$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa File: cf6e7b37-0772-32d7-9247-62099beb3cd5.roa (raw, json) Hash identifier: Dk5Ge1PvDZZ6DMHcjaYver20Wg1M9IE/xHvpjSatK+E= Subject key identifier: 2D:59:DB:F6:54:A2:30:48:94:2B:0F:06:3A:9D:5B:72:EC:76:E2:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797504E580F9C61FB86DF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.88.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:50:4e:58:0f:9c:61:fb:86:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=58bc7dca-9c9e-465a-a9ae-05bec3eaaafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:29:76:53:7d:62:07:48:10:44:0d:58:8f: d6:45:8a:db:c3:15:ce:5d:4c:b6:f2:04:cf:ab:eb: 5f:6f:72:70:31:e4:72:a8:b5:1b:9f:08:89:d1:ea: e6:e2:74:bc:d1:5a:9c:12:dc:cc:4e:20:96:d4:fd: dd:5f:6f:71:dc:70:aa:8e:df:51:21:3a:27:30:36: a0:2e:46:b8:2a:df:be:74:41:40:b4:a5:45:f2:86: 8a:14:51:78:f2:0a:9b:ee:06:1b:9f:71:42:95:14: a2:c8:ef:fa:74:3e:c4:ae:bc:13:06:1a:52:33:4c: f8:5b:4d:8d:e6:11:6f:8e:d6:14:f6:c6:92:61:f8: d2:46:1f:f5:92:0b:f4:87:28:75:00:fe:8b:af:18: 77:12:06:a4:1a:61:47:40:ee:90:5d:a8:73:80:9c: e0:6a:82:8a:d3:7f:41:34:bf:9d:b8:02:12:69:fc: 3a:25:6a:6a:e5:c6:58:89:a5:a7:76:ef:ce:2d:b9: f8:42:d8:d5:71:28:2b:b3:62:8a:11:e1:1d:0d:fe: 64:4a:a4:43:5d:3d:ec:33:71:fc:9d:c5:2d:b5:f5: 77:38:ad:01:61:af:b3:aa:4e:01:69:7a:f8:4b:dd: 86:36:21:df:84:3e:52:96:2c:81:50:b7:f7:71:19: a4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:59:DB:F6:54:A2:30:48:94:2B:0F:06:3A:9D:5B:72:EC:76:E2:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:96:ef:5a:bc:ce:c0:76:7f:58:0b:f5:00:bd:10:29:f5:45: f6:46:1a:d2:b3:c3:25:e0:12:20:14:25:38:11:b4:1f:7c:8a: ca:1b:5c:7a:84:b7:1f:5a:4b:2d:dc:41:91:1e:fc:fb:ed:31: 1f:b7:c3:81:3f:99:03:76:08:75:1d:06:13:d2:b1:29:82:61: 2b:a2:c1:6f:4a:99:50:c0:34:97:df:f6:29:f5:4f:fd:a2:3e: f8:74:24:bd:13:fb:b5:60:b7:52:0c:69:73:26:80:a5:fc:99: b4:f4:26:1c:37:37:21:e2:53:ce:54:d4:6d:c5:b6:8d:b1:b7: a0:7e:6e:d5:11:b0:47:d1:8d:27:8d:a6:cc:f8:43:87:f4:00: b7:b6:42:89:90:51:0d:a8:bc:5d:e7:66:d6:9f:ca:50:35:71: af:82:3c:d7:2c:d8:ac:4d:43:59:b3:90:c8:81:af:ad:4c:d9: 79:e3:9a:20:10:ef:30:62:8b:a6:60:43:98:4f:de:e1:a8:93: cd:94:93:67:bc:99:4b:87:3e:e0:a3:a9:b3:e9:49:84:f7:69: 01:e2:b7:63:b5:3b:2d:5b:26:13:71:a4:e0:58:d0:23:d6:01: 1e:5a:fd:b2:f4:d2:78:87:1d:4c:26:5e:cf:0f:c7:a4:c0:dd: bf:fb:7b:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1BOWA+cYfuG34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NThiYzdkY2EtOWM5ZS00NjVhLWE5YWUtMDViZWMzZWFhYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUcpdlN9YgdIEEQNWI/WRYrbwxXOXUy28gTP q+tfb3JwMeRyqLUbnwiJ0erm4nS80VqcEtzMTiCW1P3dX29x3HCqjt9RITonMDag Lka4Kt++dEFAtKVF8oaKFFF48gqb7gYbn3FClRSiyO/6dD7ErrwTBhpSM0z4W02N 5hFvjtYU9saSYfjSRh/1kgv0hyh1AP6Lrxh3EgakGmFHQO6QXahzgJzgaoKK039B NL+duAISafw6JWpq5cZYiaWndu/OLbn4QtjVcSgrs2KKEeEdDf5kSqRDXT3sM3H8 ncUttfV3OK0BYa+zqk4BaXr4S92GNiHfhD5SliyBULf3cRmkSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1Z2/ZUojBIlCsPBjqdW3LsduJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y2ZTdiMzctMDc3Mi0z MmQ3LTkyNDctNjIwOTliZWIzY2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIliwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKW71q8zsB2f1gL9QC9ECn1RfZGGtKzwyXgEiAUJTgRtB98isobXHqE tx9aSy3cQZEe/PvtMR+3w4E/mQN2CHUdBhPSsSmCYSuiwW9KmVDANJff9in1T/2i Pvh0JL0T+7Vgt1IMaXMmgKX8mbT0Jhw3NyHiU85U1G3Fto2xt6B+btURsEfRjSeN psz4Q4f0ALe2QomQUQ2ovF3nZtafylA1ca+CPNcs2KxNQ1mzkMiBr61M2XnjmiAQ 7zBii6ZgQ5hP3uGok82Uk2e8mUuHPuCjqbPpSYT3aQHit2O1Oy1bJhNxpOBY0CPW AR5a/bL00niHHUwmXs8Px6TA3b/7e4M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:50 2025 by rpki-client