$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df824a70-5aa0-39db-93e8-8a1764cf375b.roa File: df824a70-5aa0-39db-93e8-8a1764cf375b.roa (raw, json) Hash identifier: wRbZzB4peOMJaj18wz+Gjn1jwB0Rw0wzYo6kKIFMKlQ= Subject key identifier: AE:22:0C:38:EA:41:BA:2C:F0:23:2B:E3:CB:49:1A:25:79:B0:EA:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67979AD25687FB9708790488 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df824a70-5aa0-39db-93e8-8a1764cf375b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.147.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:9a:d2:56:87:fb:97:08:79:04:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=7a353e16-04d1-48d2-96e5-4e46034fe555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ad:1e:c6:e5:3b:07:55:11:9b:49:5d:5e:d4: 28:73:94:84:be:03:ab:f2:e9:6e:32:d7:52:91:64: 7e:0a:0d:03:37:e9:fc:e3:5b:40:cb:d2:36:30:3b: ee:07:77:2a:b1:aa:b6:8d:d4:66:39:7e:74:64:37: ed:c9:07:4e:2e:58:52:01:7a:e7:50:d7:64:2b:b4: 97:48:3b:bd:45:32:99:d7:b6:5c:e7:26:3f:79:e6: b0:f5:b3:2d:ec:7d:f1:48:cc:d3:f5:a4:32:8f:ed: 88:69:c5:8e:e9:b3:15:a5:43:0b:20:79:84:d8:d1: 68:f8:2f:f2:1c:d2:81:92:61:ef:30:6e:e0:24:ef: fb:5a:27:60:cf:8e:12:ec:35:89:ee:f3:21:91:21: eb:f4:93:d2:d0:56:ab:31:8a:d1:c7:29:7a:72:1b: 71:19:20:12:74:2d:e9:d7:19:1a:ba:d9:23:b8:a5: d2:18:a9:b9:75:52:26:5a:b8:8b:dd:79:88:a8:b3: e6:76:9f:53:f9:17:97:62:63:7d:db:58:f3:20:d8: b6:ed:c9:74:36:6b:c7:da:f5:e4:38:c4:be:62:f9: f1:c1:79:b9:27:7a:ed:a0:76:f9:c3:bc:9c:cf:a7: 92:3c:1c:84:ad:cd:40:c3:bb:34:c6:e1:9c:f7:e6: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:22:0C:38:EA:41:BA:2C:F0:23:2B:E3:CB:49:1A:25:79:B0:EA:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df824a70-5aa0-39db-93e8-8a1764cf375b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:59:f9:6d:22:66:d2:79:99:3d:c5:c4:a5:55:b3:f7:b1:57: 0d:3c:ce:9c:e9:ce:a4:a3:29:e6:8f:12:e2:9d:56:f3:2e:b2: 73:6f:d7:66:27:57:1c:3b:87:d8:ad:30:5e:24:22:d6:74:f6: 7b:0f:8e:d5:cd:eb:44:f4:43:9c:83:9d:57:5a:b5:a8:c7:b3: db:89:72:37:6f:73:0c:32:c1:3c:df:d9:ba:92:47:ec:7c:9c: fc:6a:b3:89:8b:ae:43:94:7d:dc:81:51:43:11:31:84:ca:a6: 96:41:98:63:7a:a8:a6:68:97:00:7d:d6:1e:ed:51:7f:9e:91: c5:12:2a:e3:fc:eb:77:2a:ae:99:e0:1f:ca:ab:eb:04:a0:6b: e3:a9:2a:25:c1:ab:71:20:67:62:9c:9f:9e:25:80:b3:55:fc: 9c:97:42:14:b4:72:35:fc:23:5f:46:7e:22:2c:7f:d1:43:28: 27:cc:5a:bd:22:e7:97:95:3a:9b:c0:ee:6b:2d:a4:98:6d:5f: 36:e3:93:a3:b6:8e:9b:5a:34:12:22:b7:5a:bf:2b:68:20:a0: e3:6e:6e:41:c6:af:00:67:96:c8:04:01:f4:6e:4e:d7:6a:b0: d2:55:4f:7e:4d:60:a5:5c:60:ce:29:5d:a5:20:7d:69:70:a0: f2:54:b4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5rSVof7lwh5BIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk N2EzNTNlMTYtMDRkMS00OGQyLTk2ZTUtNGU0NjAzNGZlNTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq0exuU7B1URm0ldXtQoc5SEvgOr8uluMtdS kWR+Cg0DN+n841tAy9I2MDvuB3cqsaq2jdRmOX50ZDftyQdOLlhSAXrnUNdkK7SX SDu9RTKZ17Zc5yY/eeaw9bMt7H3xSMzT9aQyj+2IacWO6bMVpUMLIHmE2NFo+C/y HNKBkmHvMG7gJO/7Widgz44S7DWJ7vMhkSHr9JPS0FarMYrRxyl6chtxGSASdC3p 1xkautkjuKXSGKm5dVImWriL3XmIqLPmdp9T+ReXYmN921jzINi27cl0NmvH2vXk OMS+YvnxwXm5J3rtoHb5w7ycz6eSPByErc1Aw7s0xuGc9+bzEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4iDDjqQbos8CMr48tJGiV5sOpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGY4MjRhNzAtNWFhMC0z OWRiLTkzZTgtOGExNzY0Y2YzNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZZ+W0iZtJ5mT3FxKVVs/exVw08zpzpzqSjKeaPEuKdVvMusnNv12Yn Vxw7h9itMF4kItZ09nsPjtXN60T0Q5yDnVdatajHs9uJcjdvcwwywTzf2bqSR+x8 nPxqs4mLrkOUfdyBUUMRMYTKppZBmGN6qKZolwB91h7tUX+ekcUSKuP863cqrpng H8qr6wSga+OpKiXBq3EgZ2Kcn54lgLNV/JyXQhS0cjX8I19GfiIsf9FDKCfMWr0i 55eVOpvA7mstpJhtXzbjk6O2jptaNBIit1q/K2ggoONubkHGrwBnlsgEAfRuTtdq sNJVT35NYKVcYM4pXaUgfWlwoPJUtLY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:04:08 2025 by rpki-client