$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa File: cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa (raw, json) Hash identifier: 6AQVkhpwtJPozW/KDq5pyWikkCx9iYghN1z0VJ/QuHY= Subject key identifier: 8C:5C:97:78:14:E4:66:73:F4:5D:EF:C8:86:58:1A:FA:B3:3D:9C:2A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797E4CDC57DAF3B4152C580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.74.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e4:cd:c5:7d:af:3b:41:52:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=7e73d1c2-3511-47b2-b87d-bd4e688b4db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7b:7a:ce:b7:d1:4a:2e:b7:47:80:c6:11:49: 23:b3:66:cd:79:26:e5:9d:c5:3b:c8:7d:96:52:4e: 97:00:20:71:f1:24:82:00:50:b9:63:28:59:63:b3: 27:b0:0f:28:b3:89:f4:f9:7e:e3:d4:92:4a:aa:a9: 6b:6f:14:e7:59:b5:39:4b:4b:ca:03:69:6d:b5:8e: ac:53:bc:b1:3e:4f:ed:81:49:25:d2:5e:55:5b:82: f7:e5:f7:60:66:81:03:12:68:84:78:3e:52:53:4c: f2:f9:f9:97:dd:70:df:98:6a:30:b3:69:49:5b:92: 5d:00:e3:dd:2e:ce:63:34:c4:9b:6b:bd:df:0a:9d: 44:cb:a9:d9:59:9e:c6:96:08:20:b7:19:81:31:85: 08:70:b3:3a:df:e7:af:c7:cb:89:20:60:1d:1f:a1: 44:51:a4:4a:3d:c4:58:52:9f:d9:e5:4d:a3:9c:00: ee:dd:fd:c2:39:a9:de:ff:be:87:64:9d:c8:ae:42: 57:dd:2c:db:fd:5d:b7:25:dd:05:cc:8a:03:85:12: b6:0c:b4:c2:ee:d3:e1:d4:05:d1:7c:e6:24:c2:0b: 62:13:48:b1:f0:e3:bd:f7:e3:89:04:76:fa:07:90: e4:6a:8f:d2:00:04:1a:d3:3a:62:45:b1:7d:57:0d: b2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5C:97:78:14:E4:66:73:F4:5D:EF:C8:86:58:1A:FA:B3:3D:9C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:11:3b:bf:15:5b:0b:6f:62:e6:63:da:76:71:3f:5d:f2:45: cd:9c:b6:19:fd:b0:0e:bf:1f:16:8d:19:a7:60:02:c0:d8:1a: 14:9c:7d:12:8f:1f:23:9f:82:7d:72:3e:a9:50:2e:29:65:02: 87:29:77:06:5d:a0:71:02:68:24:e0:19:d4:56:3e:89:db:9d: 83:e6:9f:31:dd:c4:70:b4:2c:74:16:e9:a6:1d:be:81:5d:c3: f3:a1:a5:4a:c7:35:93:a1:87:18:6a:2b:1e:f4:83:f7:01:d6: 47:7d:71:2e:57:c8:56:e7:ec:7e:09:9e:30:8a:10:b8:b9:2b: 62:ae:15:c6:88:1c:b6:e8:fd:9f:50:7c:5a:85:1b:71:64:a6: cd:c4:10:46:d3:61:b9:08:53:79:4f:ab:bb:2b:ed:e0:7c:80: 33:10:68:24:6d:e0:c6:a7:d9:f4:71:13:56:8a:01:a5:76:10: 77:f9:f5:7c:c1:ff:54:8a:73:84:28:2c:91:ad:13:31:21:d4: 8d:fd:2f:8a:e8:97:92:f9:9e:80:5f:8d:53:c0:1a:15:8a:2f: 53:1a:e3:64:6c:c7:52:84:15:cf:fa:9d:88:a1:cb:a0:78:58: 91:c1:40:66:7d:b1:1b:b6:12:bb:a6:4f:0b:87:97:10:e3:f2: 8d:3f:ea:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+TNxX2vO0FSxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk N2U3M2QxYzItMzUxMS00N2IyLWI4N2QtYmQ0ZTY4OGI0ZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHt6zrfRSi63R4DGEUkjs2bNeSblncU7yH2W Uk6XACBx8SSCAFC5YyhZY7MnsA8os4n0+X7j1JJKqqlrbxTnWbU5S0vKA2lttY6s U7yxPk/tgUkl0l5VW4L35fdgZoEDEmiEeD5SU0zy+fmX3XDfmGows2lJW5JdAOPd Ls5jNMSba73fCp1Ey6nZWZ7GlgggtxmBMYUIcLM63+evx8uJIGAdH6FEUaRKPcRY Up/Z5U2jnADu3f3COane/76HZJ3IrkJX3Szb/V23Jd0FzIoDhRK2DLTC7tPh1AXR fOYkwgtiE0ix8OO99+OJBHb6B5Dkao/SAAQa0zpiRbF9Vw2yKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxcl3gU5GZz9F3vyIZYGvqzPZwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZlZmY3YzItMTU3MS0z ZGUxLTliYzgtNWIyNDNmYjIzYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIRO78VWwtvYuZj2nZxP13yRc2cthn9sA6/HxaNGadgAsDYGhScfRKP HyOfgn1yPqlQLillAocpdwZdoHECaCTgGdRWPonbnYPmnzHdxHC0LHQW6aYdvoFd w/OhpUrHNZOhhxhqKx70g/cB1kd9cS5XyFbn7H4JnjCKELi5K2KuFcaIHLbo/Z9Q fFqFG3Fkps3EEEbTYbkIU3lPq7sr7eB8gDMQaCRt4Man2fRxE1aKAaV2EHf59XzB /1SKc4QoLJGtEzEh1I39L4rol5L5noBfjVPAGhWKL1Ma42Rsx1KEFc/6nYihy6B4 WJHBQGZ9sRu2ErumTwuHlxDj8o0/6tk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:29:35 2025 by rpki-client