$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa File: ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa (raw, json) Hash identifier: Bm/I3qsB/PYUsSnoe8Xed/s3VwMHQA7QvNFSGm6gLCw= Subject key identifier: 57:FB:18:44:25:68:6E:3A:48:39:5B:8F:CB:4C:10:73:27:D1:93:7C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D28E72DF4CB31083B540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.141.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d2:8e:72:df:4c:b3:10:83:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f9a5f632-c78a-4adc-a990-daef5f0e11f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d8:66:18:76:29:be:d3:02:e3:26:83:f7:a7: 6f:b7:02:90:ef:87:64:7d:82:99:ee:3f:c1:ce:47: 0b:97:00:14:09:f4:29:7a:e8:f1:23:3b:b2:18:98: d6:3e:ed:98:d9:10:bf:33:b6:6b:19:a7:02:77:c4: bb:b4:04:66:8e:c4:0b:4d:95:52:09:95:8d:e8:84: eb:3a:22:e0:bc:7d:95:2a:ab:d7:2f:f6:f0:2c:76: c0:fa:ae:b5:7a:fe:66:80:b1:cc:14:bf:74:0a:ee: 3f:92:c5:60:d1:e0:12:64:be:6f:f6:3c:95:e7:c9: 90:b8:74:fd:4c:a4:61:7b:a7:ab:81:cd:88:d5:3f: 2f:c7:b2:af:af:19:94:0f:f3:8d:a8:01:a2:77:ac: 3b:43:c8:b9:40:b6:19:2e:90:b9:5c:91:1b:17:e7: 9f:ad:50:ae:b7:a4:cc:f7:30:04:fd:53:23:44:c3: 19:1c:2b:95:31:7a:a2:70:d4:10:43:43:dc:21:8a: d2:15:0b:a2:33:a0:bb:ca:af:0a:c4:e3:97:e2:bd: 67:cf:25:00:76:2c:46:a6:ff:7d:d5:2f:d3:14:67: 7c:9c:a5:99:d4:08:1f:a9:ea:60:d1:39:ff:f0:7c: ae:7f:38:70:47:30:3f:9c:39:5e:18:7d:21:de:3a: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FB:18:44:25:68:6E:3A:48:39:5B:8F:CB:4C:10:73:27:D1:93:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.141.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f3:e5:d2:99:49:3b:a0:a8:94:96:c4:d7:ae:5b:3d:5c:f4: 57:21:1d:06:82:29:d0:fe:76:91:56:f4:ff:11:ba:07:ff:f2: 5a:79:f2:39:72:99:c5:89:5c:e3:06:27:2c:f7:cc:74:24:1a: 52:db:30:5d:bf:86:0d:36:e6:9c:76:05:39:63:f4:c8:4c:6b: ae:0c:1f:f8:aa:50:10:27:5e:fa:57:28:b7:a1:85:a4:80:ef: f7:53:98:ac:95:62:e3:9c:ac:24:fe:20:38:a2:83:35:e4:d4: 72:74:16:61:de:60:bd:b5:44:71:2a:97:dd:1e:3a:1b:e3:cc: 3c:71:57:9c:28:ba:df:94:dd:75:ba:20:ee:06:ec:26:e0:04: b3:31:76:1b:4e:9f:e4:09:3d:72:90:f3:29:69:56:e6:28:b4: c5:94:10:3b:79:b8:cc:63:b3:0b:de:0a:b9:4c:42:a4:b2:c3: 5c:58:82:42:79:43:eb:4a:34:1b:f3:24:69:bc:2c:9c:e4:b2: 1e:09:da:7c:de:70:97:b7:99:7a:0c:b2:a9:cb:b0:6b:aa:51: 31:a3:a1:86:ec:1b:14:88:20:c0:d5:b1:b5:29:f6:ac:74:65: 87:46:c2:d0:19:6f:2f:58:5c:a0:8f:5f:b3:c4:e7:d0:4d:87: 3d:2c:79:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9KOct9MsxCDtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjlhNWY2MzItYzc4YS00YWRjLWE5OTAtZGFlZjVmMGUxMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidhmGHYpvtMC4yaD96dvtwKQ74dkfYKZ7j/B zkcLlwAUCfQpeujxIzuyGJjWPu2Y2RC/M7ZrGacCd8S7tARmjsQLTZVSCZWN6ITr OiLgvH2VKqvXL/bwLHbA+q61ev5mgLHMFL90Cu4/ksVg0eASZL5v9jyV58mQuHT9 TKRhe6ergc2I1T8vx7KvrxmUD/ONqAGid6w7Q8i5QLYZLpC5XJEbF+efrVCut6TM 9zAE/VMjRMMZHCuVMXqicNQQQ0PcIYrSFQuiM6C7yq8KxOOX4r1nzyUAdixGpv99 1S/TFGd8nKWZ1Agfqepg0Tn/8HyufzhwRzA/nDleGH0h3jom5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFf7GEQlaG46SDlbj8tMEHMn0ZN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmY2M2E3YzAtNjI3MC0z YTAyLTkyZTYtOGE2YTllYjc4YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/z5dKZSTugqJSWxNeuWz1c9FchHQaCKdD+dpFW9P8Rugf/8lp58jly mcWJXOMGJyz3zHQkGlLbMF2/hg025px2BTlj9MhMa64MH/iqUBAnXvpXKLehhaSA 7/dTmKyVYuOcrCT+IDiigzXk1HJ0FmHeYL21RHEql90eOhvjzDxxV5wout+U3XW6 IO4G7CbgBLMxdhtOn+QJPXKQ8ylpVuYotMWUEDt5uMxjswveCrlMQqSyw1xYgkJ5 Q+tKNBvzJGm8LJzksh4J2nzecJe3mXoMsqnLsGuqUTGjoYbsGxSIIMDVsbUp9qx0 ZYdGwtAZby9YXKCPX7PE59BNhz0seeU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:37 2025 by rpki-client