$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa File: ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa (raw, json) Hash identifier: wETbkmh2DGLQRl3eonTo7ClcIPvlgizoFD9Cc6tPgBo= Subject key identifier: 67:6E:C4:F3:E4:3D:7A:70:CA:3F:0A:3A:CD:63:1E:67:6C:44:5B:4E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797CE4CD380529476AB0680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.68.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ce:4c:d3:80:52:94:76:ab:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=c1ebccfe-9f9e-4639-911b-1cbe8bff8145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:4f:71:36:1d:2d:8d:b2:8a:f0:df:18:2c: e6:fc:b4:a9:02:c8:1f:60:e1:2d:0b:79:2c:a9:5b: 28:67:e1:3a:13:2f:36:19:1f:af:39:95:de:86:91: 50:ab:55:e4:08:07:c2:49:2c:8d:55:9d:a7:40:fb: 29:ad:fa:bc:a8:98:c5:89:cb:23:12:2b:7b:59:a1: da:2e:4d:b0:51:fc:32:1e:6a:d2:9a:ed:de:8c:1a: 63:23:9a:4e:fb:78:fe:8a:bb:ce:83:83:51:b2:1e: 2a:71:46:99:79:fc:f9:cc:8c:65:d9:d0:23:53:7f: ac:ec:26:8f:4a:61:3e:a0:49:b2:b0:42:f9:90:e0: 08:af:68:03:7f:ec:2c:5e:0f:8a:b7:0e:40:b4:d1: 33:40:c8:e6:a4:b9:b1:79:82:3e:a0:df:37:34:eb: d9:11:a2:db:97:3c:bf:80:56:5a:33:34:ac:34:fe: c6:5a:7e:02:f2:22:83:76:f6:b0:c5:f8:99:11:ff: b4:5d:d8:5e:af:6f:cb:60:94:78:a1:68:84:58:3d: 8e:37:f1:3f:10:93:b8:59:67:7a:a4:96:dd:a2:4b: b1:e5:44:8e:87:cd:9d:54:56:88:e1:99:bf:b5:3c: ca:fd:4e:bd:db:d7:66:a7:04:0a:b5:8f:b2:d6:fa: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6E:C4:F3:E4:3D:7A:70:CA:3F:0A:3A:CD:63:1E:67:6C:44:5B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:61:32:07:21:61:0b:c8:39:94:23:1c:43:c2:11:4b:eb:b4: c2:30:39:bb:ab:4d:51:7d:86:9a:1c:4c:b7:b5:f5:35:95:01: 52:46:5e:53:36:2c:71:eb:fe:b8:0f:ed:50:2c:3e:d4:dd:e6: 45:4a:31:de:07:aa:f4:aa:5f:a9:ea:a1:96:12:6d:57:33:ca: 52:33:f7:1e:ae:6c:e5:4e:22:82:6f:9f:dd:fe:44:18:d3:34: 1c:89:f1:fa:04:6b:70:2a:9a:7c:c4:fa:18:20:c8:23:4e:3f: 1b:5c:3a:43:f7:92:b6:96:1d:9e:1c:af:2a:59:74:ca:69:75: 7a:6f:f7:68:ed:b9:23:fa:bb:97:5e:64:8a:65:a7:c2:fa:85: a2:4e:ae:57:d6:fe:90:b6:5e:52:ee:88:3d:bf:9f:c7:a0:c2: ac:ed:75:e2:53:99:0c:56:67:fd:fb:30:1e:d6:b1:53:e0:32: a4:d1:50:94:0a:46:22:9e:9d:4c:de:01:de:2d:b0:18:80:1b: 5f:41:7c:34:3c:ec:49:76:05:20:f5:f1:e2:52:3b:df:31:0a: 1b:00:95:1e:56:fb:75:e8:94:0f:a9:ed:a4:e9:0f:dc:f3:16: ee:c5:4a:a7:5d:26:15:3b:43:2d:80:59:3d:46:62:95:09:f2: 3e:a2:83:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl85M04BSlHarBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YzFlYmNjZmUtOWY5ZS00NjM5LTkxMWItMWNiZThiZmY4MTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttdPcTYdLY2yivDfGCzm/LSpAsgfYOEtC3ks qVsoZ+E6Ey82GR+vOZXehpFQq1XkCAfCSSyNVZ2nQPsprfq8qJjFicsjEit7WaHa Lk2wUfwyHmrSmu3ejBpjI5pO+3j+irvOg4NRsh4qcUaZefz5zIxl2dAjU3+s7CaP SmE+oEmysEL5kOAIr2gDf+wsXg+Ktw5AtNEzQMjmpLmxeYI+oN83NOvZEaLblzy/ gFZaMzSsNP7GWn4C8iKDdvawxfiZEf+0Xdher2/LYJR4oWiEWD2ON/E/EJO4WWd6 pJbdokux5USOh82dVFaI4Zm/tTzK/U6929dmpwQKtY+y1vo0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGduxPPkPXpwyj8KOs1jHmdsRFtOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2E0ZDNmZDMtMmRkZS0z YzJlLWI4NWYtN2RjMDk4YjVjNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADphMgchYQvIOZQjHEPCEUvrtMIwOburTVF9hpocTLe19TWVAVJGXlM2 LHHr/rgP7VAsPtTd5kVKMd4HqvSqX6nqoZYSbVczylIz9x6ubOVOIoJvn93+RBjT NByJ8foEa3AqmnzE+hggyCNOPxtcOkP3kraWHZ4crypZdMppdXpv92jtuSP6u5de ZIplp8L6haJOrlfW/pC2XlLuiD2/n8egwqztdeJTmQxWZ/37MB7WsVPgMqTRUJQK RiKenUzeAd4tsBiAG19BfDQ87El2BSD18eJSO98xChsAlR5W+3XolA+p7aTpD9zz Fu7FSqddJhU7Qy2AWT1GYpUJ8j6ig98= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:08 2025 by rpki-client