$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf97bb79-94d7-3e77-b111-f81decbabf74.roa File: cf97bb79-94d7-3e77-b111-f81decbabf74.roa (raw, json) Hash identifier: iySXJfhqxnkvXXC6Xlbd8fKjzrur/dZ8hU4ZFdQZeGM= Subject key identifier: 9D:04:FF:68:14:A6:E6:9B:05:A7:31:89:23:E8:8E:68:AF:76:3A:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B31EF7DBC116CFD08780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf97bb79-94d7-3e77-b111-f81decbabf74.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.34.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b3:1e:f7:db:c1:16:cf:d0:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=10d6d156-7ee2-4d62-8e52-867de27889d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:ed:19:42:fe:4f:22:5a:e7:77:df:9d:c0: 82:cc:c9:0f:18:17:cd:d2:1e:0a:b4:bd:b2:2f:d6: 95:0b:82:ea:79:f1:ba:84:90:70:66:e8:b0:8c:68: 50:a5:b1:97:de:28:0f:2d:39:49:17:0d:99:d1:6d: c2:96:17:5b:e8:50:14:52:a6:6f:3c:9c:01:5e:7b: 7c:e1:92:b4:68:e4:e1:5b:30:6e:ea:0c:e0:e8:e8: 62:4c:fe:e4:3a:28:33:e8:b9:14:30:9f:1c:ad:9e: 45:25:ca:57:1d:f2:7a:56:d1:ef:a8:37:70:e1:74: 14:64:11:61:f3:e8:20:94:38:b4:ae:c1:ac:69:bb: d6:1a:8c:a8:46:5c:cb:e1:3b:50:51:57:1e:c3:39: 99:71:35:c8:0c:04:63:cc:d2:88:9a:bc:45:72:79: 45:97:79:94:11:01:c7:61:8d:db:1d:d1:b6:89:91: f9:33:33:c4:54:26:6c:4a:b0:bb:02:f8:58:3f:98: 3e:24:5d:de:3e:59:54:47:52:8d:a1:7a:80:92:d2: af:a1:b0:3c:69:9f:5b:b8:39:f7:f6:22:c6:c6:a3: cf:a6:ab:74:a6:1b:3a:06:c4:b8:1c:7a:bc:6e:dc: 24:83:09:a2:ea:24:11:dc:69:b0:a6:de:c6:88:c9: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:04:FF:68:14:A6:E6:9B:05:A7:31:89:23:E8:8E:68:AF:76:3A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf97bb79-94d7-3e77-b111-f81decbabf74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.34.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:1b:8c:98:80:bd:a7:1b:f0:21:ff:55:6b:53:04:9b:6b:1c: 44:7a:d7:6d:88:70:b0:89:53:77:b1:52:5c:10:e8:d8:7a:ce: b3:1c:e7:34:83:53:a4:5f:72:92:73:6f:79:ad:d9:cb:eb:f3: e2:23:81:89:de:fd:e3:c7:55:00:49:e4:30:f7:e7:68:71:bf: cf:3c:c3:71:31:59:f7:86:a0:4b:53:4d:a0:4a:76:2f:dd:d7: c5:20:fd:c8:4b:20:43:44:69:6d:8f:26:95:99:f9:e9:03:f4: e5:f0:7f:44:87:51:4c:d0:62:49:57:74:bf:8b:8e:63:79:67: 84:ff:f2:99:cb:de:46:dc:4e:ba:41:41:75:5f:b1:f4:51:eb: f9:d6:96:98:d7:6f:1a:39:09:12:0b:ea:07:42:01:de:12:f6: 11:46:b0:8e:2d:54:a8:35:f3:2c:78:59:cf:2a:49:f5:ee:b3: 83:f5:96:ab:49:2c:9f:27:76:42:25:de:a9:61:68:ca:fe:a1: fa:11:a8:0b:44:f8:63:c9:80:e9:05:12:43:93:7b:e9:83:34: f7:f6:f7:9f:32:e4:66:a9:f4:ee:75:96:75:e9:e4:90:d2:04: 5b:ce:28:f2:81:6b:ca:67:43:11:c4:27:eb:c8:e7:10:fc:d1: bb:0c:45:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7Me99vBFs/Qh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTBkNmQxNTYtN2VlMi00ZDYyLThlNTItODY3ZGUyNzg4OWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodTtGUL+TyJa53ffncCCzMkPGBfN0h4KtL2y L9aVC4LqefG6hJBwZuiwjGhQpbGX3igPLTlJFw2Z0W3Clhdb6FAUUqZvPJwBXnt8 4ZK0aOThWzBu6gzg6OhiTP7kOigz6LkUMJ8crZ5FJcpXHfJ6VtHvqDdw4XQUZBFh 8+gglDi0rsGsabvWGoyoRlzL4TtQUVcewzmZcTXIDARjzNKImrxFcnlFl3mUEQHH YY3bHdG2iZH5MzPEVCZsSrC7AvhYP5g+JF3ePllUR1KNoXqAktKvobA8aZ9buDn3 9iLGxqPPpqt0phs6BsS4HHq8btwkgwmi6iQR3Gmwpt7GiMk3mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0E/2gUpuabBacxiSPojmivdjrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y5N2JiNzktOTRkNy0z ZTc3LWIxMTEtZjgxZGVjYmFiZjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIiKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQbjJiAvacb8CH/VWtTBJtrHER6122IcLCJU3exUlwQ6Nh6zrMc5zSD U6RfcpJzb3mt2cvr8+IjgYne/ePHVQBJ5DD352hxv888w3ExWfeGoEtTTaBKdi/d 18Ug/chLIENEaW2PJpWZ+ekD9OXwf0SHUUzQYklXdL+LjmN5Z4T/8pnL3kbcTrpB QXVfsfRR6/nWlpjXbxo5CRIL6gdCAd4S9hFGsI4tVKg18yx4Wc8qSfXus4P1lqtJ LJ8ndkIl3qlhaMr+ofoRqAtE+GPJgOkFEkOTe+mDNPf2958y5Gap9O51lnXp5JDS BFvOKPKBa8pnQxHEJ+vI5xD80bsMRVc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:34 2025 by rpki-client