:47:24:ec:1c:78:6a:17:87:cd:28:fb:ed:c4: d3:0b:e5:4d:1c:62:29:f3:21:36:9d:9f:6d:68:1c: e8:21:14:3f:c1:04:b1:a5:2d:35:31:74:76:37:de: b1:a9:ae:0a:f5:32:27:7d:ec:d4:f8:7f:99:55:b2: 45:82:af:b5:8f:44:8a:59:d0:dc:15:d7:aa:a3:8f: 7d:80:7f:db:96:b3:1d:43:84:ba:77:7d:58:5a:b1: e9:5d:7f:e7:e4:49:5e:70:50:f0:4e:41:13:a0:59: d3:c0:9c:21:78:03:79:60:ac:d6:48:5a:fc:e6:e3: e7:6c:e4:b8:d7:9c:a6:cb:14:ce:62:ae:f4:31:70: 45:f1:7d:b4:1b:d7:2e:2c:12:e3:f6:83:e1:9d:8f: 6c:da:e2:42:b5:77:8d:9e:b2:f2:3b:a9:97:25:0c: 34:f2:4c:12:28:a1:3c:22:e8:f5:b9:db:ed:a0:8a: ae:26:b4:3d:01:33:04:13:04:df:a5:d7:6c:ef:9d: ee:78:7e:b8:dd:68:d5:ec:51:f4:7c:ca:42:50:6d: cd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8C:DC:AC:82:73:6F:31:C5:DA:13:9E:62:F2:17:68:B7:87:DC:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:71:40:c2:6e:52:0a:ea:6c:ed:d2:7f:fc:81:14:ee:88:23: 8b:b8:e6:ac:0c:0f:72:d4:ba:fb:1b:b0:a9:7b:27:ea:ee:1d: 50:1b:4d:e3:8b:75:46:a9:c1:5e:29:98:c9:5f:32:f6:d1:21: b2:81:f5:57:35:7c:c8:47:47:4f:2a:a6:e4:48:73:4f:ee:1e: 50:e2:1e:31:58:ef:16:7b:a3:9c:f4:63:86:cf:19:a6:d4:ce: 15:6b:1e:85:ee:4a:a7:ec:fd:f8:90:24:bb:db:f5:6d:1c:d8: 67:b1:5b:9c:d3:99:42:8d:be:a8:f4:c7:fb:b5:da:1f:69:80: 42:27:57:58:bb:b1:76:c9:53:64:f9:be:5d:1e:da:66:bd:1d: cd:2c:d6:e7:4f:23:41:49:74:82:ff:5c:c1:08:18:f1:22:97: 42:ee:02:af:13:b7:a7:40:b1:fa:de:c3:40:9c:f4:21:d4:3a: 7a:d3:2c:bf:01:bb:09:0b:c5:8b:eb:f7:7a:f7:f5:c3:07:17: 82:1d:56:da:f5:49:0f:71:ee:2b:0e:0c:eb:bc:03:3b:20:a3: 6f:6a:f1:ba:6b:52:63:8a:82:67:4c:6c:9f:8a:70:fa:9e:4a: 27:fb:92:76:4f:c8:f7:8a:6e:c0:93:2b:cd:4a:e7:47:89:a0: d8:5b:90:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1An4uxUnC6cfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGY0MmY4NGMtNDY2ZC00ODZlLWIwYzAtNjc4OTQyZGVkNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8uTiW1uFmI9NaJ5z1ullsj0XxG3KosykTXw H40XYAqsOxrZKbGwr8ONo4mt70ck7Bx4aheHzSj77cTTC+VNHGIp8yE2nZ9taBzo IRQ/wQSxpS01MXR2N96xqa4K9TInfezU+H+ZVbJFgq+1j0SKWdDcFdeqo499gH/b lrMdQ4S6d31YWrHpXX/n5ElecFDwTkEToFnTwJwheAN5YKzWSFr85uPnbOS415ym yxTOYq70MXBF8X20G9cuLBLj9oPhnY9s2uJCtXeNnrLyO6mXJQw08kwSKKE8Iuj1 udvtoIquJrQ9ATMEEwTfpdds753ueH643WjV7FH0fMpCUG3NzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOM3KyCc28xxdoTnmLyF2i3h9y1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZiYmQ3NzItOWUzMS0z OGIxLWE2NTUtZTdjODRlZjU4MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIofwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBxQMJuUgrqbO3Sf/yBFO6II4u45qwMD3LUuvsbsKl7J+ruHVAbTeOL dUapwV4pmMlfMvbRIbKB9Vc1fMhHR08qpuRIc0/uHlDiHjFY7xZ7o5z0Y4bPGabU zhVrHoXuSqfs/fiQJLvb9W0c2GexW5zTmUKNvqj0x/u12h9pgEInV1i7sXbJU2T5 vl0e2ma9Hc0s1udPI0FJdIL/XMEIGPEil0LuAq8Tt6dAsfrew0Cc9CHUOnrTLL8B uwkLxYvr93r39cMHF4IdVtr1SQ9x7isODOu8Azsgo29q8bprUmOKgmdMbJ+KcPqe Sif7knZPyPeKbsCTK81K50eJoNhbkFg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:35 2025 by rpki-client