$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1f182f-a5d1-3e09-87ee-c9dca6d60ffe.roa File: fd1f182f-a5d1-3e09-87ee-c9dca6d60ffe.roa (raw, json) Hash identifier: gXs8KAsPNV3SRBUZrbdXRgprZi2VkGlW2rnkUvTg1OU= Subject key identifier: 30:9E:EE:C0:F3:CF:04:CF:EE:90:B1:E4:EC:28:5D:A3:90:32:31:6A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B864CB1091EECF578E596B400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1f182f-a5d1-3e09-87ee-c9dca6d60ffe.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 19527 IP address blocks: 34.191.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b1:09:1e:ec:f5:78:e5:96:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=435a616a-0b70-435e-8887-16f9b4c28ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:ab:d3:a3:4f:97:3a:04:d1:22:41:f4:96: 99:0b:47:e0:fc:03:22:81:55:c4:95:10:fb:da:e8: 60:1a:ce:ad:f9:75:f1:49:8a:33:00:05:b1:9e:7c: 31:4a:ae:5c:d7:3f:94:71:bc:b0:17:fb:a0:c0:04: e2:3e:44:77:1c:9a:6e:a8:a6:c5:dc:0f:7b:13:7d: 89:7c:05:71:19:cd:06:93:12:06:89:58:cf:5f:2e: 0f:bc:18:44:4b:ae:c8:81:53:99:16:d0:ab:e7:13: dc:cb:ae:8e:3d:e6:a6:ba:fe:1a:f0:5b:eb:7d:ba: 42:58:c7:41:ff:8c:4d:72:9b:c3:ce:f3:d2:81:f9: 9c:9e:34:69:22:79:ed:1a:35:5b:52:60:8d:61:81: 5f:c1:a5:22:e9:8f:1f:14:fa:d0:19:7d:7a:0f:1c: 21:e7:30:b1:4f:9f:1b:c3:31:da:e4:b8:90:5a:a7: a0:58:71:da:81:5f:23:12:b9:3f:06:c3:d1:f2:a9: 0a:88:cc:fc:a0:71:0a:67:83:7f:d3:0e:9c:a0:d3: 27:10:dc:3d:83:dc:b3:ab:49:b4:cb:6e:76:f0:d1: 00:db:2b:45:ed:d4:4b:13:37:6f:2b:0b:0c:39:03: 5c:02:33:63:07:87:1a:6a:b1:59:9d:fd:6f:0b:01: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9E:EE:C0:F3:CF:04:CF:EE:90:B1:E4:EC:28:5D:A3:90:32:31:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1f182f-a5d1-3e09-87ee-c9dca6d60ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:49:6f:8d:bb:66:c6:ff:63:38:6d:5c:f3:5c:69:6e:74:b2: 4c:ee:f7:13:27:a0:dc:02:7a:ee:5c:2a:71:18:50:eb:8a:14: 61:49:2a:31:b0:e6:2d:df:33:d1:c3:97:4d:49:ce:42:2f:cd: 4a:02:88:39:84:3c:7a:c1:4a:0b:2f:da:1a:41:ae:26:d1:25: d3:b2:23:a4:4c:a3:69:22:f6:0b:ab:17:e5:bb:87:15:9f:72: b3:cf:50:1d:d6:da:0a:1f:b9:7f:42:69:1d:9a:0c:e7:56:99: d9:81:c9:ca:03:bd:08:84:8e:1d:47:b2:ff:79:26:67:64:5b: a9:a0:d5:27:5d:cf:e1:0f:00:84:85:41:91:e7:54:b6:5f:94: f1:b2:cd:d5:e9:a8:ba:03:3c:83:b3:00:0a:5b:4b:3d:f0:0c: 3f:06:46:a2:e4:90:96:15:ae:bb:4e:88:ab:c9:1a:2a:2b:b9: 04:cc:ff:28:e3:aa:7e:74:f9:72:8e:d6:8b:68:4a:c0:ab:a5: a1:6c:75:3c:8d:04:40:65:92:2e:c3:6c:52:ad:54:34:00:33: 7b:ec:4e:a0:2a:c3:5e:d0:41:c7:88:be:d2:bb:e0:98:48:03: d8:f5:e0:e6:f2:53:76:eb:5a:da:25:1c:09:51:12:a3:16:26: d5:69:fe:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTLEJHuz1eOWWtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk NDM1YTYxNmEtMGI3MC00MzVlLTg4ODctMTZmOWI0YzI4ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGar06NPlzoE0SJB9JaZC0fg/AMigVXElRD7 2uhgGs6t+XXxSYozAAWxnnwxSq5c1z+UcbywF/ugwATiPkR3HJpuqKbF3A97E32J fAVxGc0GkxIGiVjPXy4PvBhES67IgVOZFtCr5xPcy66OPeamuv4a8FvrfbpCWMdB /4xNcpvDzvPSgfmcnjRpInntGjVbUmCNYYFfwaUi6Y8fFPrQGX16Dxwh5zCxT58b wzHa5LiQWqegWHHagV8jErk/BsPR8qkKiMz8oHEKZ4N/0w6coNMnENw9g9yzq0m0 y2528NEA2ytF7dRLEzdvKwsMOQNcAjNjB4caarFZnf1vCwFNnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCe7sDzzwTP7pCx5OwoXaOQMjFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmQxZjE4MmYtYTVkMS0z ZTA5LTg3ZWUtYzlkY2E2ZDYwZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApJb427Zsb/YzhtXPNcaW50skzu9xMnoNwCeu5cKnEYUOuKFGFJKjGw 5i3fM9HDl01JzkIvzUoCiDmEPHrBSgsv2hpBribRJdOyI6RMo2ki9gurF+W7hxWf crPPUB3W2gofuX9CaR2aDOdWmdmBycoDvQiEjh1Hsv95JmdkW6mg1Sddz+EPAISF QZHnVLZflPGyzdXpqLoDPIOzAApbSz3wDD8GRqLkkJYVrrtOiKvJGioruQTM/yjj qn50+XKO1otoSsCrpaFsdTyNBEBlki7DbFKtVDQAM3vsTqAqw17QQceIvtK74JhI A9j14ObyU3brWtolHAlREqMWJtVp/gQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:22:14 2025 by rpki-client