$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0ee4066-b2c9-3c43-91a5-9f9760594ba6.roa File: d0ee4066-b2c9-3c43-91a5-9f9760594ba6.roa (raw, json) Hash identifier: hKfj970dLVbvGeGA80fvcVWpr8IZmTDGrNKtuOI25AU= Subject key identifier: 85:72:61:86:F0:D7:31:0F:30:4A:52:4A:1D:FB:27:A6:8D:DA:74:A5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE0EFA7F803365DCEE8740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0ee4066-b2c9-3c43-91a5-9f9760594ba6.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.100.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0e:fa:7f:80:33:65:dc:ee:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=6c05f8e7-4d08-4665-a8c7-fd29816260ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:76:a3:7e:11:9e:34:dc:3b:26:27:82:f2: c3:2c:c5:cc:ae:15:6b:93:1a:82:d2:5d:45:02:d3: f4:70:47:cd:08:53:e3:4e:00:9f:3a:42:7e:8f:a9: bf:2f:c9:64:09:d7:01:2a:90:bf:e5:bf:df:e3:cc: ef:1d:96:be:f6:39:91:a0:58:25:2c:a6:f2:29:42: 46:d5:dc:fb:40:a1:20:42:62:8b:53:e8:80:33:a6: 77:96:55:56:cb:56:b1:e3:4e:61:4f:9b:bc:6f:09: c4:e9:99:68:57:09:ba:96:d7:26:63:b3:eb:38:ae: de:f4:ab:4e:d5:49:12:18:cc:96:8d:37:95:90:33: 88:87:40:c8:a9:34:b0:17:37:d5:ab:9d:1d:7a:af: 81:4f:00:d4:4d:51:76:05:8b:06:6b:1a:31:92:b1: fc:ae:8b:c7:f4:b2:a2:05:0d:f8:45:9e:c9:20:82: d3:d8:5c:ab:ad:28:21:de:ac:b6:23:8c:7b:a7:73: 6b:c4:7d:da:b9:0e:3d:4b:14:32:ba:62:f2:37:d3: 58:48:d9:4e:40:4a:65:84:87:ff:e0:2d:fe:18:5e: 11:26:c0:3a:b4:95:9b:79:e6:7d:b4:77:67:2a:70: cd:03:46:58:50:ca:7c:53:fe:cc:1b:e4:86:8e:03: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:72:61:86:F0:D7:31:0F:30:4A:52:4A:1D:FB:27:A6:8D:DA:74:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0ee4066-b2c9-3c43-91a5-9f9760594ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c6:6e:65:1c:af:6f:9b:9c:69:81:30:c8:99:95:95:b7:61: 89:11:ac:da:b0:55:81:97:fe:bb:ce:59:d9:9b:34:7e:f4:d9: ae:b0:b9:00:94:76:b7:f2:93:dc:35:f0:23:5a:f8:f3:7f:9b: 89:3f:14:e9:d1:f3:c2:e7:a8:09:5e:7a:d6:f6:9b:42:2a:50: b5:a0:7a:95:fd:13:94:bb:ba:5c:72:f6:1d:54:7f:68:1f:9f: e3:b3:d2:b5:ac:1c:c7:30:ac:6f:80:a2:23:d4:fa:8e:e7:82: bb:b8:01:42:2e:04:26:74:be:58:a1:a8:c6:a7:29:c9:8e:fa: 44:f7:71:62:9b:a3:9f:f9:f4:56:db:e9:53:82:7e:5c:b0:82: 5e:be:aa:c0:1e:6e:d6:9c:a8:76:32:56:51:21:13:88:17:1d: dd:62:4f:d3:b1:d3:4f:f8:4f:ba:e3:7f:5d:32:a8:b3:e8:b8: cc:18:3d:5a:3b:46:cb:c8:d3:d1:be:83:70:6c:06:1d:86:21: 26:de:b6:3a:d7:b5:65:9e:91:6e:e4:31:08:8a:d0:83:1a:ba: 1d:7a:5b:91:45:05:bd:30:55:23:ad:c5:14:31:b3:e7:66:40: 02:45:61:12:41:db:f3:a5:9c:79:47:3b:b7:0a:e6:62:a5:3f: e4:ee:09:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzg76f4AzZdzuh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NmMwNWY4ZTctNGQwOC00NjY1LWE4YzctZmQyOTgxNjI2MGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCN2o34RnjTcOyYngvLDLMXMrhVrkxqC0l1F AtP0cEfNCFPjTgCfOkJ+j6m/L8lkCdcBKpC/5b/f48zvHZa+9jmRoFglLKbyKUJG 1dz7QKEgQmKLU+iAM6Z3llVWy1ax405hT5u8bwnE6ZloVwm6ltcmY7PrOK7e9KtO 1UkSGMyWjTeVkDOIh0DIqTSwFzfVq50deq+BTwDUTVF2BYsGaxoxkrH8rovH9LKi BQ34RZ7JIILT2FyrrSgh3qy2I4x7p3NrxH3auQ49SxQyumLyN9NYSNlOQEplhIf/ 4C3+GF4RJsA6tJWbeeZ9tHdnKnDNA0ZYUMp8U/7MG+SGjgNwvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVyYYbw1zEPMEpSSh37J6aN2nSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDBlZTQwNjYtYjJjOS0z YzQzLTkxYTUtOWY5NzYwNTk0YmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHGbmUcr2+bnGmBMMiZlZW3YYkRrNqwVYGX/rvOWdmbNH702a6wuQCU drfyk9w18CNa+PN/m4k/FOnR88LnqAleetb2m0IqULWgepX9E5S7ulxy9h1Uf2gf n+Oz0rWsHMcwrG+AoiPU+o7ngru4AUIuBCZ0vlihqManKcmO+kT3cWKbo5/59Fbb 6VOCflywgl6+qsAebtacqHYyVlEhE4gXHd1iT9Ox00/4T7rjf10yqLPouMwYPVo7 RsvI09G+g3BsBh2GISbetjrXtWWekW7kMQiK0IMauh16W5FFBb0wVSOtxRQxs+dm QAJFYRJB2/OlnHlHO7cK5mKlP+TuCQg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:06 2025 by rpki-client