$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa File: bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa (raw, json) Hash identifier: dm82QHHzUNi3ftyQJMv/QLy6KMmnyVqLtx3lqoiYt34= Subject key identifier: 1F:25:92:D3:88:9A:A6:E7:9D:C9:A0:48:4D:CC:4C:93:71:F6:5E:F9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67978F0F83FC0FC0E027A020 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:8f:0f:83:fc:0f:c0:e0:27:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=b5b5bc2d-41ad-4283-a278-ae799965a994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:85:3d:0e:32:0c:ad:c6:85:03:e5:62:a1: 5c:1c:1d:c4:60:c4:e5:d8:07:a9:a6:8a:8a:ee:1c: a3:c3:99:3b:fb:56:c7:b3:ad:a9:9c:e2:e0:dd:8a: c2:6b:ba:15:23:ac:8c:93:48:8c:71:78:43:5c:00: 92:c2:8a:ea:2f:75:f9:db:46:66:9a:36:9e:41:6a: 97:cb:b6:fc:f1:07:bd:70:9d:f2:d2:0e:c4:2b:4e: 0c:d0:47:c1:79:9c:08:21:4d:67:5c:d4:f4:d0:49: b5:9a:da:f9:61:b8:12:2e:e3:a0:eb:23:33:8c:2e: f8:cd:08:35:9b:7a:51:4a:67:cb:fb:49:39:03:f8: 2e:17:6d:fb:95:c3:4b:c2:6b:92:ce:fb:3f:6b:83: cd:7d:de:c3:0a:93:75:67:2f:58:aa:65:18:15:5f: 49:f6:fb:b0:b1:b6:de:a6:a4:71:0e:60:e0:ab:de: bc:40:d2:95:5d:ca:a0:ab:91:c7:83:d9:d6:55:f2: 42:8d:bf:73:52:79:a7:e2:c1:9b:83:c4:28:de:d1: 3b:88:8c:5c:81:48:d6:7e:d2:29:80:b4:e6:26:0c: 7d:2f:ab:04:19:23:60:11:38:52:7e:43:de:e4:a2: 7e:50:dd:79:b4:a5:e2:b3:03:48:a8:bd:e2:55:4f: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:25:92:D3:88:9A:A6:E7:9D:C9:A0:48:4D:CC:4C:93:71:F6:5E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6b:10:f3:6f:94:ed:43:cb:ba:0f:94:a9:7e:a2:b0:cc:27: 01:ec:04:13:b2:8c:88:0f:d5:fd:10:5a:6e:8c:b3:eb:10:1f: 78:05:8c:f0:dc:1e:2a:a9:44:ad:52:65:67:b2:45:86:a9:c9: 45:1b:f3:5e:ee:8f:9f:c3:1a:13:1d:3a:99:8f:8b:50:f6:ab: b9:f6:6e:76:31:e3:fd:ba:32:97:aa:a4:bd:ae:e9:e7:37:d1: 58:ba:de:33:3f:e5:7a:c2:69:be:0a:cb:3c:04:21:5f:31:5e: 4c:64:be:81:3b:ff:11:67:db:1f:cd:0c:5f:4e:8e:b4:73:8a: 9b:7c:65:88:0c:24:06:ee:cd:a4:a9:32:5f:8b:cb:58:13:b1: ce:a6:95:5c:99:2d:10:e7:86:97:e8:13:15:6e:37:c1:b4:4e: 3e:f8:7e:46:92:de:b3:11:9b:f7:ec:d7:34:1b:3b:03:4b:c4: db:17:f6:5b:c3:61:7d:9a:e7:be:7e:3f:d8:59:e0:69:5b:80: c1:9c:4e:dc:d5:6c:c2:73:34:6d:d4:9f:c0:cd:a1:54:71:11: 1e:58:4c:cd:18:78:da:2d:29:15:4f:41:49:f6:01:82:77:31: 00:2b:6d:44:6d:bd:d9:6d:e2:92:e2:b2:37:5f:65:03:64:b7: 54:30:93:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl48Pg/wPwOAnoCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YjViNWJjMmQtNDFhZC00MjgzLWEyNzgtYWU3OTk5NjVhOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM+FPQ4yDK3GhQPlYqFcHB3EYMTl2AeppoqK 7hyjw5k7+1bHs62pnOLg3YrCa7oVI6yMk0iMcXhDXACSworqL3X520ZmmjaeQWqX y7b88Qe9cJ3y0g7EK04M0EfBeZwIIU1nXNT00Em1mtr5YbgSLuOg6yMzjC74zQg1 m3pRSmfL+0k5A/guF237lcNLwmuSzvs/a4PNfd7DCpN1Zy9YqmUYFV9J9vuwsbbe pqRxDmDgq968QNKVXcqgq5HHg9nWVfJCjb9zUnmn4sGbg8Qo3tE7iIxcgUjWftIp gLTmJgx9L6sEGSNgEThSfkPe5KJ+UN15tKXiswNIqL3iVU8aewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8lktOImqbnncmgSE3MTJNx9l75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZmYWY4ZmMtYjcyNy0z OGViLWFhMDgtNWU0YjA2NDBjYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJrEPNvlO1Dy7oPlKl+orDMJwHsBBOyjIgP1f0QWm6Ms+sQH3gFjPDc HiqpRK1SZWeyRYapyUUb817uj5/DGhMdOpmPi1D2q7n2bnYx4/26MpeqpL2u6ec3 0Vi63jM/5XrCab4KyzwEIV8xXkxkvoE7/xFn2x/NDF9OjrRzipt8ZYgMJAbuzaSp Ml+Ly1gTsc6mlVyZLRDnhpfoExVuN8G0Tj74fkaS3rMRm/fs1zQbOwNLxNsX9lvD YX2a575+P9hZ4GlbgMGcTtzVbMJzNG3Un8DNoVRxER5YTM0YeNotKRVPQUn2AYJ3 MQArbURtvdlt4pLisjdfZQNkt1Qwk2I= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:03 2025 by rpki-client