$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d32c3afa-e997-3493-8d64-a819e0e5c167.roa File: d32c3afa-e997-3493-8d64-a819e0e5c167.roa (raw, json) Hash identifier: 0xk7z3lGBuDHZiQChVgDt15JGa18AFEh09A6ZXSDjQQ= Subject key identifier: E3:61:37:C5:2A:FE:51:AE:B6:AB:64:C6:AA:4A:22:8F:D1:93:EC:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679772C9657BC4CFD695C140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d32c3afa-e997-3493-8d64-a819e0e5c167.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:72:c9:65:7b:c4:cf:d6:95:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=e308d894-2eff-4d52-85b7-0b8337e4d02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a2:0a:ad:7a:46:42:e3:6a:e5:d7:5c:b9:98: ff:89:9b:cd:16:dc:d8:62:10:3b:a6:75:c1:e8:94: 5f:d4:cf:96:83:e9:17:22:a8:59:27:d8:4a:07:3b: 32:44:58:32:e7:d0:e1:1a:1c:a6:3d:b3:5c:a4:be: e7:f5:57:bc:e1:1f:9b:11:2b:37:3f:cb:81:1e:85: 49:3d:32:3c:2e:84:34:6b:cc:f8:fc:ea:e3:71:5b: fe:af:e1:17:79:5e:3e:44:ef:e0:6c:82:18:33:16: 4a:4c:71:b4:85:ca:4d:af:57:c9:e6:6c:08:ce:42: 7e:26:7c:40:5f:8d:c5:d5:4d:36:86:18:3c:89:e1: c8:d2:09:04:2b:a7:4a:f4:ee:b8:0f:72:b2:9e:2f: 85:97:76:09:76:7e:0c:2d:06:9f:62:c3:e9:c3:ce: d5:d3:d4:85:c7:23:8d:fb:c4:5e:ba:fe:87:fe:ae: b2:59:ba:e5:d7:6e:ea:d0:b0:09:0a:9d:40:d7:3c: 0f:2a:cd:35:f4:91:55:4d:e4:c6:c2:18:ce:c9:a4: 02:3b:06:c8:6f:17:8c:f6:ce:68:47:be:73:fb:06: 08:db:4d:29:21:b4:1d:71:f9:b1:b9:7b:a0:b9:ef: 20:a7:e0:f8:b6:11:b5:bd:63:ba:ed:c4:b6:83:56: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:61:37:C5:2A:FE:51:AE:B6:AB:64:C6:AA:4A:22:8F:D1:93:EC:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d32c3afa-e997-3493-8d64-a819e0e5c167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:39:d6:db:02:0e:62:ae:10:7e:e1:8c:85:83:ba:28:3f:38: f7:e9:a4:cc:2a:ab:db:07:0b:4b:27:f7:d4:24:76:15:4d:44: 41:0b:30:2f:93:7c:31:d4:20:d3:c9:39:33:bb:24:ce:96:95: 4b:27:b0:9f:84:04:bd:de:58:56:53:10:60:37:bb:18:0c:44: 03:55:0e:21:7a:47:35:6d:b8:75:54:f4:f2:ce:81:de:d1:22: 78:ca:5a:d3:a8:16:14:c2:54:5c:4b:9d:ae:0b:2f:c6:71:5f: c9:fe:9a:42:5c:53:90:99:02:f1:5d:28:a0:c0:40:8b:25:01: f7:51:c5:11:52:cb:23:fb:0c:b7:52:3f:89:10:8e:32:b2:ec: d7:6c:ed:15:98:7f:fa:fb:23:f4:36:e5:0c:e5:2a:c9:84:8b: 66:be:9c:54:41:7c:40:6b:11:de:9d:a0:84:e8:ed:7b:58:cd: 97:6b:1a:93:73:9b:8d:a2:40:ee:a5:cc:81:69:ac:02:5d:23: 8e:36:b8:da:a7:6c:0a:22:ae:32:37:cb:dc:3b:f9:d8:61:15: 35:c4:d7:c7:6f:62:2f:2f:47:55:ad:3e:a9:8d:52:5b:2a:9a: 4a:9c:19:95:70:c8:27:af:c3:8d:61:80:7b:a4:be:cb:8d:3b: 0a:c0:80:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3LJZXvEz9aVwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTMwOGQ4OTQtMmVmZi00ZDUyLTg1YjctMGI4MzM3ZTRkMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaIKrXpGQuNq5ddcuZj/iZvNFtzYYhA7pnXB 6JRf1M+Wg+kXIqhZJ9hKBzsyRFgy59DhGhymPbNcpL7n9Ve84R+bESs3P8uBHoVJ PTI8LoQ0a8z4/OrjcVv+r+EXeV4+RO/gbIIYMxZKTHG0hcpNr1fJ5mwIzkJ+JnxA X43F1U02hhg8ieHI0gkEK6dK9O64D3Kyni+Fl3YJdn4MLQafYsPpw87V09SFxyON +8Reuv6H/q6yWbrl127q0LAJCp1A1zwPKs019JFVTeTGwhjOyaQCOwbIbxeM9s5o R75z+wYI200pIbQdcfmxuXugue8gp+D4thG1vWO67cS2g1bd4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONhN8Uq/lGutqtkxqpKIo/Rk+zGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDMyYzNhZmEtZTk5Ny0z NDkzLThkNjQtYTgxOWUwZTVjMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw51tsCDmKuEH7hjIWDuig/OPfppMwqq9sHC0sn99QkdhVNREELMC+T fDHUINPJOTO7JM6WlUsnsJ+EBL3eWFZTEGA3uxgMRANVDiF6RzVtuHVU9PLOgd7R InjKWtOoFhTCVFxLna4LL8ZxX8n+mkJcU5CZAvFdKKDAQIslAfdRxRFSyyP7DLdS P4kQjjKy7Nds7RWYf/r7I/Q25QzlKsmEi2a+nFRBfEBrEd6doITo7XtYzZdrGpNz m42iQO6lzIFprAJdI442uNqnbAoirjI3y9w7+dhhFTXE18dvYi8vR1WtPqmNUlsq mkqcGZVwyCevw41hgHukvsuNOwrAgCw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:14:33 2025 by rpki-client