$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5aa77b2-9462-3e06-b308-60218f049024.roa File: c5aa77b2-9462-3e06-b308-60218f049024.roa (raw, json) Hash identifier: NgXhebaAO07Y706+fhqA5HZ47cYM9Ueh7h7Rzyp27F8= Subject key identifier: EC:03:12:F9:D3:62:9B:16:38:B6:FA:DC:64:27:BC:1F:FE:24:D2:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE1CEA9A0124416EFDA6E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5aa77b2-9462-3e06-b308-60218f049024.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.118.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:1c:ea:9a:01:24:41:6e:fd:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ae850f3f-6e5c-4538-8b51-e770a99f8c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:1a:e4:e2:02:8f:89:ef:77:19:91:25:a7: 7f:56:ae:48:8f:87:49:50:1a:ef:f6:c3:c5:c1:4c: dc:83:3c:a7:97:22:e1:ba:64:cb:48:96:a9:5b:c9: d9:cd:51:57:dc:be:ab:77:93:47:a1:5d:f0:81:95: a8:66:0d:5b:69:37:99:b6:b7:d2:86:7d:2a:cf:2c: a1:17:56:19:2f:33:63:1d:73:1a:81:55:b8:97:44: 62:85:7a:16:69:ab:93:66:78:a8:9f:ca:e4:0b:9b: 9c:2d:17:f7:82:56:69:d7:d3:f6:f9:72:9a:a7:f6: f2:4f:6b:3c:c3:d1:00:f3:56:30:16:d6:95:f5:78: 14:d9:d7:77:cf:a3:24:ac:34:ff:3a:22:69:49:05: f9:56:c6:63:ab:f8:f1:6e:51:9a:b4:71:00:0b:dd: b7:4a:e2:74:57:27:8b:37:23:05:1e:64:95:ce:e2: a2:ff:6e:73:d0:24:78:54:10:64:44:cc:ab:59:9e: 1f:c0:ac:23:09:f7:50:b7:21:8d:99:3b:71:f3:f3: 9e:28:d3:ce:cd:61:82:e8:07:d7:e6:8b:0b:a1:16: 52:9d:c5:fa:31:d2:7c:28:15:71:54:f2:87:64:7b: 7b:85:56:87:8f:23:a8:bf:d6:c8:1b:bf:b0:e2:eb: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:03:12:F9:D3:62:9B:16:38:B6:FA:DC:64:27:BC:1F:FE:24:D2:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5aa77b2-9462-3e06-b308-60218f049024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ec:41:07:3e:13:5c:6c:75:41:a2:40:36:61:d7:1d:ad:aa: c8:79:b3:61:6b:6d:e0:48:c6:86:75:b2:3a:94:51:a0:a7:8e: 4c:8b:9b:90:0b:df:22:c5:22:0c:2a:15:e9:1c:4f:9a:cd:ec: d6:3f:db:3a:0a:7b:83:04:39:74:a7:75:42:8c:6c:1f:04:62: f8:95:1c:c8:f1:cd:8e:46:f8:9b:54:0f:ae:dd:83:9f:9e:24: 6f:c3:44:a0:95:42:9f:6f:dd:fc:67:34:ad:cd:9b:4e:f9:ed: 49:6d:93:f4:81:e4:ae:1e:77:7a:e8:87:19:53:7c:62:c1:c5: f2:40:85:8d:60:86:37:0e:13:94:d4:0d:aa:24:27:b6:61:d3: 35:43:f7:7f:73:2e:29:f9:5c:b5:cd:7b:9c:42:07:ad:31:a4: 1e:cb:15:4b:25:25:4b:f4:ed:5d:56:8a:ed:b2:5c:26:a4:59: da:7b:d3:d3:a0:7f:63:b6:47:03:a9:4f:a6:74:7c:29:0d:bc: e9:43:24:c2:35:14:41:cf:ef:ea:96:6b:f3:06:eb:b5:9a:c4: 30:d3:9f:44:ee:ea:14:28:d5:7d:fb:4d:4b:41:aa:54:58:3f: 92:55:1c:79:3c:05:ae:cd:84:0e:52:48:52:c5:87:a5:00:1a: 7e:ee:3f:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhzqmgEkQW79puAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWU4NTBmM2YtNmU1Yy00NTM4LThiNTEtZTc3MGE5OWY4YzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw8a5OICj4nvdxmRJad/Vq5Ij4dJUBrv9sPF wUzcgzynlyLhumTLSJapW8nZzVFX3L6rd5NHoV3wgZWoZg1baTeZtrfShn0qzyyh F1YZLzNjHXMagVW4l0RihXoWaauTZnion8rkC5ucLRf3glZp19P2+XKap/byT2s8 w9EA81YwFtaV9XgU2dd3z6MkrDT/OiJpSQX5VsZjq/jxblGatHEAC923SuJ0VyeL NyMFHmSVzuKi/25z0CR4VBBkRMyrWZ4fwKwjCfdQtyGNmTtx8/OeKNPOzWGC6AfX 5osLoRZSncX6MdJ8KBVxVPKHZHt7hVaHjyOov9bIG7+w4utfawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwDEvnTYpsWOLb63GQnvB/+JNJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzVhYTc3YjItOTQ2Mi0z ZTA2LWIzMDgtNjAyMThmMDQ5MDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfsQQc+E1xsdUGiQDZh1x2tqsh5s2FrbeBIxoZ1sjqUUaCnjkyLm5AL 3yLFIgwqFekcT5rN7NY/2zoKe4MEOXSndUKMbB8EYviVHMjxzY5G+JtUD67dg5+e JG/DRKCVQp9v3fxnNK3Nm0757Ultk/SB5K4ed3rohxlTfGLBxfJAhY1ghjcOE5TU DaokJ7Zh0zVD939zLin5XLXNe5xCB60xpB7LFUslJUv07V1Wiu2yXCakWdp709Og f2O2RwOpT6Z0fCkNvOlDJMI1FEHP7+qWa/MG67WaxDDTn0Tu6hQo1X37TUtBqlRY P5JVHHk8Ba7NhA5SSFLFh6UAGn7uP+c= -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:33 2025 by rpki-client