$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec313fa4-4901-340f-8959-6e5b204c9f0b.roa File: ec313fa4-4901-340f-8959-6e5b204c9f0b.roa (raw, json) Hash identifier: J2ekXJpM3oAyXfM/JVotKjk4nOtGNfaLnHBCO0VQK60= Subject key identifier: 28:04:7D:C5:DB:E1:18:E7:13:64:7C:A8:AE:6A:0F:B6:73:18:A6:E8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679788B7697255E70B925700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec313fa4-4901-340f-8959-6e5b204c9f0b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.123.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:88:b7:69:72:55:e7:0b:92:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=6a90fea6-d810-4f66-b21c-6e8d788bf3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7b:8b:2c:3b:2e:bd:7e:f3:81:a2:a5:de:d6: 58:9c:2d:e1:d4:bb:bc:86:36:c2:39:6a:46:3a:5c: 35:b8:83:d6:be:0e:88:04:83:cd:ab:37:03:8a:99: cc:8e:ff:f6:73:c6:bd:29:b4:8d:03:da:59:12:69: 72:62:d8:aa:52:02:f2:43:1b:db:fd:97:ba:2e:d8: 2e:db:ef:40:d9:a8:28:dd:bf:ba:dc:b7:a1:28:7d: 91:cc:de:39:9e:b7:65:83:b7:5f:b9:7c:fc:bd:f4: 3f:03:a7:0d:40:ca:41:8b:26:93:ee:4e:30:54:2e: 47:e1:e4:bd:61:4e:c8:1f:61:d3:8f:7e:27:eb:55: 36:7d:50:3f:e6:a6:cb:b7:d4:35:92:2f:86:76:c0: c7:f5:f8:0f:f8:ff:47:c7:1b:4f:ce:66:5f:a5:3c: aa:6a:4b:2a:a0:dc:ef:9a:69:d5:c7:fe:78:b0:f5: 21:07:92:4f:62:69:57:39:db:eb:3d:29:22:e2:d4: b9:37:fb:11:4f:8b:d0:e6:25:ea:11:86:79:89:3b: fe:5c:b7:5e:c7:eb:4b:e6:ef:3c:ab:06:c8:34:fe: 21:8b:7c:51:c3:ec:68:f0:93:26:1c:d8:7a:74:b1: 99:7c:04:f0:7b:8d:e6:d1:6b:6c:de:ed:31:d5:25: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:04:7D:C5:DB:E1:18:E7:13:64:7C:A8:AE:6A:0F:B6:73:18:A6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec313fa4-4901-340f-8959-6e5b204c9f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8c:f6:05:92:93:4f:19:fb:be:c5:01:c5:46:49:cd:c0:ec: 78:16:0a:d2:74:2a:d2:5e:24:20:0d:03:ba:e5:9a:4a:e7:fa: 95:94:f5:bf:18:73:eb:68:ad:60:fd:40:d4:9f:e3:b3:43:89: 08:20:6b:e9:06:24:7d:b7:10:a6:30:69:b7:84:8c:65:a8:c5: 56:98:ff:52:0b:06:31:36:f8:77:98:eb:3e:a8:f2:ba:93:0a: ea:2b:71:11:cc:a4:1b:64:e1:22:15:e4:3a:5e:23:cd:08:75: 64:ef:13:f3:5b:a5:9b:b7:7e:3a:35:b4:5e:cc:b7:d0:9f:33: 8e:13:c5:6a:3f:b7:cc:fa:11:ed:6b:e1:9d:16:45:59:c8:57: 78:b5:00:41:64:99:c8:8d:ac:fd:8d:a0:70:03:ff:65:10:de: 72:78:aa:a9:42:c3:6e:bd:3b:af:14:bd:dc:65:99:d6:2f:a3: 4b:99:d4:e3:87:b6:74:39:a3:bd:f4:56:11:58:3f:8f:1b:fd: 0d:e0:65:c1:e8:7a:4e:72:53:cc:dc:fd:f8:d9:4b:c7:44:c6: 21:95:51:b2:bd:1f:5e:95:be:22:8f:c5:eb:a1:71:2a:88:b8: b3:fb:53:8b:2c:5c:6d:4a:4c:2f:08:23:63:28:4c:fc:06:1f: dd:06:eb:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4i3aXJV5wuSVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NmE5MGZlYTYtZDgxMC00ZjY2LWIyMWMtNmU4ZDc4OGJmM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXuLLDsuvX7zgaKl3tZYnC3h1Lu8hjbCOWpG Olw1uIPWvg6IBIPNqzcDipnMjv/2c8a9KbSNA9pZEmlyYtiqUgLyQxvb/Ze6Ltgu 2+9A2ago3b+63LehKH2RzN45nrdlg7dfuXz8vfQ/A6cNQMpBiyaT7k4wVC5H4eS9 YU7IH2HTj34n61U2fVA/5qbLt9Q1ki+GdsDH9fgP+P9HxxtPzmZfpTyqaksqoNzv mmnVx/54sPUhB5JPYmlXOdvrPSki4tS5N/sRT4vQ5iXqEYZ5iTv+XLdex+tL5u88 qwbINP4hi3xRw+xo8JMmHNh6dLGZfATwe43m0Wts3u0x1SXQJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgEfcXb4RjnE2R8qK5qD7ZzGKboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWMzMTNmYTQtNDkwMS0z NDBmLTg5NTktNmU1YjIwNGM5ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWM9gWSk08Z+77FAcVGSc3A7HgWCtJ0KtJeJCANA7rlmkrn+pWU9b8Y c+torWD9QNSf47NDiQgga+kGJH23EKYwabeEjGWoxVaY/1ILBjE2+HeY6z6o8rqT CuorcRHMpBtk4SIV5DpeI80IdWTvE/NbpZu3fjo1tF7Mt9CfM44TxWo/t8z6Ee1r 4Z0WRVnIV3i1AEFkmciNrP2NoHAD/2UQ3nJ4qqlCw269O68UvdxlmdYvo0uZ1OOH tnQ5o730VhFYP48b/Q3gZcHoek5yU8zc/fjZS8dExiGVUbK9H16VviKPxeuhcSqI uLP7U4ssXG1KTC8II2MoTPwGH90G61Q= -----END CERTIFICATE-----Generated at Mon Oct 20 02:08:10 2025 by rpki-client