$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa File: f11069b8-0d35-380f-acb1-1cd190315ba7.roa (raw, json) Hash identifier: 9PcUqGlrNshwoAvqQBPxwTqAq8A3HWio3d+gbMYBSeU= Subject key identifier: F4:33:FA:B3:13:D9:BB:15:90:A8:2C:7A:94:B9:56:A8:00:21:DA:F4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67979A3DD3257775D8B5F2C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.20.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:9a:3d:d3:25:77:75:d8:b5:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=fb8e4cbe-2bd7-455d-8bdf-647de795e7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:a6:8a:cc:fa:b7:3b:d4:82:d9:52:a6:0e: 60:f0:66:e0:e5:a1:21:f6:49:e3:8f:b0:e7:6a:ad: 67:fb:32:a6:d4:7d:18:89:50:0e:c2:7c:99:7b:12: e3:6a:24:9b:13:09:4b:13:f2:ec:ac:f6:a7:97:da: 09:b7:f5:9a:82:81:f6:07:48:da:89:b2:ef:21:be: 4c:07:49:ba:ef:68:7f:79:3d:dc:f9:ce:7a:c0:bd: 14:6f:18:c7:c9:26:3c:fe:12:29:66:f4:2d:a2:fb: 22:75:84:81:71:ca:41:cf:3b:63:a6:36:1a:de:a6: f6:e9:2b:6e:a5:22:48:c1:f6:53:8d:f6:f7:81:eb: 67:19:00:e5:51:6a:31:39:4f:5b:b6:62:2b:24:4a: cf:ce:0d:c7:cd:be:e1:02:88:cb:1b:8d:3e:66:08: 89:56:c9:42:cc:ee:4e:f8:29:04:cc:14:04:ab:dc: 0c:09:82:26:9c:f7:c4:14:0b:d6:39:05:6b:c9:b2: 1e:76:a9:dd:0f:81:b9:2c:a4:db:4e:58:51:d2:6e: 9b:f0:63:9d:6e:06:5c:31:69:81:00:c6:a9:a8:ee: 6c:73:89:2f:c7:fb:96:b7:ae:63:30:62:ab:d7:8f: 9e:98:33:62:e2:b6:0b:42:52:bf:38:c6:b2:18:d0: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:33:FA:B3:13:D9:BB:15:90:A8:2C:7A:94:B9:56:A8:00:21:DA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.20.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a9:d2:e7:3d:2a:a5:2c:bb:c6:d3:6e:f9:2f:c5:6c:62:b6: 83:17:c3:03:70:41:48:f4:b3:6b:3b:38:6b:00:32:b4:84:11: 83:e0:63:aa:ea:e6:e5:61:1d:7f:3e:bf:7d:6a:39:4d:4d:d7: 50:ed:1d:db:2a:da:c4:46:a4:0b:4f:37:3e:2a:ea:74:4f:79: 6d:53:1e:71:04:e3:4a:1f:f7:c7:fc:c4:48:9f:8c:ee:19:ab: 01:4f:58:a6:10:a1:c8:ab:cb:dc:6f:2c:b1:10:ad:f4:b4:28: 95:b3:68:35:72:3f:c0:82:1e:2f:38:27:c7:aa:44:76:d3:41: e7:13:e8:a2:c1:c0:6a:e9:0e:24:cd:be:75:30:c4:fb:e8:ef: ec:ca:ba:0b:89:5d:b5:66:06:e4:17:14:23:f5:5e:02:27:8d: 70:4c:b4:33:2d:84:2f:3d:fb:26:51:67:18:c2:3a:14:32:3d: cc:0f:38:ba:87:79:50:ea:37:08:11:07:41:d0:b3:c0:65:af: 95:00:79:6f:20:d0:47:c7:20:f9:57:b7:96:16:3a:de:be:12: bb:81:95:a0:7c:32:94:86:ab:cd:02:a2:46:d7:34:26:82:c0: 1b:75:b7:0b:aa:b2:14:66:4a:e9:86:ab:d3:4d:62:a8:a5:47: c8:e0:cb:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5o90yV3ddi18sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmI4ZTRjYmUtMmJkNy00NTVkLThiZGYtNjQ3ZGU3OTVlN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyimmisz6tzvUgtlSpg5g8Gbg5aEh9knjj7Dn aq1n+zKm1H0YiVAOwnyZexLjaiSbEwlLE/LsrPanl9oJt/WagoH2B0jaibLvIb5M B0m672h/eT3c+c56wL0UbxjHySY8/hIpZvQtovsidYSBccpBzztjpjYa3qb26Stu pSJIwfZTjfb3getnGQDlUWoxOU9btmIrJErPzg3Hzb7hAojLG40+ZgiJVslCzO5O +CkEzBQEq9wMCYImnPfEFAvWOQVrybIedqndD4G5LKTbTlhR0m6b8GOdbgZcMWmB AMapqO5sc4kvx/uWt65jMGKr14+emDNi4rYLQlK/OMayGNCquwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQz+rMT2bsVkKgsepS5VqgAIdr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjExMDY5YjgtMGQzNS0z ODBmLWFjYjEtMWNkMTkwMzE1YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6p0uc9KqUsu8bTbvkvxWxitoMXwwNwQUj0s2s7OGsAMrSEEYPgY6rq 5uVhHX8+v31qOU1N11DtHdsq2sRGpAtPNz4q6nRPeW1THnEE40of98f8xEifjO4Z qwFPWKYQociry9xvLLEQrfS0KJWzaDVyP8CCHi84J8eqRHbTQecT6KLBwGrpDiTN vnUwxPvo7+zKuguJXbVmBuQXFCP1XgInjXBMtDMthC89+yZRZxjCOhQyPcwPOLqH eVDqNwgRB0HQs8Blr5UAeW8g0EfHIPlXt5YWOt6+EruBlaB8MpSGq80CokbXNCaC wBt1twuqshRmSumGq9NNYqilR8jgy4c= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:47 2025 by rpki-client