$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f779fd-3c12-3d0c-9769-5d2a7e4932be.roa File: e5f779fd-3c12-3d0c-9769-5d2a7e4932be.roa (raw, json) Hash identifier: /DP25fMUkt0ESfKC9TuU/J6x5Eg7Olu8MnXFvMSEAQI= Subject key identifier: DB:F4:13:6A:D7:7C:1C:F8:AF:D3:42:41:E4:32:07:B1:85:3D:52:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797BFD1635D22E86EB76F20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f779fd-3c12-3d0c-9769-5d2a7e4932be.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.141.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:bf:d1:63:5d:22:e8:6e:b7:6f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d11ec555-88d5-44e3-9f48-f71a40cb2ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d5:fd:68:c7:fe:ed:1e:bb:47:37:ec:fc:17: 1d:d6:cd:2a:1d:3d:03:8c:03:34:18:01:35:45:2e: f6:84:a5:0e:6b:a0:a4:12:f3:63:93:ac:98:20:9f: 17:ef:0d:c0:4d:3f:e2:6b:f2:b6:a7:51:cf:35:ed: ae:ac:9f:d9:34:64:17:a2:dd:dd:c3:f1:31:f2:21: bb:8a:23:b1:c0:aa:ec:82:f8:bc:8f:b8:34:21:5f: 48:5b:22:77:44:ac:c4:d5:3b:6a:ad:80:60:ac:cf: a0:e6:97:04:f1:c9:50:a4:7a:f9:b6:56:41:77:bc: c0:c2:fa:7e:36:36:25:ce:7d:24:28:87:c2:83:c1: 60:ed:6f:74:60:6d:4e:7b:10:eb:27:9a:36:62:af: 12:08:8b:22:04:48:4a:75:ce:d7:d2:bd:b2:7f:db: ab:64:9e:b7:9f:5b:ef:02:be:f6:f3:77:ef:33:22: e2:42:02:83:12:29:2a:95:f7:b6:af:7d:0a:30:d1: 00:97:c0:d3:0a:32:3e:23:18:b3:6a:26:79:ec:07: bf:7a:c9:44:a1:b4:84:64:f7:81:a8:4d:28:0d:09: 62:6e:c3:41:08:d7:da:28:27:16:26:d3:59:8d:4c: ec:a9:cc:23:a5:f7:87:d0:64:3b:b0:b8:d2:38:29: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F4:13:6A:D7:7C:1C:F8:AF:D3:42:41:E4:32:07:B1:85:3D:52:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f779fd-3c12-3d0c-9769-5d2a7e4932be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.141.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:57:b9:c2:95:8e:28:46:75:45:31:9d:d5:75:65:2b:92:b2: e6:5f:b5:00:19:79:d2:cd:56:3b:89:80:6d:bc:b4:f0:da:f3: 3e:6e:de:48:68:4b:43:a7:10:cf:87:90:c5:30:da:d2:0c:6e: 0e:a7:72:4a:44:d2:80:ae:89:2a:c1:9e:c0:dc:28:9f:e2:30: 90:a3:43:87:09:1f:db:9c:d5:fc:62:b5:8a:7f:f2:ad:54:ae: cd:0a:a4:28:c4:74:9f:33:fc:30:40:5f:80:a6:d8:44:a5:2c: ad:d7:ba:4e:f4:2e:a3:7d:41:84:a4:81:96:0a:0e:64:31:8c: 85:50:ca:8b:cd:5f:59:7a:ec:76:fd:ba:83:02:72:c5:3e:42: 57:74:1c:92:66:a6:f6:fa:6d:48:3b:04:b0:d1:4e:56:a4:64: d0:82:1f:95:ae:00:8f:bf:b8:9a:ea:55:54:7b:c6:49:98:64: fa:c0:94:16:e0:fd:8d:e9:9b:94:bf:a4:5b:b8:9b:8a:5c:2c: 8b:b2:d7:f9:a7:f2:09:68:16:ee:2b:16:1a:b8:cd:f7:c4:cd: f8:cf:64:e4:f4:29:fd:80:6e:ea:15:4b:31:95:9f:01:bd:a8: 2b:d4:52:cc:39:4b:b5:fc:b6:65:f4:77:96:0b:17:a3:2c:d0: a3:8d:72:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7/RY10i6G63byAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDExZWM1NTUtODhkNS00NGUzLTlmNDgtZjcxYTQwY2IyYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNX9aMf+7R67Rzfs/Bcd1s0qHT0DjAM0GAE1 RS72hKUOa6CkEvNjk6yYIJ8X7w3ATT/ia/K2p1HPNe2urJ/ZNGQXot3dw/Ex8iG7 iiOxwKrsgvi8j7g0IV9IWyJ3RKzE1TtqrYBgrM+g5pcE8clQpHr5tlZBd7zAwvp+ NjYlzn0kKIfCg8Fg7W90YG1OexDrJ5o2Yq8SCIsiBEhKdc7X0r2yf9urZJ63n1vv Ar7283fvMyLiQgKDEikqlfe2r30KMNEAl8DTCjI+IxizaiZ57Ae/eslEobSEZPeB qE0oDQlibsNBCNfaKCcWJtNZjUzsqcwjpfeH0GQ7sLjSOClqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNv0E2rXfBz4r9NCQeQyB7GFPVLCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTVmNzc5ZmQtM2MxMi0z ZDBjLTk3NjktNWQyYTdlNDkzMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1XucKVjihGdUUxndV1ZSuSsuZftQAZedLNVjuJgG28tPDa8z5u3kho S0OnEM+HkMUw2tIMbg6nckpE0oCuiSrBnsDcKJ/iMJCjQ4cJH9uc1fxitYp/8q1U rs0KpCjEdJ8z/DBAX4Cm2ESlLK3Xuk70LqN9QYSkgZYKDmQxjIVQyovNX1l67Hb9 uoMCcsU+Qld0HJJmpvb6bUg7BLDRTlakZNCCH5WuAI+/uJrqVVR7xkmYZPrAlBbg /Y3pm5S/pFu4m4pcLIuy1/mn8gloFu4rFhq4zffEzfjPZOT0Kf2AbuoVSzGVnwG9 qCvUUsw5S7X8tmX0d5YLF6Ms0KONcgE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:34:24 2025 by rpki-client