$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f12fbe83-96b6-3cb0-8a5a-314f9f6013c0.roa File: f12fbe83-96b6-3cb0-8a5a-314f9f6013c0.roa (raw, json) Hash identifier: Z4GenlDRhNVbtxcazLcp2VjtsoMDZ+APTYim3GE60To= Subject key identifier: AD:38:78:EE:E8:44:85:C8:4F:8D:AC:AA:89:0B:B4:C0:D4:A0:CE:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67978270A2CE10274EE9ED00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f12fbe83-96b6-3cb0-8a5a-314f9f6013c0.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.151.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:82:70:a2:ce:10:27:4e:e9:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3eb57310-f086-4529-8cf5-538679ed976e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4f:23:85:0c:53:e4:da:6a:9d:a5:11:fc:84: 42:36:a0:95:59:64:cc:4f:73:4c:79:09:20:82:fa: 8c:b2:5a:24:ec:ed:66:8c:0a:3e:15:73:9a:6a:a6: 18:3f:d6:86:7f:17:90:f3:dc:76:55:50:52:2b:82: ab:b4:95:16:dd:a4:32:e0:69:ce:81:b4:ad:32:23: 8f:31:c5:d3:08:45:19:88:97:06:3d:43:52:2e:76: a0:54:1d:9c:28:1e:f2:d4:c9:db:82:05:90:f5:70: a2:93:b9:d8:6e:35:6f:0f:57:8c:3a:c2:96:ae:1e: 96:65:8f:d9:20:73:68:9f:10:89:43:87:78:91:0b: 02:71:b5:f9:13:23:7a:7b:90:7f:80:9b:64:39:0e: 50:f2:6f:8a:c7:2a:df:32:f3:41:aa:d4:58:a2:b6: 37:0d:1b:5d:6d:b2:be:df:f9:98:45:69:22:42:ee: f0:4e:28:c9:58:d6:09:8b:e1:32:57:de:a7:5c:5c: 34:62:1e:b3:ff:34:bc:e8:36:d1:42:61:6d:4a:9d: cf:a2:b5:f2:fb:47:99:a0:f0:6f:30:02:2c:a4:de: c5:00:a2:4d:78:36:e9:f4:f9:95:4b:cc:85:b3:8e: 25:77:65:83:db:76:ce:27:89:55:40:b3:99:31:d1: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:38:78:EE:E8:44:85:C8:4F:8D:AC:AA:89:0B:B4:C0:D4:A0:CE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f12fbe83-96b6-3cb0-8a5a-314f9f6013c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.151.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:8a:35:dc:07:8b:30:db:ee:72:31:1b:7c:93:5d:6e:ef:77: f6:95:5d:5b:b9:45:38:4a:71:5f:7c:ad:f6:30:f2:19:3d:45: 7e:a9:cf:5e:4d:7b:6a:32:74:c8:a0:7a:30:62:bc:4c:dd:29: b0:dd:83:d6:ed:67:05:a3:66:ad:13:f5:0a:62:a3:2d:55:7d: 86:9d:90:8e:9f:f6:d8:21:24:15:3e:22:88:a3:e8:97:3a:4c: 91:e3:d2:29:d1:2e:38:22:23:1e:40:cb:fd:05:c8:32:5f:41: 4e:b2:05:98:52:23:24:2d:7b:b9:ac:a7:ea:39:ca:73:f3:cd: 34:10:a9:d1:6b:4b:3b:2c:ac:a8:9e:b6:31:65:b8:a9:4a:f4: bf:41:bd:20:df:2a:84:9d:c4:7a:05:df:1a:75:60:bf:89:3b: 3c:20:50:e3:ad:68:fc:3f:d7:c3:fd:1b:66:5d:6e:0b:ba:5b: 0c:cf:34:10:32:16:7b:70:d9:5c:9f:3c:4d:08:af:d6:c6:32: cc:d7:2b:a1:64:8b:96:41:0a:64:dc:25:78:1d:bd:10:69:41: e7:b1:97:80:4f:d5:71:03:71:0a:35:ac:63:b8:7a:64:61:c7: 1b:57:45:0d:20:ec:83:1d:70:90:cd:8d:5d:ea:7c:a7:d0:81: f3:6f:0a:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4Jwos4QJ07p7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2ViNTczMTAtZjA4Ni00NTI5LThjZjUtNTM4Njc5ZWQ5NzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU8jhQxT5NpqnaUR/IRCNqCVWWTMT3NMeQkg gvqMslok7O1mjAo+FXOaaqYYP9aGfxeQ89x2VVBSK4KrtJUW3aQy4GnOgbStMiOP McXTCEUZiJcGPUNSLnagVB2cKB7y1MnbggWQ9XCik7nYbjVvD1eMOsKWrh6WZY/Z IHNonxCJQ4d4kQsCcbX5EyN6e5B/gJtkOQ5Q8m+KxyrfMvNBqtRYorY3DRtdbbK+ 3/mYRWkiQu7wTijJWNYJi+EyV96nXFw0Yh6z/zS86DbRQmFtSp3PorXy+0eZoPBv MAIspN7FAKJNeDbp9PmVS8yFs44ld2WD23bOJ4lVQLOZMdF/lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK04eO7oRIXIT42sqokLtMDUoM4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjEyZmJlODMtOTZiNi0z Y2IwLThhNWEtMzE0ZjlmNjAxM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaKNdwHizDb7nIxG3yTXW7vd/aVXVu5RThKcV98rfYw8hk9RX6pz15N e2oydMigejBivEzdKbDdg9btZwWjZq0T9Qpioy1VfYadkI6f9tghJBU+Ioij6Jc6 TJHj0inRLjgiIx5Ay/0FyDJfQU6yBZhSIyQte7msp+o5ynPzzTQQqdFrSzssrKie tjFluKlK9L9BvSDfKoSdxHoF3xp1YL+JOzwgUOOtaPw/18P9G2Zdbgu6WwzPNBAy Fntw2VyfPE0Ir9bGMszXK6Fki5ZBCmTcJXgdvRBpQeexl4BP1XEDcQo1rGO4emRh xxtXRQ0g7IMdcJDNjV3qfKfQgfNvCow= -----END CERTIFICATE-----Generated at Mon Oct 20 07:36:14 2025 by rpki-client