$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de541a29-3477-3804-a2f5-31d43e2e3025.roa File: de541a29-3477-3804-a2f5-31d43e2e3025.roa (raw, json) Hash identifier: e0nYh2LU5yoU7S5dpElhrr2NMoGYYeKdtm0KT6yGoxw= Subject key identifier: 1F:82:33:18:FB:A0:2E:53:CD:89:98:FF:89:49:C7:03:EB:A7:97:95 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67978E289664F2F138DFBB40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de541a29-3477-3804-a2f5-31d43e2e3025.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.130.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:8e:28:96:64:f2:f1:38:df:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=ec02ed68-59e1-4cbb-829e-dbb9012360e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:35:88:7d:e2:69:79:b7:46:fd:d3:fa:b5: 39:39:c9:24:bc:f7:6e:3f:aa:cd:18:a6:44:01:2b: dd:1b:73:7d:96:bb:89:b6:85:a7:98:57:d0:82:95: 85:9e:ff:a5:ae:71:13:91:af:06:91:0f:cc:16:dd: 0a:b6:b8:c9:94:ee:bc:db:ee:ab:19:02:cc:5a:b5: 16:98:7a:93:47:5b:1a:3e:4a:9a:e2:ea:b9:69:ec: b8:f4:6c:2d:4c:4c:2d:b3:65:27:15:e7:e2:a6:95: 91:3f:79:30:f2:94:e4:db:6c:26:7f:58:2d:8e:61: 2a:72:2f:25:96:10:d2:f0:16:d9:a3:e0:85:ce:f5: 65:7e:ab:1f:57:24:29:36:a6:38:a2:5c:33:c5:bf: f8:70:23:c9:be:a2:0b:2b:59:6c:d1:4a:1f:91:73: fe:76:b6:cf:5e:60:bb:49:8c:89:49:03:19:3c:cc: 1d:23:9e:84:97:c0:b2:1b:d6:88:e2:34:01:29:51: f2:b1:75:5d:30:e2:51:90:df:23:b2:5b:12:65:4a: e8:7b:0d:c5:9e:9e:a4:86:59:3e:1e:44:10:9d:f8: 12:46:da:c7:f8:70:73:f2:1c:ee:7a:21:fb:f9:61: 77:34:e1:f9:5d:6a:47:ba:12:b6:b8:3c:1f:c5:be: 8c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:82:33:18:FB:A0:2E:53:CD:89:98:FF:89:49:C7:03:EB:A7:97:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de541a29-3477-3804-a2f5-31d43e2e3025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.130.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ca:72:e2:7c:df:77:ad:e8:56:11:79:9a:be:7c:41:2c:02: 10:98:cb:f9:3d:91:e1:75:37:cb:18:c7:54:ae:dc:62:a8:ad: c0:b1:49:78:1a:1d:5d:66:2d:14:80:19:89:63:07:05:bb:76: e9:22:23:51:32:00:cc:c4:b1:1e:85:d1:43:89:0a:8a:44:5e: 96:ca:1d:97:2e:25:28:60:8e:8d:15:29:4d:fc:cc:93:54:f6: 23:87:ff:9a:66:bb:df:52:99:94:db:e0:a5:6e:d7:85:0e:8f: 65:c4:ee:7c:a2:a4:94:c5:b7:ac:31:d3:c6:26:e4:ea:c8:94: be:cf:8a:c2:0d:f1:f8:3b:2f:97:75:de:e5:3e:05:d3:94:7e: a3:5b:85:39:43:60:87:09:f3:d9:56:3c:86:38:56:95:f2:da: fb:87:78:e5:55:04:e7:74:d1:cc:fb:0f:1a:84:d9:ad:94:92: 13:b3:8c:10:d9:27:55:dd:2d:5a:92:43:66:26:06:dd:0c:f7: 64:4d:db:b1:21:35:52:b1:01:f6:91:18:11:af:d6:b3:45:14: c4:26:1f:fc:ab:4a:5c:d2:56:1d:67:09:e5:62:b7:64:0f:c0: 54:27:8e:60:30:26:a1:84:04:ec:46:9a:74:89:60:95:ce:f8: d6:0a:2b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl44olmTy8Tjfu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWMwMmVkNjgtNTllMS00Y2JiLTgyOWUtZGJiOTAxMjM2MGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf81iH3iaXm3Rv3T+rU5OckkvPduP6rNGKZE ASvdG3N9lruJtoWnmFfQgpWFnv+lrnETka8GkQ/MFt0KtrjJlO682+6rGQLMWrUW mHqTR1saPkqa4uq5aey49GwtTEwts2UnFefippWRP3kw8pTk22wmf1gtjmEqci8l lhDS8BbZo+CFzvVlfqsfVyQpNqY4olwzxb/4cCPJvqILK1ls0UofkXP+drbPXmC7 SYyJSQMZPMwdI56El8CyG9aI4jQBKVHysXVdMOJRkN8jslsSZUroew3Fnp6khlk+ HkQQnfgSRtrH+HBz8hzueiH7+WF3NOH5XWpHuhK2uDwfxb6MvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+CMxj7oC5TzYmY/4lJxwPrp5eVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGU1NDFhMjktMzQ3Ny0z ODA0LWEyZjUtMzFkNDNlMmUzMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzKcuJ833et6FYReZq+fEEsAhCYy/k9keF1N8sYx1Su3GKorcCxSXga HV1mLRSAGYljBwW7dukiI1EyAMzEsR6F0UOJCopEXpbKHZcuJShgjo0VKU38zJNU 9iOH/5pmu99SmZTb4KVu14UOj2XE7nyipJTFt6wx08Ym5OrIlL7PisIN8fg7L5d1 3uU+BdOUfqNbhTlDYIcJ89lWPIY4VpXy2vuHeOVVBOd00cz7DxqE2a2UkhOzjBDZ J1XdLVqSQ2YmBt0M92RN27EhNVKxAfaRGBGv1rNFFMQmH/yrSlzSVh1nCeVit2QP wFQnjmAwJqGEBOxGmnSJYJXO+NYKK1E= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:34 2025 by rpki-client