$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4e57a01-f77d-38b5-9620-df8f3d8e0dd0.roa File: d4e57a01-f77d-38b5-9620-df8f3d8e0dd0.roa (raw, json) Hash identifier: RmURrRLdj1Ck02yGshfK3GSUf17AodiWcDfTSPjFMZk= Subject key identifier: 72:57:03:DB:C5:7C:DB:77:FC:27:36:5D:A5:1B:66:8D:9E:F5:69:15 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE1159A5CA77871D8A1DC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4e57a01-f77d-38b5-9620-df8f3d8e0dd0.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 139070 IP address blocks: 34.0.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:11:59:a5:ca:77:87:1d:8a:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=cbf0bd26-d87b-4112-b85e-e8d6b793bd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:17:a8:74:57:a3:b8:9b:fa:c2:2a:b4:da:b1: d8:27:a2:66:ed:3a:ff:27:24:a6:2b:23:c1:f5:26: 5e:ee:0f:b9:18:d5:9b:d9:79:b3:8b:0f:6d:6f:73: c1:00:40:f3:b6:8f:4c:1b:7a:00:28:b8:9b:df:f6: ef:35:05:65:09:f0:05:6e:ba:cf:a8:6a:f3:55:2a: 0e:42:97:9b:ec:0d:0a:38:a5:c3:60:20:86:ad:3a: dd:11:2d:cc:f1:17:fa:2d:fb:4a:4e:35:e4:29:be: 3d:df:11:c3:a3:12:6c:04:4f:7d:7e:e2:99:29:34: 37:10:8f:b4:60:4e:b1:ef:a7:77:cc:55:7f:57:2a: df:b9:f2:cf:56:25:c2:bf:31:07:9c:58:6b:10:b8: 15:c4:b3:d1:ce:34:ff:ad:91:b9:e0:73:c7:a4:1a: df:8d:1f:3d:96:ee:0b:ff:12:9e:a3:29:3d:57:c5: 1e:f2:a3:1a:c4:c9:5a:78:eb:2a:91:41:bc:56:5f: 3a:2e:70:0c:46:37:e0:a4:97:99:11:23:e3:38:81: c3:fa:57:6a:ec:0f:37:34:d3:76:fc:13:9b:81:eb: da:40:7e:8b:6c:3a:6f:38:aa:55:e7:43:04:16:9a: 7d:77:3c:74:44:b5:1e:31:f7:83:ac:34:4f:6d:f3: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:57:03:DB:C5:7C:DB:77:FC:27:36:5D:A5:1B:66:8D:9E:F5:69:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4e57a01-f77d-38b5-9620-df8f3d8e0dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ee:39:73:b3:00:89:ba:05:b2:ac:36:c6:ee:36:7f:c5:90: be:e5:31:fd:22:48:17:f3:8d:e0:a8:39:2b:e2:fb:dd:43:86: 62:39:36:a4:12:14:f7:b4:3c:e5:c5:5c:6e:09:6a:6d:bb:5e: df:02:36:8a:39:50:02:af:5f:bb:6c:e5:88:87:ff:7d:77:68: 49:d0:cf:97:79:0f:0f:20:60:82:01:ca:44:9c:85:c5:2f:95: e2:34:e3:fb:f6:de:71:f7:f5:ff:85:cc:94:4a:62:b5:7d:eb: b5:3e:ce:aa:bf:8b:24:a3:2e:f8:98:1c:21:cf:aa:c9:8c:c7: 45:ae:ef:bf:72:f9:cc:ea:68:df:7b:85:67:f2:a4:01:e0:b3: 1d:23:43:84:0d:e5:26:a0:a0:ec:84:f5:ae:27:52:40:b0:01: 73:75:c1:75:ef:75:57:91:c4:40:dc:71:6c:c2:42:b6:ac:40: cf:6a:1e:57:03:04:b0:70:9f:c2:b4:46:28:9d:c8:df:b1:bf: ab:49:f0:16:8a:8e:56:7a:03:43:23:e7:0e:97:7e:e4:44:ac: fa:78:09:a0:0a:48:82:38:57:0a:bb:f1:83:57:b6:89:94:63: a7:b9:a6:e9:06:c5:3b:67:ba:a0:d7:1e:60:18:ab:a4:18:bc: bc:de:ca:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhFZpcp3hx2KHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2JmMGJkMjYtZDg3Yi00MTEyLWI4NWUtZThkNmI3OTNiZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhheodFejuJv6wiq02rHYJ6Jm7Tr/JySmKyPB 9SZe7g+5GNWb2Xmziw9tb3PBAEDzto9MG3oAKLib3/bvNQVlCfAFbrrPqGrzVSoO Qpeb7A0KOKXDYCCGrTrdES3M8Rf6LftKTjXkKb493xHDoxJsBE99fuKZKTQ3EI+0 YE6x76d3zFV/VyrfufLPViXCvzEHnFhrELgVxLPRzjT/rZG54HPHpBrfjR89lu4L /xKeoyk9V8Ue8qMaxMlaeOsqkUG8Vl86LnAMRjfgpJeZESPjOIHD+ldq7A83NNN2 /BObgevaQH6LbDpvOKpV50MEFpp9dzx0RLUeMfeDrDRPbfNAlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJXA9vFfNt3/Cc2XaUbZo2e9WkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRlNTdhMDEtZjc3ZC0z OGI1LTk2MjAtZGY4ZjNkOGUwZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIgBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLuOXOzAIm6BbKsNsbuNn/FkL7lMf0iSBfzjeCoOSvi+91DhmI5NqQS FPe0POXFXG4Jam27Xt8CNoo5UAKvX7ts5YiH/313aEnQz5d5Dw8gYIIBykSchcUv leI04/v23nH39f+FzJRKYrV967U+zqq/iySjLviYHCHPqsmMx0Wu779y+czqaN97 hWfypAHgsx0jQ4QN5SagoOyE9a4nUkCwAXN1wXXvdVeRxEDccWzCQrasQM9qHlcD BLBwn8K0RiidyN+xv6tJ8BaKjlZ6A0Mj5w6XfuRErPp4CaAKSII4Vwq78YNXtomU Y6e5pukGxTtnuqDXHmAYq6QYvLzeygQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:22:06 2025 by rpki-client