$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af8bcce-5bfa-315f-8763-a8a6102f7667.roa File: 1af8bcce-5bfa-315f-8763-a8a6102f7667.roa (raw, json) Hash identifier: 6W6nwiGg5u5OgT0+qF2o/8bMZxxlPlh/YNKpYtjpgOU= Subject key identifier: 8C:36:9A:2A:73:15:63:94:4A:F2:98:0D:04:55:87:C0:3E:13:BE:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B72C1E3851DA695A5EB9F3A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af8bcce-5bfa-315f-8763-a8a6102f7667.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 396982 IP address blocks: 34.164.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:e3:85:1d:a6:95:a5:eb:9f:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=51e13866-f988-4922-8580-d80915c84331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:19:93:81:91:76:4b:05:4c:90:38:0b:54: 3d:bc:98:ec:aa:82:dd:be:7d:c5:e2:be:99:58:b5: 34:a9:9d:32:f6:99:0e:3e:c5:d9:18:87:3a:5e:ed: c5:ab:7e:c9:9a:dd:4e:ca:53:ca:bf:47:23:dc:6a: 3b:54:9b:dd:ab:a1:d2:cf:49:31:ff:b2:e2:bd:9b: c4:60:95:39:9c:f5:63:4c:22:9c:b2:8e:7a:5e:0f: 38:20:00:0a:f4:d0:22:5d:54:47:a7:c9:4f:94:bc: 5f:10:13:52:9b:d6:40:74:d0:e4:2b:76:6f:e1:3a: 8b:7a:e7:8c:76:ec:ab:70:5e:17:f0:28:d9:6d:4e: f5:0a:e5:2c:70:59:2d:1f:d6:aa:61:e6:c4:c7:2b: 15:6a:41:e9:fe:2d:a4:34:2f:19:31:5a:bc:6b:9b: 9a:b4:a4:56:48:99:a2:75:a9:37:2a:f6:47:0c:e2: 30:c2:4d:37:7e:bb:77:ca:af:52:ca:e5:68:9a:96: 44:d9:c5:7c:09:65:38:c8:1b:ac:24:de:a1:d0:6a: b9:39:f3:0a:02:b1:4b:93:12:8f:db:94:fe:d2:9d: fc:8e:72:1d:35:0c:db:fd:49:0f:f9:ba:94:bc:f3: be:ef:bc:fc:e8:d6:db:0c:44:70:21:8a:f5:42:38: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:36:9A:2A:73:15:63:94:4A:F2:98:0D:04:55:87:C0:3E:13:BE:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af8bcce-5bfa-315f-8763-a8a6102f7667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.164.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:08:b4:5a:16:a3:30:2f:cc:ad:bb:f9:e5:a9:70:8f:26:89: c0:db:60:4d:32:b7:b0:c8:84:dc:19:0d:c4:ca:5c:15:51:18: 79:84:fe:7b:e0:20:7f:5b:1d:ff:44:9d:db:45:69:b6:1a:9e: bb:73:12:22:f9:dc:e9:cf:c5:4c:0b:30:19:5c:df:10:68:5f: 6a:e8:a7:a5:ba:5e:13:a4:6e:b1:03:e0:bf:f2:44:23:67:93: d7:09:dd:29:7e:d2:c1:e6:b0:c2:bb:2f:ca:2c:5f:f4:f5:db: 1a:cf:2e:15:e1:c6:29:e1:17:84:f5:03:37:af:5e:1b:45:c8: 67:30:df:ca:36:15:bf:eb:90:7b:fe:27:6c:72:38:0a:05:3e: 24:1f:c3:58:23:a2:35:36:4c:51:6d:07:1b:45:69:6b:d6:e9: 7c:a2:de:d0:0f:df:47:1c:09:dd:33:e8:97:64:bc:a3:00:04: f9:e8:20:20:85:6e:79:34:d1:20:51:3a:15:a7:f2:e8:7b:3e: a9:b7:b9:d2:1a:75:d1:c4:cc:93:6e:50:38:90:39:c2:6f:b6: 33:cc:0d:be:32:f3:c4:7f:05:0d:09:cd:3e:81:68:30:96:e8: 10:2a:ce:a5:69:6d:fb:9a:ca:c7:e3:aa:d9:6d:9f:75:fb:52: 33:9b:fa:81 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtyweOFHaaVpeufOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk NTFlMTM4NjYtZjk4OC00OTIyLTg1ODAtZDgwOTE1Yzg0MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwAZk4GRdksFTJA4C1Q9vJjsqoLdvn3F4r6Z WLU0qZ0y9pkOPsXZGIc6Xu3Fq37Jmt1OylPKv0cj3Go7VJvdq6HSz0kx/7LivZvE YJU5nPVjTCKcso56Xg84IAAK9NAiXVRHp8lPlLxfEBNSm9ZAdNDkK3Zv4TqLeueM duyrcF4X8CjZbU71CuUscFktH9aqYebExysVakHp/i2kNC8ZMVq8a5uatKRWSJmi dak3KvZHDOIwwk03frt3yq9SyuVompZE2cV8CWU4yBusJN6h0Gq5OfMKArFLkxKP 25T+0p38jnIdNQzb/UkP+bqUvPO+77z86NbbDERwIYr1Qji4mwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIw2mipzFWOUSvKYDQRVh8A+E76iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWFmOGJjY2UtNWJmYS0z MTVmLTg3NjMtYThhNjEwMmY3NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOgi0WhajMC/Mrbv55alwjyaJwNtgTTK3sMiE3BkNxMpcFVEYeYT+e+Ag f1sd/0Sd20Vpthqeu3MSIvnc6c/FTAswGVzfEGhfauinpbpeE6RusQPgv/JEI2eT 1wndKX7Sweawwrsvyixf9PXbGs8uFeHGKeEXhPUDN69eG0XIZzDfyjYVv+uQe/4n bHI4CgU+JB/DWCOiNTZMUW0HG0Vpa9bpfKLe0A/fRxwJ3TPol2S8owAE+eggIIVu eTTRIFE6Fafy6Hs+qbe50hp10cTMk25QOJA5wm+2M8wNvjLzxH8FDQnNPoFoMJbo ECrOpWlt+5rKx+Oq2W2fdftSM5v6gQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:35 2025 by rpki-client