$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11bb5c87-d89b-320a-be71-7a094bd80937.roa File: 11bb5c87-d89b-320a-be71-7a094bd80937.roa (raw, json) Hash identifier: oYv+LBU6eF/q94MPFDHrAMH3Dgw1X71mXllRfIrjvyU= Subject key identifier: 22:24:50:0B:1F:A3:85:B7:55:72:82:30:71:8F:1D:E8:1D:C7:6B:19 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BBE4059B2ACB16607B03A9680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11bb5c87-d89b-320a-be71-7a094bd80937.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 19527 IP address blocks: 34.2.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:59:b2:ac:b1:66:07:b0:3a:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=d88d46c6-3695-47af-9952-2f7863fe8c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:db:15:26:1e:97:1c:4d:f7:24:ff:8c:dc:29: 45:93:d3:df:f5:55:96:94:c0:35:fc:fe:4a:fb:d2: cc:31:cb:2e:e2:38:90:47:41:d2:55:09:3e:63:52: 78:b8:6d:90:14:e3:e0:34:cb:cb:4b:c2:16:7a:c9: 52:7b:22:ab:0b:8b:39:b3:88:1e:a9:a2:40:36:dc: 22:9f:6a:88:78:21:cf:16:25:a7:85:af:18:96:c4: 2c:33:70:f4:31:ad:cd:67:57:24:03:a3:31:28:38: 04:b8:38:16:bf:28:d6:97:88:b3:ba:52:9a:f4:1b: d3:2a:4d:ac:f0:42:0e:00:c3:44:03:ef:48:cd:e3: 0d:d4:6c:68:77:38:01:92:a7:de:76:ad:1a:f3:bd: a4:f1:eb:91:de:fc:b3:36:d1:f2:78:08:c8:6a:45: 55:cc:5a:b4:f7:62:0c:e3:0e:ad:7a:4e:91:08:19: 88:07:cb:d6:8d:33:ce:49:7e:91:08:7b:09:24:cd: 51:cf:c2:cc:59:63:2b:81:71:de:5c:74:a4:28:f6: 5e:a2:ca:64:61:4f:ee:75:51:e1:49:2e:bc:34:c6: 85:d0:e2:eb:40:92:f8:ed:48:fd:80:43:45:e0:dd: 08:99:03:bf:8f:18:a5:ce:45:ba:67:d7:02:0d:7a: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:24:50:0B:1F:A3:85:B7:55:72:82:30:71:8F:1D:E8:1D:C7:6B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11bb5c87-d89b-320a-be71-7a094bd80937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e0:e3:81:c0:b1:ee:5a:12:34:1f:07:0a:f1:3d:66:cf:a8: af:64:3a:b1:9b:33:96:b0:90:b4:9c:32:b7:df:6d:ee:ad:5c: 7c:ed:91:79:f7:8d:ce:17:53:20:08:c6:b7:e9:ba:0d:fe:ca: e9:02:9b:3d:f9:d0:bd:ae:36:d0:9a:1a:8b:0c:a4:ad:97:4f: 7a:4d:d2:a7:d1:59:13:8b:31:d6:df:1f:e0:73:cb:0e:1f:10: 4b:f9:45:f3:eb:cd:36:99:55:6d:d7:81:90:28:03:8f:57:9d: 3c:8c:57:92:74:5b:a6:80:1e:0c:52:3b:69:7c:b7:03:79:7c: 00:34:91:76:b0:f7:0b:76:ef:13:2f:ad:4b:b5:d9:ae:d2:b5: 44:ec:ab:3c:4b:14:db:62:88:2b:8a:13:2c:bb:ff:a6:6b:1d: 93:6f:1b:b5:54:30:bd:af:53:0e:21:e0:2d:1f:47:b1:72:5e: 33:e1:c9:b9:cb:b7:dc:48:24:b9:c9:15:2e:0c:7e:9a:d4:73: 1a:ea:fc:c8:6d:cb:8f:8f:31:38:99:b8:97:b3:e5:fc:e6:7f: 91:19:f9:71:15:b4:49:a0:10:24:dd:43:1d:59:13:c9:f3:95: 53:24:b5:98:bd:ce:fc:52:8b:6b:23:ce:a8:01:50:48:29:9c: 86:ae:40:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFmyrLFmB7A6loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDg4ZDQ2YzYtMzY5NS00N2FmLTk5NTItMmY3ODYzZmU4YzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNsVJh6XHE33JP+M3ClFk9Pf9VWWlMA1/P5K +9LMMcsu4jiQR0HSVQk+Y1J4uG2QFOPgNMvLS8IWeslSeyKrC4s5s4geqaJANtwi n2qIeCHPFiWnha8YlsQsM3D0Ma3NZ1ckA6MxKDgEuDgWvyjWl4izulKa9BvTKk2s 8EIOAMNEA+9IzeMN1GxodzgBkqfedq0a872k8euR3vyzNtHyeAjIakVVzFq092IM 4w6tek6RCBmIB8vWjTPOSX6RCHsJJM1Rz8LMWWMrgXHeXHSkKPZeospkYU/udVHh SS68NMaF0OLrQJL47Uj9gENF4N0ImQO/jxilzkW6Z9cCDXoKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIkUAsfo4W3VXKCMHGPHegdx2sZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTFiYjVjODctZDg5Yi0z MjBhLWJlNzEtN2EwOTRiZDgwOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfg44HAse5aEjQfBwrxPWbPqK9kOrGbM5awkLScMrffbe6tXHztkXn3 jc4XUyAIxrfpug3+yukCmz350L2uNtCaGosMpK2XT3pN0qfRWROLMdbfH+Bzyw4f EEv5RfPrzTaZVW3XgZAoA49XnTyMV5J0W6aAHgxSO2l8twN5fAA0kXaw9wt27xMv rUu12a7StUTsqzxLFNtiiCuKEyy7/6ZrHZNvG7VUML2vUw4h4C0fR7FyXjPhybnL t9xIJLnJFS4MfprUcxrq/Mhty4+PMTiZuJez5fzmf5EZ+XEVtEmgECTdQx1ZE8nz lVMktZi9zvxSi2sjzqgBUEgpnIauQBk= -----END CERTIFICATE-----Generated at Wed Nov 5 06:30:09 2025 by rpki-client