$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fba21083-f564-3705-91a1-d7e909dcb4f4.roa File: fba21083-f564-3705-91a1-d7e909dcb4f4.roa (raw, json) Hash identifier: f0wxqaRDBzVRDQkQaM+fItx4GvAHELrUb2zyxInnj7k= Subject key identifier: 22:38:AF:E8:72:5F:77:8D:74:4B:C6:D6:3F:B2:1E:F4:D6:0B:F2:56 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797AA81B76AFC482ECC3B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fba21083-f564-3705-91a1-d7e909dcb4f4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.69.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:aa:81:b7:6a:fc:48:2e:cc:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=c1d77a2f-c441-4d40-8f61-ac6b1f5b1bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:d8:09:41:a1:dc:dc:38:0c:e3:aa:e1:a1: 43:96:c2:0d:63:ee:2c:08:3c:6b:83:36:48:b7:ce: d1:e7:c6:18:08:ef:c3:3d:97:ac:58:a7:97:ce:48: fe:1d:b6:26:6a:e9:fa:87:b6:fa:a7:e8:e2:b2:13: aa:cd:96:71:f4:bc:e2:7a:dc:9c:ec:3c:09:db:44: 46:af:01:4a:69:13:1b:7b:67:98:a2:7c:ca:53:12: 73:91:3f:f2:99:0b:50:ee:fe:8e:26:5c:79:ba:02: 0c:f3:06:21:50:6a:c7:e7:5c:23:32:f3:61:6d:2a: 84:62:a0:64:c5:f9:27:c8:4e:95:60:14:cd:ac:58: c6:3b:fb:d9:e0:e2:f2:7f:5f:16:95:64:e3:4f:f4: cb:ee:0f:33:d7:be:ef:55:ac:7b:c3:98:d9:31:9c: 44:e2:2d:0e:9a:37:bf:d6:d2:d9:69:70:9c:8e:da: cf:78:a9:82:fd:ee:db:f0:aa:63:de:5e:eb:1e:57: 92:17:d5:b1:45:fc:a2:72:92:9a:42:01:f8:1c:33: 69:1b:cb:93:87:c8:7b:3c:2b:49:af:5e:11:7f:84: c1:99:a9:f1:81:6e:c9:fe:f1:b6:44:c6:74:63:2b: dd:db:38:c0:93:3d:77:fa:ae:2b:51:5d:4d:b2:7c: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:38:AF:E8:72:5F:77:8D:74:4B:C6:D6:3F:B2:1E:F4:D6:0B:F2:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fba21083-f564-3705-91a1-d7e909dcb4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:89:aa:25:99:f9:f0:69:88:c0:5a:d3:de:c3:49:1b:3a:e8: 82:a5:53:b0:dd:78:f7:53:bb:ba:76:38:38:a7:af:e1:18:85: 27:f2:32:69:0e:48:aa:a8:2f:aa:27:ea:f7:1a:8d:db:7d:e0: d3:5c:c3:af:8f:8d:84:e0:49:07:75:75:32:31:36:0f:0a:76: 1d:f4:6f:d6:4a:7c:7f:4b:37:10:1f:ed:62:6d:0b:74:22:25: e5:73:c9:00:8c:f2:7f:eb:4e:aa:00:24:9b:b9:0b:36:37:d7: 69:eb:b9:a2:33:d8:54:a3:3c:b1:6e:11:60:17:7b:92:fc:4e: d1:d9:4b:36:b1:a8:85:36:82:56:e8:cb:a3:fc:c7:1a:e0:c2: 53:87:6e:1d:c7:f0:9c:6b:df:eb:2c:73:3b:19:07:57:f3:ca: 30:b6:02:02:c7:1d:be:a2:7d:7b:af:9f:7d:9f:0e:49:aa:77: bd:a8:b3:0c:b4:65:b3:b2:ed:8e:35:b4:3e:dc:07:c0:40:8f: 12:87:e9:de:80:55:c8:b4:58:3d:1d:f2:b1:f4:70:a7:2a:5c: a3:b3:e2:07:af:4b:9d:eb:00:e6:76:a8:c5:28:eb:1c:69:a1: 6e:c8:83:45:ba:bd:94:56:7f:68:8b:d2:69:62:e2:f3:57:d1: 99:0e:28:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6qBt2r8SC7MO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YzFkNzdhMmYtYzQ0MS00ZDQwLThmNjEtYWM2YjFmNWIxYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6rYCUGh3Nw4DOOq4aFDlsINY+4sCDxrgzZI t87R58YYCO/DPZesWKeXzkj+HbYmaun6h7b6p+jishOqzZZx9Lzietyc7DwJ20RG rwFKaRMbe2eYonzKUxJzkT/ymQtQ7v6OJlx5ugIM8wYhUGrH51wjMvNhbSqEYqBk xfknyE6VYBTNrFjGO/vZ4OLyf18WlWTjT/TL7g8z177vVax7w5jZMZxE4i0Omje/ 1tLZaXCcjtrPeKmC/e7b8Kpj3l7rHleSF9WxRfyicpKaQgH4HDNpG8uTh8h7PCtJ r14Rf4TBmanxgW7J/vG2RMZ0Yyvd2zjAkz13+q4rUV1Nsnz1CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI4r+hyX3eNdEvG1j+yHvTWC/JWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmJhMjEwODMtZjU2NC0z NzA1LTkxYTEtZDdlOTA5ZGNiNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKJqiWZ+fBpiMBa097DSRs66IKlU7DdePdTu7p2ODinr+EYhSfyMmkO SKqoL6on6vcajdt94NNcw6+PjYTgSQd1dTIxNg8Kdh30b9ZKfH9LNxAf7WJtC3Qi JeVzyQCM8n/rTqoAJJu5CzY312nruaIz2FSjPLFuEWAXe5L8TtHZSzaxqIU2glbo y6P8xxrgwlOHbh3H8Jxr3+ssczsZB1fzyjC2AgLHHb6ifXuvn32fDkmqd72oswy0 ZbOy7Y41tD7cB8BAjxKH6d6AVci0WD0d8rH0cKcqXKOz4gevS53rAOZ2qMUo6xxp oW7Ig0W6vZRWf2iL0mli4vNX0ZkOKDk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:44 2025 by rpki-client