$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c2fb2af-022e-3b3b-b872-92f837c8b5bc.roa File: 0c2fb2af-022e-3b3b-b872-92f837c8b5bc.roa (raw, json) Hash identifier: pR2HKG6Hr5mzuizbNbSrLp2xcDuTpMAdW+/J0Vl3+b0= Subject key identifier: 8D:99:F7:39:83:97:64:C7:83:F5:E5:DB:0D:94:FC:3C:05:98:22:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679771D8B7C595DAC9CEC980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c2fb2af-022e-3b3b-b872-92f837c8b5bc.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 19527 IP address blocks: 34.4.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:71:d8:b7:c5:95:da:c9:ce:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=60d0e8f1-3180-489a-84a4-71d1cd1b5efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:0d:ed:23:d8:3a:99:61:b3:7b:16:0d:01: b0:3f:9e:bc:14:d1:0f:e8:a0:6c:e7:ed:ca:cb:29: 22:8a:be:06:c5:6d:65:9f:04:e3:88:55:71:c6:e8: a9:65:7c:4b:7c:72:de:2b:6a:fc:f5:5e:a5:c7:7d: e0:a1:67:47:be:a0:43:57:68:17:13:c8:04:30:d2: 41:18:e0:5b:45:3f:c3:b8:92:3f:d4:3e:06:01:81: d8:a7:a1:36:62:91:17:6a:d0:f1:41:24:b6:d5:5b: 16:28:98:88:d8:c4:c5:c0:55:2d:15:52:4f:fc:3a: 50:7c:c6:80:39:28:1f:74:4f:66:57:fb:c8:b5:b3: 51:4e:a3:9f:9b:16:9c:1e:b3:d0:41:d0:90:91:ee: 87:39:36:9a:b0:03:df:18:e7:6f:aa:da:90:0b:5a: fa:0d:82:89:0a:7f:fe:f1:ef:3f:82:d1:16:ac:10: a7:b0:09:5f:38:7f:45:1f:3e:98:5b:c7:22:26:45: 7c:4a:74:c2:a5:b1:a7:41:af:0f:c9:8c:a4:4d:19: f9:40:a8:78:3f:15:a6:b6:dc:22:45:b1:1b:0f:3d: 48:20:a6:67:84:7c:24:cb:2d:6d:52:fb:5d:a8:94: 5b:fe:3c:27:21:b7:9c:0a:cb:58:12:f3:1d:95:7c: 61:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:99:F7:39:83:97:64:C7:83:F5:E5:DB:0D:94:FC:3C:05:98:22:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c2fb2af-022e-3b3b-b872-92f837c8b5bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:78:ce:90:21:21:17:1a:f3:0e:67:15:80:29:ff:83:c9:8c: 6b:71:25:aa:5e:c7:ad:8b:0a:4c:e4:de:a2:d5:af:a3:68:33: 4d:ef:5f:ef:5a:1a:a0:5e:d0:5f:c1:36:d3:a2:ca:ca:34:32: 07:7a:c7:4e:e9:23:58:4e:63:27:df:4a:c3:0e:1d:fd:e3:09: db:af:a6:95:a1:c0:a4:c3:20:9e:4c:b9:95:03:3e:33:f5:8e: 1c:97:c8:75:a5:0c:dc:6b:2a:3e:66:86:66:6a:89:8d:77:55: bf:00:12:d0:ad:07:6a:86:84:21:2d:54:02:bb:3b:5d:51:4b: 3b:22:92:31:59:a8:9b:eb:7b:bf:db:8e:bc:1a:01:d6:f1:ef: a6:c8:2c:ba:3e:a0:d9:f6:de:7e:eb:c1:0a:b3:24:8b:10:d1: e8:5d:68:96:d4:1b:ed:32:57:d2:4f:e4:44:4b:5f:90:4a:79: 7f:9f:66:97:3c:69:f1:cf:f2:62:5d:54:5f:5f:19:4a:1e:95: ed:15:0d:72:c4:31:6c:ba:0f:d0:da:e2:ba:b5:6d:da:ba:1f: 83:8a:c4:6d:ed:97:78:3b:44:2f:e0:9e:77:5b:82:1b:05:b6: c5:c8:4f:26:11:7d:19:e2:54:8d:03:2b:00:9a:0e:c8:f4:9c: fc:ac:03:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3HYt8WV2snOyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjBkMGU4ZjEtMzE4MC00ODlhLTg0YTQtNzFkMWNkMWI1ZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyUN7SPYOplhs3sWDQGwP568FNEP6KBs5+3K yykiir4GxW1lnwTjiFVxxuipZXxLfHLeK2r89V6lx33goWdHvqBDV2gXE8gEMNJB GOBbRT/DuJI/1D4GAYHYp6E2YpEXatDxQSS21VsWKJiI2MTFwFUtFVJP/DpQfMaA OSgfdE9mV/vItbNRTqOfmxacHrPQQdCQke6HOTaasAPfGOdvqtqQC1r6DYKJCn/+ 8e8/gtEWrBCnsAlfOH9FHz6YW8ciJkV8SnTCpbGnQa8PyYykTRn5QKh4PxWmttwi RbEbDz1IIKZnhHwkyy1tUvtdqJRb/jwnIbecCstYEvMdlXxhAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2Z9zmDl2THg/Xl2w2U/DwFmCKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGMyZmIyYWYtMDIyZS0z YjNiLWI4NzItOTJmODM3YzhiNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp4zpAhIRca8w5nFYAp/4PJjGtxJapex62LCkzk3qLVr6NoM03vX+9a GqBe0F/BNtOiyso0Mgd6x07pI1hOYyffSsMOHf3jCduvppWhwKTDIJ5MuZUDPjP1 jhyXyHWlDNxrKj5mhmZqiY13Vb8AEtCtB2qGhCEtVAK7O11RSzsikjFZqJvre7/b jrwaAdbx76bILLo+oNn23n7rwQqzJIsQ0ehdaJbUG+0yV9JP5ERLX5BKeX+fZpc8 afHP8mJdVF9fGUoele0VDXLEMWy6D9Da4rq1bdq6H4OKxG3tl3g7RC/gnndbghsF tsXITyYRfRniVI0DKwCaDsj0nPysA6o= -----END CERTIFICATE-----Generated at Tue Nov 4 18:49:19 2025 by rpki-client