$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f86cf902-bfe8-3a7f-a7bf-1cc9bb80705d.roa File: f86cf902-bfe8-3a7f-a7bf-1cc9bb80705d.roa (raw, json) Hash identifier: z41VUdGuo9SVhwI8iu9qvkTaNJ+pc4he5vJ6qgADkmA= Subject key identifier: BE:9A:52:C5:5D:D6:51:BA:86:4D:7E:5A:E5:0E:90:D6:96:73:3E:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67977F332B979D30DFD3A0B0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f86cf902-bfe8-3a7f-a7bf-1cc9bb80705d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.4.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:7f:33:2b:97:9d:30:df:d3:a0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=06501282-99da-436f-8be3-450c6c699880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:ba:ea:9e:8c:a0:db:20:66:7a:d8:32:aa: 71:b6:a5:81:8e:38:6d:ab:17:01:3b:7f:3c:36:f6: 89:af:dd:ad:7c:b7:94:f7:41:50:33:8f:bd:1d:ee: 72:e0:06:90:16:c8:a6:84:2d:2f:5d:9f:71:49:52: bc:bc:d7:43:d6:77:ac:46:2f:6f:11:a9:00:75:a4: 85:ce:81:57:f2:d9:38:22:20:44:e9:02:d2:fb:b0: 1c:47:fa:95:72:5a:99:18:1b:7b:4e:cb:83:81:0e: 6d:c8:60:a7:4c:fe:bc:f9:4f:17:1a:06:eb:c2:df: 1d:a9:f4:ae:80:7d:53:34:d5:90:81:ec:cc:54:74: 95:47:a0:93:6b:1f:81:cf:f7:61:6f:0b:74:55:78: ac:e9:83:2e:f7:ee:3a:dc:2a:bb:8b:5f:08:a9:1e: 3f:cf:24:fe:b8:6e:25:08:45:0d:e0:ea:d2:ee:bb: 6a:e0:8d:ff:cb:a4:30:23:48:e9:b3:1e:79:00:b9: 90:ed:fe:84:db:09:6d:81:98:75:d4:8a:0f:7a:c2: 41:65:36:27:13:d7:4f:76:71:b0:d6:95:22:9d:41: 90:5c:47:e9:ae:93:e8:8f:f6:e7:1b:87:1d:39:4c: ce:d6:b7:03:29:38:b0:90:08:a2:f7:81:c8:82:aa: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9A:52:C5:5D:D6:51:BA:86:4D:7E:5A:E5:0E:90:D6:96:73:3E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f86cf902-bfe8-3a7f-a7bf-1cc9bb80705d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a6:03:94:db:a3:5d:e3:7a:91:6a:aa:4f:bf:00:de:5e:2e: 30:18:cb:47:b5:80:9d:e7:5c:5b:c3:c4:55:79:f8:6c:49:6e: ef:a1:8f:8b:5d:5c:93:3d:5a:d1:01:ab:20:1e:7a:2e:9b:2b: a8:75:bf:41:f5:36:6f:b3:48:13:c0:67:58:ac:17:b2:0a:c1: b8:ad:76:0e:21:5d:18:64:02:91:a7:fb:cd:e7:0c:0f:b2:38: b6:af:3c:df:17:43:e3:7e:65:ca:0a:55:54:41:64:d4:9f:13: c2:18:63:9b:0d:02:25:7c:36:9e:80:26:6b:93:7b:9b:9e:59: a8:6c:67:af:fe:0a:6d:0f:17:6d:05:3f:32:54:5f:e6:6f:b3: ac:72:09:84:ca:1f:b7:27:40:0e:ab:f5:3a:76:79:b2:26:4f: f6:ca:54:9a:07:11:f0:34:d1:2d:c3:3b:45:4a:db:c2:44:e4: 1a:2b:35:09:cf:76:ae:ee:ec:b6:ad:67:de:81:5c:32:06:b4: 29:a2:3b:74:e4:e9:ad:48:d0:3a:be:dc:b9:15:e8:11:38:61: 34:ff:0f:1e:e9:d0:41:c8:aa:ba:de:83:bb:55:c0:d2:ee:ac: dc:29:a2:3e:f0:ae:96:39:37:1c:6e:be:a9:59:17:6f:8d:71: f4:da:7d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl38zK5edMN/ToLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MDY1MDEyODItOTlkYS00MzZmLThiZTMtNDUwYzZjNjk5ODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR266p6MoNsgZnrYMqpxtqWBjjhtqxcBO388 NvaJr92tfLeU90FQM4+9He5y4AaQFsimhC0vXZ9xSVK8vNdD1nesRi9vEakAdaSF zoFX8tk4IiBE6QLS+7AcR/qVclqZGBt7TsuDgQ5tyGCnTP68+U8XGgbrwt8dqfSu gH1TNNWQgezMVHSVR6CTax+Bz/dhbwt0VXis6YMu9+463Cq7i18IqR4/zyT+uG4l CEUN4OrS7rtq4I3/y6QwI0jpsx55ALmQ7f6E2wltgZh11IoPesJBZTYnE9dPdnGw 1pUinUGQXEfprpPoj/bnG4cdOUzO1rcDKTiwkAii94HIgqriFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6aUsVd1lG6hk1+WuUOkNaWcz5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjg2Y2Y5MDItYmZlOC0z YTdmLWE3YmYtMWNjOWJiODA3MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIgQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmmA5Tbo13jepFqqk+/AN5eLjAYy0e1gJ3nXFvDxFV5+GxJbu+hj4td XJM9WtEBqyAeei6bK6h1v0H1Nm+zSBPAZ1isF7IKwbitdg4hXRhkApGn+83nDA+y OLavPN8XQ+N+ZcoKVVRBZNSfE8IYY5sNAiV8Np6AJmuTe5ueWahsZ6/+Cm0PF20F PzJUX+Zvs6xyCYTKH7cnQA6r9Tp2ebImT/bKVJoHEfA00S3DO0VK28JE5BorNQnP dq7u7LatZ96BXDIGtCmiO3Tk6a1I0Dq+3LkV6BE4YTT/Dx7p0EHIqrreg7tVwNLu rNwpoj7wrpY5NxxuvqlZF2+NcfTafVY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:16:47 2025 by rpki-client