$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa File: d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa (raw, json) Hash identifier: iK0WdgEvyddJSHDth5cvbE082RhdPK54DODBG+sWJPU= Subject key identifier: 53:F6:2F:66:0C:60:0E:7A:A2:08:59:AC:7F:14:93:E6:3F:E5:89:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797844B7CF6CD6740051C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.88.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:84:4b:7c:f6:cd:67:40:05:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f82da948-cfec-426b-b23f-e3ae864792c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:a7:34:e2:41:a1:56:ab:37:ea:6c:90:fa: 16:1d:c6:47:0a:b8:4f:2a:f9:81:41:4e:2e:13:9f: fb:ca:cb:89:25:fd:28:90:1c:0e:29:db:72:7a:68: 4f:b7:d9:c1:96:72:56:7e:3f:24:de:47:86:7e:04: 6e:60:8f:83:0f:5d:f1:d6:8c:17:ca:f5:a3:8c:6c: 0f:a7:4b:15:f2:3d:c4:b1:e3:1b:62:22:86:c8:9a: 1e:d4:ee:01:9b:9a:70:ed:8f:a5:4c:fb:90:5a:3c: 85:1e:eb:3e:7d:4f:73:b3:8c:56:4c:fe:1c:23:8d: f7:a0:e1:35:60:3e:0f:b5:17:0e:52:01:de:52:a3: a1:72:b2:18:2e:14:fc:5d:14:50:71:e5:1c:6f:9e: 4a:25:e0:a4:6e:12:ed:62:a5:c3:63:34:bb:0d:f3: 6a:df:5c:fa:c4:db:17:65:19:9c:f7:bf:61:44:2f: c1:3a:69:11:73:41:e9:6a:33:fe:94:18:a1:72:b6: 0f:cb:03:36:ee:6c:02:a9:26:56:0c:aa:b6:ce:f6: ef:56:19:96:19:04:27:bf:07:fe:80:e2:9a:83:91: 68:3e:f0:cb:e8:65:14:ad:4a:3c:7f:dc:5a:74:78: f3:55:ab:8a:17:93:d3:33:59:c7:26:d6:76:40:f9: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F6:2F:66:0C:60:0E:7A:A2:08:59:AC:7F:14:93:E6:3F:E5:89:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d3:f3:3d:73:02:a4:3e:49:92:b1:21:1a:55:ad:78:fc:9d: 57:b9:43:ba:8b:1b:0f:14:82:25:82:8b:2b:d4:6e:65:9e:20: 11:c4:c5:28:ab:74:94:a6:1d:3a:8e:55:ee:bf:cc:69:30:46: a0:1b:23:31:63:0b:fe:57:de:21:72:4f:06:4a:8f:9c:b7:1e: 8c:8f:fa:d4:e5:01:69:39:aa:ed:66:c6:81:93:dc:8d:a1:05: b0:0a:45:63:ed:05:85:c1:72:a7:fe:b7:0a:c7:ac:db:18:3e: 9d:00:78:13:7c:d1:ef:27:58:1f:e4:06:8a:8a:4e:9b:ac:d7: e3:9f:b5:90:05:f9:00:c0:ff:11:cd:dc:a7:b7:37:66:c8:9e: de:75:4a:44:8d:9c:f4:9c:9d:35:1a:d5:aa:a8:a3:42:b8:66: 00:7d:78:3b:ae:43:4e:0a:b0:8d:58:08:9f:cf:9e:da:9d:50: 4a:2a:de:4f:b4:f3:7a:d5:1e:2d:16:5e:01:32:5b:0a:79:bc: 7d:7e:1b:64:ff:68:5c:dc:7c:d0:78:13:1f:71:1c:dc:eb:04: 6d:88:57:0c:90:7e:fc:03:21:b4:c3:9b:26:68:11:d7:c8:c7: 1d:41:5e:29:f6:52:68:14:5f:ec:09:2b:66:0f:3e:09:5b:ce: 78:ce:31:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4RLfPbNZ0AFHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjgyZGE5NDgtY2ZlYy00MjZiLWIyM2YtZTNhZTg2NDc5MmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6enNOJBoVarN+pskPoWHcZHCrhPKvmBQU4u E5/7ysuJJf0okBwOKdtyemhPt9nBlnJWfj8k3keGfgRuYI+DD13x1owXyvWjjGwP p0sV8j3EseMbYiKGyJoe1O4Bm5pw7Y+lTPuQWjyFHus+fU9zs4xWTP4cI433oOE1 YD4PtRcOUgHeUqOhcrIYLhT8XRRQceUcb55KJeCkbhLtYqXDYzS7DfNq31z6xNsX ZRmc979hRC/BOmkRc0HpajP+lBihcrYPywM27mwCqSZWDKq2zvbvVhmWGQQnvwf+ gOKag5FoPvDL6GUUrUo8f9xadHjzVauKF5PTM1nHJtZ2QPkpvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFP2L2YMYA56oghZrH8Uk+Y/5YnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRjMWFiNGYtNmQwMi0z NDNmLTk2MmYtMzU4NDBiYWU2ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIljwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzT8z1zAqQ+SZKxIRpVrXj8nVe5Q7qLGw8UgiWCiyvUbmWeIBHExSir dJSmHTqOVe6/zGkwRqAbIzFjC/5X3iFyTwZKj5y3HoyP+tTlAWk5qu1mxoGT3I2h BbAKRWPtBYXBcqf+twrHrNsYPp0AeBN80e8nWB/kBoqKTpus1+OftZAF+QDA/xHN 3Ke3N2bInt51SkSNnPScnTUa1aqoo0K4ZgB9eDuuQ04KsI1YCJ/PntqdUEoq3k+0 83rVHi0WXgEyWwp5vH1+G2T/aFzcfNB4Ex9xHNzrBG2IVwyQfvwDIbTDmyZoEdfI xx1BXin2UmgUX+wJK2YPPglbznjOMQE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:36:02 2025 by rpki-client