$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2dd4033-19ff-3165-8e09-8e417920292e.roa File: d2dd4033-19ff-3165-8e09-8e417920292e.roa (raw, json) Hash identifier: +n+JM6LdEj2zekSIIm9xD9j2LiP+YU0tzjoz7eGorm8= Subject key identifier: 2B:55:3C:74:81:EB:96:6A:A1:57:F7:7F:B0:C1:AA:34:23:E4:9F:CF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797BE145A857B5D6FC47A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2dd4033-19ff-3165-8e09-8e417920292e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.78.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:be:14:5a:85:7b:5d:6f:c4:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=ebaae239-2496-41c1-956f-131589be7988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5c:9b:06:b0:4f:81:f2:84:a3:20:e9:31:6e: 80:a5:54:c6:52:04:74:80:c4:09:dd:7e:24:59:8a: 01:f4:62:2d:a1:26:7d:64:69:ef:51:de:e8:79:55: 92:61:8b:ab:63:1b:f7:39:f9:d7:b7:82:88:8c:5a: e1:b9:24:75:32:4b:4b:6b:15:be:3d:aa:aa:38:7f: fe:56:e3:e7:e8:93:af:ee:e7:89:5c:fc:cf:e9:ee: 6c:71:f2:6f:10:a5:47:48:4e:5a:82:98:76:38:1b: 74:6c:11:79:66:d4:22:e3:b1:2e:26:51:5c:65:e4: e1:78:8d:8a:76:5e:78:49:36:f4:16:27:2f:2f:b9: 4a:0c:c9:97:45:d6:89:d5:53:30:82:d3:f5:cd:41: 10:15:69:06:c3:b2:28:a5:49:71:1d:6e:34:8a:eb: 23:f4:b8:f9:05:50:69:21:5a:26:6d:8a:b2:b3:6e: 55:2f:d5:fe:b0:b8:e4:1c:64:9f:c3:37:84:16:ec: 9c:91:3e:7c:3d:19:53:39:52:a9:0e:36:4a:55:a1: 0b:80:71:c3:57:62:4d:a1:c0:fd:10:68:25:c4:31: 17:f9:34:cb:42:f9:d0:fc:79:b1:b5:1d:49:7c:92: e1:73:b9:12:2b:94:78:94:93:07:8b:fd:c0:83:d8: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:55:3C:74:81:EB:96:6A:A1:57:F7:7F:B0:C1:AA:34:23:E4:9F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2dd4033-19ff-3165-8e09-8e417920292e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.78.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:cd:7a:c5:c6:a5:07:d4:35:1d:01:7c:87:1c:17:37:f0:66: 59:f6:d7:76:97:a1:14:0b:83:92:c1:29:06:5c:e1:84:05:af: b3:8b:b7:16:38:dd:d4:4a:6a:cb:e6:fb:6c:b8:ac:8d:75:5c: 12:1e:80:05:14:96:e2:a9:e6:30:86:c7:bc:b7:f7:4b:85:15: 14:4d:6d:c1:a4:ef:cb:ed:e1:9c:23:9b:3e:26:25:e9:65:8d: ae:62:1e:d8:8c:65:bb:85:a2:af:d9:b6:14:3c:51:f8:12:32: 21:6b:a1:ff:46:56:7d:8b:96:bd:77:13:e8:06:f0:32:c1:a3: 27:9b:63:32:61:ab:15:dc:ad:d5:a9:ed:65:d0:ac:e5:ed:1c: 44:a4:5f:96:6e:7e:99:92:eb:ff:d6:e4:a0:69:2b:5a:ae:87: f9:3e:66:ea:32:28:1d:21:1f:10:15:3a:6b:49:fd:2f:47:ce: cf:5b:25:d4:65:8a:47:4f:ce:5e:7e:2e:7d:e4:46:03:5e:70: 3b:a7:19:81:70:00:76:2e:c5:1a:dc:d8:1d:26:60:a5:b7:d6: 35:f7:7b:72:af:9f:47:6f:5f:5e:53:24:c0:d4:17:e2:88:06: 72:2b:8a:ae:67:17:7b:ed:0f:4d:f8:91:57:85:39:1a:de:f9: 8e:93:2b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl74UWoV7XW/EegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWJhYWUyMzktMjQ5Ni00MWMxLTk1NmYtMTMxNTg5YmU3OTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVybBrBPgfKEoyDpMW6ApVTGUgR0gMQJ3X4k WYoB9GItoSZ9ZGnvUd7oeVWSYYurYxv3OfnXt4KIjFrhuSR1MktLaxW+PaqqOH/+ VuPn6JOv7ueJXPzP6e5scfJvEKVHSE5agph2OBt0bBF5ZtQi47EuJlFcZeTheI2K dl54STb0FicvL7lKDMmXRdaJ1VMwgtP1zUEQFWkGw7IopUlxHW40iusj9Lj5BVBp IVombYqys25VL9X+sLjkHGSfwzeEFuyckT58PRlTOVKpDjZKVaELgHHDV2JNocD9 EGglxDEX+TTLQvnQ/HmxtR1JfJLhc7kSK5R4lJMHi/3Ag9hE+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtVPHSB65ZqoVf3f7DBqjQj5J/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJkZDQwMzMtMTlmZi0z MTY1LThlMDktOGU0MTc5MjAyOTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjNesXGpQfUNR0BfIccFzfwZln213aXoRQLg5LBKQZc4YQFr7OLtxY4 3dRKasvm+2y4rI11XBIegAUUluKp5jCGx7y390uFFRRNbcGk78vt4Zwjmz4mJell ja5iHtiMZbuFoq/ZthQ8UfgSMiFrof9GVn2Llr13E+gG8DLBoyebYzJhqxXcrdWp 7WXQrOXtHESkX5ZufpmS6//W5KBpK1quh/k+ZuoyKB0hHxAVOmtJ/S9Hzs9bJdRl ikdPzl5+Ln3kRgNecDunGYFwAHYuxRrc2B0mYKW31jX3e3Kvn0dvX15TJMDUF+KI BnIriq5nF3vtD034kVeFORre+Y6TKw0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:46:13 2025 by rpki-client