$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa File: c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa (raw, json) Hash identifier: uT+EHkeZ9wK5P8y0hJ77sNn7ttgPgL92R4S+li2Jznc= Subject key identifier: 03:58:3C:3F:8C:CF:8B:C6:73:FE:50:BE:C9:D7:22:AA:A6:D2:2B:D3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679746B7C08BFABD16B96280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 34.154.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:46:b7:c0:8b:fa:bd:16:b9:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d9eefeb0-1607-42da-a82f-804c4eb2540e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:11:f9:1b:9c:f0:da:08:49:19:69:af:d7: 2a:b0:6b:dc:ed:54:93:4b:f6:c0:05:04:0b:51:eb: 3b:8d:ce:61:39:ee:db:9f:c7:36:84:28:3d:8f:5d: 5b:a8:dd:70:33:46:d9:ca:99:4d:24:33:35:56:69: 5e:77:d2:30:f4:e6:7f:e1:68:63:27:48:59:97:6b: 63:49:2c:fd:9d:0f:7e:03:9e:10:5d:a8:4b:85:08: 26:46:69:57:19:30:d7:fc:b4:e0:6f:43:6f:f2:9f: 6b:86:dd:35:c5:a1:bd:46:8d:9a:2f:61:f3:98:5c: 7c:0b:84:04:5d:06:5d:eb:63:69:04:54:f5:7c:e4: be:b7:82:51:6b:3c:03:8b:31:64:bc:cd:ca:a6:06: 18:1c:5e:05:c0:27:f8:4c:35:92:53:1a:06:66:50: 35:41:08:6d:ff:7b:21:b3:a5:99:5b:26:a6:2f:e8: ea:a2:b0:78:36:6c:e3:90:7a:6e:68:da:50:26:23: f7:e8:99:cf:f1:d9:12:4f:9f:da:2b:e2:38:5e:6a: 24:4d:1f:49:43:c5:0d:ad:6c:eb:81:09:9f:bf:e7: 38:de:ea:f2:30:fd:07:fd:c9:37:a1:9e:be:9d:b3: 8a:0b:96:7e:69:26:67:87:e1:6c:e4:11:ca:48:8a: ae:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:58:3C:3F:8C:CF:8B:C6:73:FE:50:BE:C9:D7:22:AA:A6:D2:2B:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.154.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fa:03:1f:10:13:10:6d:ff:50:60:38:60:94:31:26:87:34: f1:c4:4f:ef:88:66:52:a4:5a:b9:90:13:68:0c:ca:56:ce:99: d9:51:91:ae:9c:c9:85:cd:b7:66:68:ce:8f:a6:f5:95:89:1f: 76:98:fd:5a:2b:26:ac:f6:74:c1:41:6d:2d:85:e8:7c:8b:91: 0b:1e:60:a5:09:a7:a9:af:c4:72:af:f0:34:c3:87:8d:9b:8f: 14:85:7f:c6:70:b9:e5:61:05:d3:f8:3a:c8:e2:89:e6:33:dc: 37:8f:dd:11:53:01:5b:ce:aa:91:4d:9e:28:bd:d0:92:cf:30: c8:cb:15:af:dd:ae:fc:3b:8c:8f:35:56:00:e7:7b:02:e0:bb: d8:ad:fe:78:0e:27:5c:73:77:5f:f0:41:e6:98:41:29:33:6f: 95:a6:19:00:00:6f:a8:56:48:6e:85:1c:68:66:fd:28:ff:f8: 18:71:0f:53:6a:98:42:a8:59:d7:b0:f5:7a:a0:62:66:d7:da: ef:d9:58:19:d5:f7:51:a6:0f:96:8d:06:8c:22:2a:97:ac:4c: 69:9c:7e:c2:fd:07:2c:f0:3b:a5:8c:ab:0c:d9:0b:ee:55:c5: ac:04:da:dc:82:77:73:d1:92:bf:1c:2b:3e:70:68:45:01:b9: 4e:b9:f6:d0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtnl0a3wIv6vRa5YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDllZWZlYjAtMTYwNy00MmRhLWE4MmYtODA0YzRlYjI1NDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWcR+Ruc8NoISRlpr9cqsGvc7VSTS/bABQQL Ues7jc5hOe7bn8c2hCg9j11bqN1wM0bZyplNJDM1Vmled9Iw9OZ/4WhjJ0hZl2tj SSz9nQ9+A54QXahLhQgmRmlXGTDX/LTgb0Nv8p9rht01xaG9Ro2aL2HzmFx8C4QE XQZd62NpBFT1fOS+t4JRazwDizFkvM3KpgYYHF4FwCf4TDWSUxoGZlA1QQht/3sh s6WZWyamL+jqorB4NmzjkHpuaNpQJiP36JnP8dkST5/aK+I4XmokTR9JQ8UNrWzr gQmfv+c43uryMP0H/ck3oZ6+nbOKC5Z+aSZnh+Fs5BHKSIquswIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFANYPD+Mz4vGc/5QvsnXIqqm0ivTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzBmNWE5ZmQtZTIzMi0z MThkLWI0ZjItMDgyZmZjMjc5NDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIpowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADvoDHxATEG3/UGA4YJQxJoc08cRP74hmUqRauZATaAzKVs6Z2VGRrpzJ hc23ZmjOj6b1lYkfdpj9WismrPZ0wUFtLYXofIuRCx5gpQmnqa/Ecq/wNMOHjZuP FIV/xnC55WEF0/g6yOKJ5jPcN4/dEVMBW86qkU2eKL3Qks8wyMsVr92u/DuMjzVW AOd7AuC72K3+eA4nXHN3X/BB5phBKTNvlaYZAABvqFZIboUcaGb9KP/4GHEPU2qY QqhZ17D1eqBiZtfa79lYGdX3UaYPlo0GjCIql6xMaZx+wv0HLPA7pYyrDNkL7lXF rATa3IJ3c9GSvxwrPnBoRQG5Trn20A== -----END CERTIFICATE-----Generated at Sun Oct 19 23:51:43 2025 by rpki-client