$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d967e0bf-c0fa-3e3f-bc02-843737ac3b2e.roa File: d967e0bf-c0fa-3e3f-bc02-843737ac3b2e.roa (raw, json) Hash identifier: kG7d5XwlzebvwAg9gNmKTciMlAEis5vFrsO9j4bpULM= Subject key identifier: E4:F7:86:0E:2B:E8:A0:FF:A6:D2:CB:95:3A:2F:71:19:05:63:C3:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B864CB570AE5070BB4A6BFC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d967e0bf-c0fa-3e3f-bc02-843737ac3b2e.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 34.191.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b5:70:ae:50:70:bb:4a:6b:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=f49fdd21-0c80-4e38-96f4-17d94f26ced5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:99:de:3e:17:ad:c7:38:bb:26:0b:fe:af:c5: 26:74:fc:1a:b6:5f:63:2d:92:ce:d0:43:2a:25:8f: 53:ef:5f:8f:f7:5a:7d:ca:c6:21:38:55:f2:21:44: 68:5d:2c:83:48:3d:fd:85:12:40:84:d7:a0:52:43: dc:6d:c5:c9:d6:30:c1:8c:b7:07:de:40:c5:91:48: bf:29:a3:08:4c:64:c8:e3:6b:46:d4:b1:97:1a:9e: bc:aa:0f:91:77:69:e6:0f:34:15:9b:1b:38:2a:27: d9:d6:55:55:7c:99:2d:77:cd:f1:72:38:d9:c8:42: 25:88:b0:8b:fa:f6:2f:97:78:d7:53:c4:6e:f9:e3: f7:e0:3e:db:0f:cf:31:0c:93:e8:d5:68:03:e0:8e: 2d:30:6d:3d:a1:78:bc:d3:81:2a:c4:42:ce:1c:ed: 18:82:55:91:20:82:6a:af:1f:1a:bf:7a:dc:10:e7: 55:6a:e9:71:1f:e6:ed:80:d0:60:dc:0e:49:d5:4c: 03:90:06:8d:9d:20:9c:8e:fc:61:24:02:6a:86:1a: a0:64:3b:eb:4a:43:77:65:d6:91:3a:e2:34:55:bb: 81:88:f5:89:fb:93:32:62:40:92:b0:e0:aa:0f:8c: 81:0b:25:20:bd:2b:c2:f8:4e:ce:5a:d8:8b:43:a8: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F7:86:0E:2B:E8:A0:FF:A6:D2:CB:95:3A:2F:71:19:05:63:C3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d967e0bf-c0fa-3e3f-bc02-843737ac3b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f2:de:f1:9f:b9:13:74:ed:4e:df:0e:1b:db:f4:2e:f9:9e: 25:ed:a3:d1:a6:dd:fd:4d:2d:46:98:6f:23:ae:0f:d6:64:36: 74:56:c6:bf:99:7d:b2:a1:67:66:7b:7c:26:3f:63:ea:8b:3b: 67:e2:7e:53:15:57:b6:7c:bd:4f:b7:e7:5d:f4:29:aa:8e:73: 04:a4:f5:d7:40:27:4a:79:98:af:77:99:10:a3:2b:67:d4:0b: 76:5b:c7:e2:4d:d2:f8:b9:6c:9c:29:3f:7f:3a:48:61:46:b9: 0a:45:80:fd:cf:ea:6a:7e:66:08:3f:9e:55:83:58:b4:bc:e0: 32:29:a0:c4:ef:52:d5:54:74:8d:17:97:37:8a:b3:97:0a:22: 00:67:7a:77:d8:83:c2:4e:26:d0:26:af:96:65:db:3f:dc:9a: 1b:2d:9c:e5:54:b6:4a:72:b5:30:90:0b:72:e8:99:4e:5b:fa: 30:3b:28:dd:a2:e6:3f:a5:50:f8:6b:c4:c0:32:b8:04:09:c6: 7c:a6:c8:ff:42:ae:8f:e3:84:fb:f7:c3:7a:1e:a0:a6:73:cb: 3a:cd:48:0d:5a:0e:12:2a:f1:1d:c8:15:f9:52:9b:0a:69:81: 41:bc:1b:92:6a:dc:85:f0:10:36:96:93:da:db:de:b0:dc:24: 23:9a:96:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTLVwrlBwu0pr/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk ZjQ5ZmRkMjEtMGM4MC00ZTM4LTk2ZjQtMTdkOTRmMjZjZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5nePhetxzi7Jgv+r8UmdPwatl9jLZLO0EMq JY9T71+P91p9ysYhOFXyIURoXSyDSD39hRJAhNegUkPcbcXJ1jDBjLcH3kDFkUi/ KaMITGTI42tG1LGXGp68qg+Rd2nmDzQVmxs4KifZ1lVVfJktd83xcjjZyEIliLCL +vYvl3jXU8Ru+eP34D7bD88xDJPo1WgD4I4tMG09oXi804EqxELOHO0YglWRIIJq rx8av3rcEOdVaulxH+btgNBg3A5J1UwDkAaNnSCcjvxhJAJqhhqgZDvrSkN3ZdaR OuI0VbuBiPWJ+5MyYkCSsOCqD4yBCyUgvSvC+E7OWtiLQ6ih6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT3hg4r6KD/ptLLlTovcRkFY8OYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDk2N2UwYmYtYzBmYS0z ZTNmLWJjMDItODQzNzM3YWMzYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzy3vGfuRN07U7fDhvb9C75niXto9Gm3f1NLUaYbyOuD9ZkNnRWxr+Z fbKhZ2Z7fCY/Y+qLO2fiflMVV7Z8vU+35130KaqOcwSk9ddAJ0p5mK93mRCjK2fU C3Zbx+JN0vi5bJwpP386SGFGuQpFgP3P6mp+Zgg/nlWDWLS84DIpoMTvUtVUdI0X lzeKs5cKIgBnenfYg8JOJtAmr5Zl2z/cmhstnOVUtkpytTCQC3LomU5b+jA7KN2i 5j+lUPhrxMAyuAQJxnymyP9Cro/jhPv3w3oeoKZzyzrNSA1aDhIq8R3IFflSmwpp gUG8G5Jq3IXwEDaWk9rb3rDcJCOalgc= -----END CERTIFICATE-----Generated at Mon Oct 20 23:18:33 2025 by rpki-client