$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b558c6-0f69-344d-b777-07adb5db7399.roa File: d4b558c6-0f69-344d-b777-07adb5db7399.roa (raw, json) Hash identifier: LgSYZKYWPrnns9QTPmA5x2k4O8eBUBFPkk6jlX8635U= Subject key identifier: C7:41:37:53:FB:48:05:78:94:B9:E9:DF:C7:7B:ED:B6:D9:C3:60:59 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D1CD7FA7B33F3F1F7D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b558c6-0f69-344d-b777-07adb5db7399.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d1:cd:7f:a7:b3:3f:3f:1f:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9ac9799a-3e89-49a4-8e4a-beabcbca161e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:ac:c3:52:b5:0b:58:fe:d5:5d:36:71:46: c5:08:5e:ea:6c:76:08:35:85:c9:27:8d:8c:13:c1: 74:ca:87:c6:74:88:81:ba:0d:f4:3e:6b:26:b2:a2: 56:17:f7:49:b1:a7:98:aa:59:c6:6f:1d:00:6e:42: 60:67:84:ab:24:9e:3e:7b:d6:64:44:f7:9b:37:bb: 2c:50:40:bf:fd:2f:b8:c6:fb:00:74:f0:a7:4e:f4: 8b:15:f3:34:ef:95:b3:d8:54:d4:3f:9e:a7:bf:5c: 44:19:d1:5c:c1:9d:ec:11:c8:77:74:f7:06:06:97: 10:f6:c0:6f:28:62:f5:99:67:d6:e7:56:65:83:a7: ec:b2:22:b9:23:6b:0b:4a:38:aa:13:03:c4:f1:8b: fe:67:88:24:c7:9e:d8:08:a2:0d:ac:e7:24:9b:f0: 7a:b2:74:64:de:aa:ec:e7:34:3a:95:16:fd:3e:83: ba:f1:fa:bc:d6:90:b4:0e:97:b7:fa:d3:9f:5b:6f: ba:6e:64:a0:e0:25:0e:a0:4b:81:6e:c5:d8:ad:4d: 35:98:f0:af:42:eb:50:dd:1c:0f:45:5d:fb:b3:51: bb:27:4b:dc:c6:74:d5:2b:8b:29:61:cd:71:67:9a: c3:2f:ac:42:d2:ef:2a:26:44:7c:31:28:79:25:9e: b2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:41:37:53:FB:48:05:78:94:B9:E9:DF:C7:7B:ED:B6:D9:C3:60:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b558c6-0f69-344d-b777-07adb5db7399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:81:8a:6a:4e:50:a9:d8:38:4f:e9:27:72:18:61:40:f9:6e: 3c:53:c5:60:41:4a:b8:1b:b0:ad:ac:4f:00:f3:97:52:5e:54: 94:22:26:1e:49:ae:23:e9:42:08:31:49:f0:dc:b5:b0:76:ab: da:6a:c1:c4:75:49:5d:68:0a:55:e6:de:26:29:18:e7:5b:c2: 4b:41:fc:48:0e:95:ec:74:cd:77:e7:e8:49:a6:0a:99:52:a4: c4:e5:32:4c:47:8a:20:15:3e:c9:06:5a:5a:81:10:ba:b8:38: b4:eb:d3:1e:4a:d7:2e:46:43:24:4c:14:fa:fd:a6:b4:98:e7: 50:87:df:1a:46:8a:c0:96:59:1c:ac:68:f1:8f:9f:cb:b5:78: f9:ed:8f:da:a5:15:e2:55:18:8d:d7:46:5e:6b:ed:d6:e6:2c: 1c:15:06:7e:89:ed:5e:a6:3e:c5:0e:7f:6e:10:35:f6:92:fa: 86:08:51:f6:de:62:7f:1f:84:dc:07:e2:17:c0:9f:4e:2a:52: 0f:fa:fb:7f:89:a9:10:cd:fb:61:5e:49:7c:36:e0:e3:90:fe: 4c:13:1b:72:41:8b:bd:7c:ce:52:5d:63:05:d3:b9:39:48:cd: 38:db:37:5a:13:22:8f:ed:6c:28:1c:24:54:0e:cd:f9:0a:af: 1c:e8:1d:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9HNf6ezPz8ffYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWFjOTc5OWEtM2U4OS00OWE0LThlNGEtYmVhYmNiY2ExNjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU+sw1K1C1j+1V02cUbFCF7qbHYINYXJJ42M E8F0yofGdIiBug30PmsmsqJWF/dJsaeYqlnGbx0AbkJgZ4SrJJ4+e9ZkRPebN7ss UEC//S+4xvsAdPCnTvSLFfM075Wz2FTUP56nv1xEGdFcwZ3sEch3dPcGBpcQ9sBv KGL1mWfW51Zlg6fssiK5I2sLSjiqEwPE8Yv+Z4gkx57YCKINrOckm/B6snRk3qrs 5zQ6lRb9PoO68fq81pC0Dpe3+tOfW2+6bmSg4CUOoEuBbsXYrU01mPCvQutQ3RwP RV37s1G7J0vcxnTVK4spYc1xZ5rDL6xC0u8qJkR8MSh5JZ6ynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdBN1P7SAV4lLnp38d77bbZw2BZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRiNTU4YzYtMGY2OS0z NDRkLWI3NzctMDdhZGI1ZGI3Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6BimpOUKnYOE/pJ3IYYUD5bjxTxWBBSrgbsK2sTwDzl1JeVJQiJh5J riPpQggxSfDctbB2q9pqwcR1SV1oClXm3iYpGOdbwktB/EgOlex0zXfn6EmmCplS pMTlMkxHiiAVPskGWlqBELq4OLTr0x5K1y5GQyRMFPr9prSY51CH3xpGisCWWRys aPGPn8u1ePntj9qlFeJVGI3XRl5r7dbmLBwVBn6J7V6mPsUOf24QNfaS+oYIUfbe Yn8fhNwH4hfAn04qUg/6+3+JqRDN+2FeSXw24OOQ/kwTG3JBi718zlJdYwXTuTlI zTjbN1oTIo/tbCgcJFQOzfkKrxzoHWI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:52:04 2025 by rpki-client