$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa File: d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa (raw, json) Hash identifier: e5vRBUVOnaPi0OBJiSlM8tmm/KP70VnjnZSLXHrfGVQ= Subject key identifier: D0:86:F9:7E:2A:45:42:D0:C9:9C:D4:9C:90:6E:BE:FF:08:36:6F:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797797ECD021720B4948580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.71.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:79:7e:cd:02:17:20:b4:94:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9cf53a46-516f-4b8c-bde7-a58c7c003dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c8:f3:0a:7e:21:1d:33:27:8a:b0:26:33:71: cb:be:ea:83:94:32:46:3c:27:a5:6a:7a:4e:27:3c: ef:e4:97:7c:86:78:1d:03:d3:c5:d9:6b:62:72:23: af:53:9a:95:0d:49:59:bf:72:17:28:93:26:3f:9a: 5e:cf:45:17:de:77:88:2f:de:9d:ae:2f:1d:dc:a4: 7f:5f:cb:5b:5c:ad:30:9b:04:56:0f:ee:76:b7:a4: f6:71:c8:57:13:48:cd:4b:64:eb:75:0b:1c:73:c0: f8:7b:7f:89:b7:1a:32:ae:35:01:10:09:a9:37:39: 3b:e5:ff:3a:3b:46:19:45:6a:cf:3d:f0:8c:9f:0a: d6:d7:eb:ee:33:22:cc:b7:b5:5e:9a:21:f3:53:9b: d5:59:57:fe:8c:6b:ce:5f:6a:d4:07:bc:46:b5:c7: 31:e4:1d:73:f9:61:c1:be:cf:5a:7e:f7:0c:4c:ff: bc:b4:25:a3:7e:44:17:d3:60:bb:60:4b:51:94:e7: 17:39:cf:be:f6:f4:7a:dc:1b:de:9b:e6:cd:de:3f: 00:7d:68:33:b1:a2:0e:e9:b5:8b:16:81:71:22:67: 4e:a7:aa:2f:51:a7:3c:dc:f3:5a:ed:da:b9:fa:b3: 6b:eb:a7:3c:e9:1c:08:96:00:93:7b:e9:c9:a5:61: 32:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:86:F9:7E:2A:45:42:D0:C9:9C:D4:9C:90:6E:BE:FF:08:36:6F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2d:7e:b9:75:8a:36:16:18:21:a3:1f:7f:ea:1a:cc:65:83: f4:52:3a:c1:f4:75:12:66:29:20:5e:3e:5f:62:22:10:0e:5c: 05:0d:59:f7:ee:bb:8a:45:9c:95:51:8a:fe:b0:f1:b8:a5:c0: 42:af:60:48:ed:a2:64:16:cc:37:98:c9:55:34:89:14:27:97: 62:08:24:91:42:0f:f6:3c:71:58:a0:d6:56:df:5f:68:97:f5: 0b:57:22:71:46:5f:72:8a:19:8a:ee:22:aa:7a:ca:16:67:4b: df:df:41:b4:d2:69:01:c4:b2:8c:2d:ba:c9:65:0c:10:5d:51: ef:58:bf:35:62:f5:da:9e:e0:99:08:c7:d8:bf:36:fe:57:e0: e0:d4:64:f4:b0:9b:02:0a:c3:b0:53:f5:de:c9:52:ac:a3:fc: 49:2a:24:b8:ce:5f:0e:04:5f:23:7f:28:1e:e0:93:b8:14:da: c5:65:29:f7:8a:06:e4:d7:42:8e:7f:f3:fb:b0:5f:05:de:43: a1:b0:a4:25:44:54:13:08:94:8d:49:df:9c:9f:d6:3f:38:c4: 8d:10:0f:0d:fa:0c:6f:c9:c5:99:59:c9:c2:e0:c0:f7:bc:09: 1c:fa:45:a0:d2:ad:4b:ae:59:1b:e0:3a:56:44:07:5b:bd:f2: 7e:5e:09:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3l+zQIXILSUhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWNmNTNhNDYtNTE2Zi00YjhjLWJkZTctYTU4YzdjMDAzZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8jzCn4hHTMnirAmM3HLvuqDlDJGPCelanpO Jzzv5Jd8hngdA9PF2WticiOvU5qVDUlZv3IXKJMmP5pez0UX3neIL96dri8d3KR/ X8tbXK0wmwRWD+52t6T2cchXE0jNS2TrdQscc8D4e3+JtxoyrjUBEAmpNzk75f86 O0YZRWrPPfCMnwrW1+vuMyLMt7VemiHzU5vVWVf+jGvOX2rUB7xGtccx5B1z+WHB vs9afvcMTP+8tCWjfkQX02C7YEtRlOcXOc++9vR63Bvem+bN3j8AfWgzsaIO6bWL FoFxImdOp6ovUac83PNa7dq5+rNr66c86RwIlgCTe+nJpWEyqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCG+X4qRULQyZzUnJBuvv8INm/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDEzNDM1NmItZDNlYi0z ZTlmLWFjNWQtZTBkM2YzY2Q4MTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGktfrl1ijYWGCGjH3/qGsxlg/RSOsH0dRJmKSBePl9iIhAOXAUNWffu u4pFnJVRiv6w8bilwEKvYEjtomQWzDeYyVU0iRQnl2IIJJFCD/Y8cVig1lbfX2iX 9QtXInFGX3KKGYruIqp6yhZnS9/fQbTSaQHEsowtusllDBBdUe9YvzVi9dqe4JkI x9i/Nv5X4ODUZPSwmwIKw7BT9d7JUqyj/EkqJLjOXw4EXyN/KB7gk7gU2sVlKfeK BuTXQo5/8/uwXwXeQ6GwpCVEVBMIlI1J35yf1j84xI0QDw36DG/JxZlZycLgwPe8 CRz6RaDSrUuuWRvgOlZEB1u98n5eCYk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:13:24 2025 by rpki-client