$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8d2c497-bf86-3fea-97bf-f025d37486eb.roa File: c8d2c497-bf86-3fea-97bf-f025d37486eb.roa (raw, json) Hash identifier: OgWedEwIObFPpn6ufaiHmJAnQ/dFYppnDDVmZkHOYyI= Subject key identifier: DC:DD:07:7F:6E:DC:89:7F:32:9F:40:18:64:78:3E:41:1C:32:A3:20 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B864CAF1ABA883E28D92DE580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8d2c497-bf86-3fea-97bf-f025d37486eb.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 34.191.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:af:1a:ba:88:3e:28:d9:2d:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=22c64e38-c1cc-4243-8a75-5039d6f41d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e2:a0:b9:45:14:3b:ae:11:9b:a9:af:b9:81: 06:40:ec:d7:ec:9a:6b:5a:fc:b7:01:c3:a6:19:32: 5d:a5:47:1d:73:f9:82:18:f7:66:70:cb:42:00:2d: 25:ef:3b:27:3d:0b:62:0f:1f:ea:5d:30:45:21:33: 16:4f:62:32:be:26:c4:bd:45:06:4b:fb:aa:be:48: 78:cb:9e:4a:9d:34:1d:e3:df:0e:1e:b3:32:7e:90: 44:62:cd:31:af:dc:d1:61:4b:66:58:42:9b:43:fd: 2b:40:ea:bf:1b:7c:c0:5e:e3:be:02:34:99:e8:72: 7f:35:bc:bc:9c:0f:61:e2:b0:49:c4:42:cc:65:cd: 60:22:c8:d2:7e:2a:60:12:3e:ef:2c:93:5c:f3:5c: c5:25:a1:87:49:b9:fe:86:60:08:ba:ac:fc:97:da: d5:3a:dd:ea:15:a3:13:a7:9a:cd:f6:4a:d2:36:05: 50:74:4c:37:79:67:f5:e1:83:8c:60:7a:13:5e:63: 8a:07:cb:c2:8c:74:03:b3:fc:61:2c:6c:c7:51:73: 2b:ef:d1:42:a7:7d:a4:20:70:91:84:7d:87:ce:26: 5a:18:9c:1e:6c:20:13:ad:1d:6a:3a:ea:cb:8c:94: c7:38:8d:d4:5c:50:02:89:f7:43:86:09:3e:cb:ba: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DD:07:7F:6E:DC:89:7F:32:9F:40:18:64:78:3E:41:1C:32:A3:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8d2c497-bf86-3fea-97bf-f025d37486eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3a:2a:37:bf:01:57:00:1f:d7:ae:b6:7f:c9:3d:60:e6:1c: 69:1f:08:19:63:dc:05:af:fc:d1:54:14:b1:3b:61:d1:4c:07: 86:48:83:62:3c:0e:32:81:79:e5:28:0e:04:ee:2f:1f:cd:d7: 66:b6:6b:58:84:27:74:cf:c0:07:ab:57:b8:aa:4b:d3:31:a6: dd:99:d0:05:a8:88:73:77:30:f9:84:bb:ef:34:b3:bd:b0:22: ee:73:86:f0:0f:fd:f7:12:c8:b1:a5:8d:aa:d5:45:37:67:dd: 8c:26:7f:74:48:29:eb:f0:a0:90:cb:9e:1c:3a:3f:78:43:49: d3:e9:fc:16:be:37:6f:d2:c7:db:fb:8b:36:d8:31:b1:97:0c: fa:34:50:46:ac:cf:69:8a:88:69:06:f1:84:00:cc:20:31:7d: 53:05:6d:57:e4:06:4e:78:76:0d:df:08:db:78:d8:d3:91:0e: 1c:00:42:a6:e4:64:22:aa:95:74:df:df:b7:0d:e0:c9:bc:98: fc:d1:c1:dc:45:24:b9:b5:64:9b:d6:60:e1:0a:b6:79:24:8a: 9c:35:26:15:9c:8a:4b:7c:ab:6c:a5:43:07:d7:39:8f:86:cd: f8:27:7c:5e:57:e4:05:32:0a:97:19:27:61:17:08:1a:d1:08: 77:cc:13:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTK8auog+KNkt5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk MjJjNjRlMzgtYzFjYy00MjQzLThhNzUtNTAzOWQ2ZjQxZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeKguUUUO64Rm6mvuYEGQOzX7JprWvy3AcOm GTJdpUcdc/mCGPdmcMtCAC0l7zsnPQtiDx/qXTBFITMWT2IyvibEvUUGS/uqvkh4 y55KnTQd498OHrMyfpBEYs0xr9zRYUtmWEKbQ/0rQOq/G3zAXuO+AjSZ6HJ/Nby8 nA9h4rBJxELMZc1gIsjSfipgEj7vLJNc81zFJaGHSbn+hmAIuqz8l9rVOt3qFaMT p5rN9krSNgVQdEw3eWf14YOMYHoTXmOKB8vCjHQDs/xhLGzHUXMr79FCp32kIHCR hH2HziZaGJwebCATrR1qOurLjJTHOI3UXFACifdDhgk+y7oYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzdB39u3Il/Mp9AGGR4PkEcMqMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzhkMmM0OTctYmY4Ni0z ZmVhLTk3YmYtZjAyNWQzNzQ4NmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr84MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD06Kje/AVcAH9eutn/JPWDmHGkfCBlj3AWv/NFUFLE7YdFMB4ZIg2I8 DjKBeeUoDgTuLx/N12a2a1iEJ3TPwAerV7iqS9Mxpt2Z0AWoiHN3MPmEu+80s72w Iu5zhvAP/fcSyLGljarVRTdn3Ywmf3RIKevwoJDLnhw6P3hDSdPp/Ba+N2/Sx9v7 izbYMbGXDPo0UEasz2mKiGkG8YQAzCAxfVMFbVfkBk54dg3fCNt42NORDhwAQqbk ZCKqlXTf37cN4Mm8mPzRwdxFJLm1ZJvWYOEKtnkkipw1JhWcikt8q2ylQwfXOY+G zfgnfF5X5AUyCpcZJ2EXCBrRCHfME3Q= -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:58 2025 by rpki-client