$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9253212-b962-304d-bf8e-ea550aaab4fd.roa File: e9253212-b962-304d-bf8e-ea550aaab4fd.roa (raw, json) Hash identifier: ukmNtKA38h2TrAIhV0e7csycMM1zJego0uEaHJVRgh8= Subject key identifier: F3:74:AA:A2:D3:E0:44:AB:B8:D3:D3:45:74:DD:AA:25:F4:AD:74:C7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD6AF248B40DB555564EC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9253212-b962-304d-bf8e-ea550aaab4fd.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.105.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6a:f2:48:b4:0d:b5:55:56:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=25b0a9da-b3ee-4498-8a39-9edd90ba5e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:9a:02:08:b6:8a:95:8d:d3:2a:e2:ae:c0: a2:85:9a:16:67:07:c0:90:13:0a:6b:d9:db:c2:15: 9c:b7:cb:16:78:e9:0a:af:2c:64:a2:c5:29:1d:b2: b6:37:2a:09:a4:28:e5:83:f9:5c:de:95:b3:da:02: 4a:c2:e7:a4:63:bc:47:56:e4:f5:6a:d0:18:0a:c4: 08:fa:8f:ed:5e:8a:e7:c7:6c:63:2b:34:cd:ba:a2: 89:75:48:82:7c:75:58:aa:2b:52:ce:4f:b7:9e:9c: ce:29:d1:a6:e0:95:12:1d:cf:9c:6e:50:bb:dd:9b: d6:2a:77:71:38:19:7b:c9:13:1a:f0:6e:af:22:d6: 10:6c:09:95:6d:fb:ea:8e:40:f7:48:aa:e7:07:8d: 2c:7f:ea:4c:40:47:96:04:de:6e:0f:6e:2f:d8:e6: 74:b7:8a:3e:6e:b3:b9:ed:95:c7:a5:9c:c7:e7:03: a1:fc:bb:53:06:22:e4:f1:25:d7:c4:07:8b:48:55: 36:66:79:00:51:19:e6:c5:dd:c5:9a:28:7e:04:a4: 7a:8d:be:90:89:02:73:06:26:01:b8:02:c6:f5:a6: 66:82:85:92:4d:32:35:e5:f2:c5:ff:61:09:54:12: fe:d8:d9:88:ce:1a:93:62:f5:a0:30:86:7b:83:cb: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:74:AA:A2:D3:E0:44:AB:B8:D3:D3:45:74:DD:AA:25:F4:AD:74:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9253212-b962-304d-bf8e-ea550aaab4fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.105.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:76:be:df:b1:84:84:e4:65:83:1b:7d:89:6f:d2:ad:3c:48: b1:18:f0:65:ce:28:ec:67:52:70:8d:be:5b:c4:50:6f:55:d4: 35:50:83:e0:a1:23:da:73:26:94:16:71:b9:8d:02:95:6c:ab: 21:15:53:a5:1b:8a:ad:7c:c4:f6:b4:62:cb:f0:db:59:51:6d: f5:36:ea:16:cf:f7:ad:bf:3d:73:88:2e:a1:eb:d9:ab:4a:f1: 98:64:01:57:e2:f2:ae:da:82:8e:aa:b6:91:0b:bd:11:80:27: e9:f2:32:24:93:15:8b:39:d3:71:4b:f5:d0:66:5f:49:fe:88: a4:89:12:6c:bd:22:d8:6c:94:bf:d8:f5:4c:52:10:23:04:a6: 18:13:dc:62:7b:55:93:ba:5b:00:5f:1b:d1:f7:d2:5b:17:e8: 65:fb:8e:75:58:31:9e:15:ed:2f:b6:14:c0:30:76:15:d3:d3: 1b:c8:ad:cd:df:8d:82:c5:10:f8:85:2b:c7:67:d7:e0:46:93: 72:51:b4:81:8f:0c:b6:d9:52:0a:c3:e7:d3:e1:e2:92:93:bf: 45:77:52:0d:cb:9e:eb:41:b3:fa:3c:7d:da:40:78:6c:d2:34: 52:cb:09:cb:59:d2:8b:be:4b:09:49:4c:c5:cc:f8:71:f7:74: e1:c0:ee:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWrySLQNtVVWTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjViMGE5ZGEtYjNlZS00NDk4LThhMzktOWVkZDkwYmE1ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZqaAgi2ipWN0yrirsCihZoWZwfAkBMKa9nb whWct8sWeOkKryxkosUpHbK2NyoJpCjlg/lc3pWz2gJKwuekY7xHVuT1atAYCsQI +o/tXornx2xjKzTNuqKJdUiCfHVYqitSzk+3npzOKdGm4JUSHc+cblC73ZvWKndx OBl7yRMa8G6vItYQbAmVbfvqjkD3SKrnB40sf+pMQEeWBN5uD24v2OZ0t4o+brO5 7ZXHpZzH5wOh/LtTBiLk8SXXxAeLSFU2ZnkAURnmxd3Fmih+BKR6jb6QiQJzBiYB uALG9aZmgoWSTTI15fLF/2EJVBL+2NmIzhqTYvWgMIZ7g8sh5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN0qqLT4ESruNPTRXTdqiX0rXTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTkyNTMyMTItYjk2Mi0z MDRkLWJmOGUtZWE1NTBhYWFiNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB2vt+xhITkZYMbfYlv0q08SLEY8GXOKOxnUnCNvlvEUG9V1DVQg+Ch I9pzJpQWcbmNApVsqyEVU6Ubiq18xPa0Ysvw21lRbfU26hbP962/PXOILqHr2atK 8ZhkAVfi8q7ago6qtpELvRGAJ+nyMiSTFYs503FL9dBmX0n+iKSJEmy9IthslL/Y 9UxSECMEphgT3GJ7VZO6WwBfG9H30lsX6GX7jnVYMZ4V7S+2FMAwdhXT0xvIrc3f jYLFEPiFK8dn1+BGk3JRtIGPDLbZUgrD59Ph4pKTv0V3Ug3LnutBs/o8fdpAeGzS NFLLCctZ0ou+SwlJTMXM+HH3dOHA7rM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:50 2025 by rpki-client