$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa File: 1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa (raw, json) Hash identifier: VIv0ik1kcC32j4kltzxgYMiBkc+OSlQdDtZheLMjffc= Subject key identifier: BF:28:80:CA:73:73:FA:CC:F4:0C:15:1B:B0:8E:CC:CF:CA:DD:46:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BA0D26AF25926BEE29F0F9370 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 19527 IP address blocks: 34.2.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6a:f2:59:26:be:e2:9f:0f:93:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=2f1ba052-ecb3-455e-9257-c43d058eb869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:9d:68:87:ba:d0:a7:8a:52:a2:58:28:f2: 85:b6:a7:73:19:1f:f8:2e:30:e0:70:c6:03:12:5e: 00:08:ad:7f:b5:59:2a:18:a1:a8:08:07:b3:b5:18: 4e:65:55:9a:4e:1d:ba:85:ad:39:29:f8:a5:d3:3f: 6e:69:d1:25:5c:d6:00:96:a7:cc:a7:0b:5e:a0:40: d0:43:5b:c4:be:7c:b5:ea:46:cf:eb:88:6f:02:9f: 1b:79:e4:6e:05:62:b0:4e:f3:a2:60:3c:45:3c:04: 12:93:d6:b6:7d:4e:91:6c:8c:82:21:ce:9d:8a:4a: f6:32:3b:d7:3d:67:fa:a9:31:a9:7e:3b:e8:83:c5: e4:30:c8:64:26:66:5b:6c:9c:f6:cc:b0:42:1f:b5: 30:a8:53:f7:2b:1a:32:e3:62:23:03:be:79:75:4c: ca:68:9c:fe:de:25:60:bb:89:64:d5:36:d8:c1:ae: 61:64:f6:b6:b6:a7:98:e3:8b:d5:3a:e7:1a:6f:a6: 07:ec:2e:d2:c5:87:e5:14:74:e6:27:a2:4c:36:5a: 85:76:e3:41:59:43:d2:53:38:de:38:d0:1e:a1:7f: d0:12:6d:94:f6:ea:b7:30:90:7a:af:02:e5:af:92: 32:9a:45:11:e9:3e:28:da:31:ee:19:93:29:a6:5d: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:28:80:CA:73:73:FA:CC:F4:0C:15:1B:B0:8E:CC:CF:CA:DD:46:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a5:90:ac:fc:d4:36:e4:7a:aa:7a:52:86:5e:8a:3f:86:c1: c9:e8:02:be:79:57:ab:df:56:f7:87:ed:2d:99:0d:3d:1f:22: ef:14:b3:70:10:9a:36:99:ea:e2:82:51:5b:8a:87:2b:17:97: 35:65:64:fa:32:af:43:0e:f3:22:1a:42:10:ee:51:fd:98:01: 18:b7:72:03:f9:2d:a5:76:25:a6:65:a9:ef:d1:be:f8:26:ee: 6d:97:40:2b:97:67:c8:e3:42:52:f9:99:63:17:76:1c:7a:29: 30:43:07:49:ff:7f:5e:a2:2b:c6:1f:76:2b:81:de:42:3f:15: 6f:c5:80:ce:9a:8a:a1:41:21:18:5e:12:aa:65:eb:bc:7c:f2: 97:27:80:98:1c:15:67:e8:44:98:51:fb:97:b8:bd:fb:ee:90: 84:50:d8:2c:fd:48:94:4c:e4:05:ad:e2:96:88:0a:ef:da:2b: 71:0b:5b:84:6b:d8:b2:a7:88:ff:19:27:1d:85:46:0d:97:51: 41:f7:44:02:d4:c2:83:bf:7d:20:09:c6:40:fc:57:b9:33:8e: cb:e1:69:40:f9:cd:86:6e:29:94:0f:4f:d0:ad:51:29:4c:22: 93:69:5d:6e:22:84:37:3a:33:59:2b:f1:19:77:14:e8:b3:92: 57:b1:e9:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mryWSa+4p8Pk3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MmYxYmEwNTItZWNiMy00NTVlLTkyNTctYzQzZDA1OGViODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VqdaIe60KeKUqJYKPKFtqdzGR/4LjDgcMYD El4ACK1/tVkqGKGoCAeztRhOZVWaTh26ha05Kfil0z9uadElXNYAlqfMpwteoEDQ Q1vEvny16kbP64hvAp8beeRuBWKwTvOiYDxFPAQSk9a2fU6RbIyCIc6dikr2MjvX PWf6qTGpfjvog8XkMMhkJmZbbJz2zLBCH7UwqFP3Kxoy42IjA755dUzKaJz+3iVg u4lk1TbYwa5hZPa2tqeY44vVOucab6YH7C7SxYflFHTmJ6JMNlqFduNBWUPSUzje ONAeoX/QEm2U9uq3MJB6rwLlr5IymkUR6T4o2jHuGZMppl0eUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8ogMpzc/rM9AwVG7COzM/K3UbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWRlYWY0YTYtODhhMy0z ZWU1LWIzYjctYmUzZjFiNjRjZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGylkKz81Dbkeqp6UoZeij+GwcnoAr55V6vfVveH7S2ZDT0fIu8Us3AQ mjaZ6uKCUVuKhysXlzVlZPoyr0MO8yIaQhDuUf2YARi3cgP5LaV2JaZlqe/Rvvgm 7m2XQCuXZ8jjQlL5mWMXdhx6KTBDB0n/f16iK8YfdiuB3kI/FW/FgM6aiqFBIRhe Eqpl67x88pcngJgcFWfoRJhR+5e4vfvukIRQ2Cz9SJRM5AWt4paICu/aK3ELW4Rr 2LKniP8ZJx2FRg2XUUH3RALUwoO/fSAJxkD8V7kzjsvhaUD5zYZuKZQPT9CtUSlM IpNpXW4ihDc6M1kr8Rl3FOizklex6ZY= -----END CERTIFICATE-----Generated at Wed Nov 5 03:38:42 2025 by rpki-client