$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2295f90-4fbf-3d4d-b454-6992830a2568.roa File: f2295f90-4fbf-3d4d-b454-6992830a2568.roa (raw, json) Hash identifier: UF7YC3cNFUtb6ix43dOLuFmAub/d7Z0HLSplP/5cY80= Subject key identifier: D8:00:22:D9:35:A1:0B:98:9B:84:81:17:87:51:7C:21:6C:C8:71:EC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976153CC9F44818BD28400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2295f90-4fbf-3d4d-b454-6992830a2568.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.173.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:61:53:cc:9f:44:81:8b:d2:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=45361653-b27d-4aee-ba5e-6b12f17b32d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:74:82:56:12:20:de:b0:6b:11:10:fc:d3: 90:0b:0d:d1:96:6a:df:17:5e:5a:31:a8:d7:28:f4: f9:18:f2:54:25:28:10:bd:01:fa:6c:15:0d:18:eb: c3:4e:17:8b:a0:d3:ab:78:6d:0b:86:5e:f6:da:e9: ff:b7:8f:e7:0e:0e:bf:52:c0:a3:bd:06:ab:aa:92: fa:05:4d:5c:79:3f:dc:dd:f7:84:e7:37:62:5e:49: db:49:0b:cf:19:c4:70:5d:6a:fe:ae:b6:c2:31:e9: 86:e0:2f:1a:23:81:a2:e4:1d:1f:55:3d:53:14:1f: 39:1c:05:a8:58:4b:c5:86:55:ac:b1:64:13:3c:fb: 35:d5:dc:e4:c4:8b:f5:39:89:45:b4:95:f6:06:1e: ec:24:9a:7f:6e:3c:33:39:43:6b:4c:7f:2f:e1:2b: 46:63:72:17:70:d9:7b:26:84:c8:b9:7e:f4:81:4d: 11:57:b7:fb:19:9d:36:21:d5:c1:b1:b4:1d:74:22: 84:77:ba:0c:36:fa:0f:5f:20:d7:e2:50:67:cd:90: 6d:b9:97:de:a5:3a:0e:93:2d:a1:d3:bb:5a:ce:64: 7d:83:b1:dc:03:37:6d:4c:2e:be:9c:4d:2b:fb:6f: 80:15:24:f5:68:5a:de:80:ea:0e:09:55:c7:0e:5b: 96:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:00:22:D9:35:A1:0B:98:9B:84:81:17:87:51:7C:21:6C:C8:71:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2295f90-4fbf-3d4d-b454-6992830a2568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.173.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:bf:35:df:de:dd:a9:40:53:c7:49:44:09:19:43:95:33:f9: 45:96:c9:db:14:3e:6d:80:42:e4:b4:37:60:e4:b2:be:47:b9: 5c:94:5e:32:c9:0b:65:fc:71:28:39:a5:91:ec:bf:ea:f3:fc: 8d:4b:d0:b0:a6:6c:c5:da:a6:fa:e1:fb:ab:7e:ee:54:2b:fc: 13:a2:01:9c:ad:b2:7b:df:11:9b:0b:e0:ef:be:74:89:d2:c6: 6d:ff:17:85:a4:f0:b7:e3:b0:5a:b5:3b:69:11:4b:2c:99:ed: 71:19:2b:84:3c:fe:7a:41:55:52:e2:32:f9:b5:36:df:25:33: 14:93:46:e1:96:a6:f4:5b:92:83:f7:5d:f8:f6:f6:24:e8:56: 0f:2b:37:28:3d:1d:0e:a7:2c:c2:26:12:0d:39:87:91:f1:f0: 1d:a5:2a:c2:76:f7:fd:07:77:8c:13:db:c3:1d:49:c9:22:31: e4:9e:60:31:57:96:1f:cf:b6:47:8d:f3:da:ef:8d:a8:31:22: 40:bc:4c:db:df:c5:22:ca:62:e3:2c:bf:4e:b0:dd:d8:fc:d5: a2:0f:56:13:aa:e2:c9:94:bd:5b:bc:39:bf:28:d1:23:25:4c: 10:56:78:5a:7e:7b:67:3a:cf:e5:32:25:d2:99:68:2a:6f:ec: 12:9a:83:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2FTzJ9EgYvShAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDUzNjE2NTMtYjI3ZC00YWVlLWJhNWUtNmIxMmYxN2IzMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVZ0glYSIN6waxEQ/NOQCw3RlmrfF15aMajX KPT5GPJUJSgQvQH6bBUNGOvDTheLoNOreG0Lhl722un/t4/nDg6/UsCjvQarqpL6 BU1ceT/c3feE5zdiXknbSQvPGcRwXWr+rrbCMemG4C8aI4Gi5B0fVT1TFB85HAWo WEvFhlWssWQTPPs11dzkxIv1OYlFtJX2Bh7sJJp/bjwzOUNrTH8v4StGY3IXcNl7 JoTIuX70gU0RV7f7GZ02IdXBsbQddCKEd7oMNvoPXyDX4lBnzZBtuZfepToOky2h 07tazmR9g7HcAzdtTC6+nE0r+2+AFST1aFregOoOCVXHDluWRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgAItk1oQuYm4SBF4dRfCFsyHHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjIyOTVmOTAtNGZiZi0z ZDRkLWI0NTQtNjk5MjgzMGEyNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIq2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm/Nd/e3alAU8dJRAkZQ5Uz+UWWydsUPm2AQuS0N2Dksr5HuVyUXjLJ C2X8cSg5pZHsv+rz/I1L0LCmbMXapvrh+6t+7lQr/BOiAZytsnvfEZsL4O++dInS xm3/F4Wk8LfjsFq1O2kRSyyZ7XEZK4Q8/npBVVLiMvm1Nt8lMxSTRuGWpvRbkoP3 Xfj29iToVg8rNyg9HQ6nLMImEg05h5Hx8B2lKsJ29/0Hd4wT28MdSckiMeSeYDFX lh/PtkeN89rvjagxIkC8TNvfxSLKYuMsv06w3dj81aIPVhOq4smUvVu8Ob8o0SMl TBBWeFp+e2c6z+UyJdKZaCpv7BKag5w= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:57 2025 by rpki-client