$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9b72023-681d-3e7e-bd4e-e675a1f89ed4.roa File: e9b72023-681d-3e7e-bd4e-e675a1f89ed4.roa (raw, json) Hash identifier: sN+BCKIYSmDEehmYjz9udFLmgARYk1mC4Lk0TXK+CiM= Subject key identifier: CB:A1:34:85:A0:93:25:66:E3:64:C4:55:22:DC:11:00:FA:CF:C3:44 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797AE9316DF5B69DD468C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9b72023-681d-3e7e-bd4e-e675a1f89ed4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.68.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ae:93:16:df:5b:69:dd:46:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=26f6dabf-f5cf-4c0c-ab1e-2d6e2c691827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:9a:dc:e5:a3:0b:1e:65:ca:0a:75:8b:40: d0:b4:6a:a1:24:d7:7e:14:1f:47:e7:11:2d:ac:92: c8:0a:00:82:12:b2:89:cb:48:20:1d:3c:47:d8:c4: b6:8f:2a:c8:36:7d:92:68:45:a7:34:86:94:68:d5: 7a:45:cb:61:fd:33:7d:c6:fc:2e:25:98:60:05:46: a4:73:83:53:75:ac:56:b6:4c:dd:39:8d:03:b7:fa: be:a5:fb:52:a5:67:c6:5b:0d:1b:57:ff:a0:c4:1f: 50:34:de:50:14:d2:69:7c:6c:28:b8:6a:38:64:96: bf:fe:46:2f:6f:35:80:01:5d:5f:ea:6a:ae:e6:40: 7f:e8:42:ec:be:fb:7f:dd:9d:26:2d:3e:ec:17:2b: 7e:e1:5f:7e:1f:20:c2:69:93:aa:66:93:a7:bc:c5: 5c:9a:ec:1d:2e:5b:df:fb:b3:a7:db:d5:5f:0c:cf: f3:d3:c2:04:d0:46:3f:76:2d:e5:bc:a3:2d:50:9c: 17:69:7c:b0:46:f2:6b:ba:30:2c:0c:49:39:24:a1: cc:1e:03:e0:26:24:3d:3d:fb:d9:e2:29:64:21:6d: 5c:47:12:88:6c:77:2d:d1:dc:14:c5:a8:bd:62:31: 7d:7a:c3:3a:b0:d1:0e:23:1c:89:34:80:86:34:47: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A1:34:85:A0:93:25:66:E3:64:C4:55:22:DC:11:00:FA:CF:C3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9b72023-681d-3e7e-bd4e-e675a1f89ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a7:5d:dd:ae:f6:14:81:4d:71:3b:71:b7:63:fe:b0:10:47: b9:33:cb:29:25:5d:d8:a9:43:05:c7:a5:5d:c4:ca:71:b3:0c: 86:92:93:7a:8a:36:98:67:92:76:1d:f9:c2:19:30:30:20:6d: c1:47:db:70:fe:7b:c6:06:63:9b:6b:b2:97:33:7f:f4:4c:48: 6c:3c:61:94:a8:65:b3:b7:82:a9:1f:1b:41:70:e7:08:59:0e: ff:e7:ba:cc:d2:b1:05:71:32:2d:11:6e:9e:46:52:89:14:8b: 66:18:2f:09:41:11:41:70:92:fa:81:14:8f:25:96:f4:63:b0: c0:94:04:09:b7:d9:68:36:b8:01:2b:7b:db:5a:2f:ce:7e:1f: d9:06:ad:af:7f:4b:03:1f:f6:af:df:96:09:6b:7d:ff:ed:66: 2d:34:48:04:6e:49:5c:18:9a:9c:93:34:f8:80:98:c5:4f:48: e1:7f:0b:21:4f:ff:be:8c:bf:17:c7:e0:4e:dc:bc:9c:27:1c: 07:54:3e:b3:4d:9d:3c:e0:05:ab:44:77:ee:9b:e5:fa:6a:a2: 27:7f:dc:8a:2a:88:ba:f8:2b:e0:6e:32:44:30:5a:27:36:86: d8:1c:f1:8b:ca:99:2c:63:23:9e:af:c2:c7:2c:7c:ca:f0:89: b6:ea:bd:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl66TFt9bad1GjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MjZmNmRhYmYtZjVjZi00YzBjLWFiMWUtMmQ2ZTJjNjkxODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKKa3OWjCx5lygp1i0DQtGqhJNd+FB9H5xEt rJLICgCCErKJy0ggHTxH2MS2jyrINn2SaEWnNIaUaNV6Rcth/TN9xvwuJZhgBUak c4NTdaxWtkzdOY0Dt/q+pftSpWfGWw0bV/+gxB9QNN5QFNJpfGwouGo4ZJa//kYv bzWAAV1f6mqu5kB/6ELsvvt/3Z0mLT7sFyt+4V9+HyDCaZOqZpOnvMVcmuwdLlvf +7On29VfDM/z08IE0EY/di3lvKMtUJwXaXywRvJrujAsDEk5JKHMHgPgJiQ9PfvZ 4ilkIW1cRxKIbHct0dwUxai9YjF9esM6sNEOIxyJNICGNEdzywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuhNIWgkyVm42TEVSLcEQD6z8NEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTliNzIwMjMtNjgxZC0z ZTdlLWJkNGUtZTY3NWExZjg5ZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKnXd2u9hSBTXE7cbdj/rAQR7kzyyklXdipQwXHpV3EynGzDIaSk3qK NphnknYd+cIZMDAgbcFH23D+e8YGY5trspczf/RMSGw8YZSoZbO3gqkfG0Fw5whZ Dv/nuszSsQVxMi0Rbp5GUokUi2YYLwlBEUFwkvqBFI8llvRjsMCUBAm32Wg2uAEr e9taL85+H9kGra9/SwMf9q/flglrff/tZi00SARuSVwYmpyTNPiAmMVPSOF/CyFP /76MvxfH4E7cvJwnHAdUPrNNnTzgBatEd+6b5fpqoid/3IoqiLr4K+BuMkQwWic2 htgc8YvKmSxjI56vwscsfMrwibbqve4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:19 2025 by rpki-client