$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa File: 28cafba3-d523-3fda-92a2-893bf9b3ee11.roa (raw, json) Hash identifier: g1y1IhLOFJW5vshX6kqgxMBRJ/QQxVvVc4qSp7oc3Qk= Subject key identifier: 40:58:E0:B1:05:D0:62:85:02:33:BF:94:42:E7:90:A4:77:57:B7:A5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD505E654D995EA05EE280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.100.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:50:5e:65:4d:99:5e:a0:5e:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b7a9a45f-b4fd-4743-90ce-f8f46e135c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:ee:ff:6f:6f:b3:67:84:5c:00:d1:82:9b: 63:d3:41:d8:8f:a1:5d:65:45:39:37:2d:1a:b0:70: ce:2c:87:42:36:61:c6:2d:ff:ec:be:37:fc:55:5d: fb:07:47:17:eb:a9:63:cd:7b:7c:57:15:36:f9:4c: ce:d8:68:6e:6b:1a:1a:e0:7f:1b:35:35:c3:9f:29: 03:6f:3e:57:83:56:bd:e8:1a:ee:10:55:92:27:4b: 92:1b:13:3a:e0:5b:dc:2f:f5:19:01:9f:e1:94:55: a7:71:b2:7d:ca:73:35:99:8b:e8:e1:d0:a7:c4:8a: c2:9e:2a:6f:ff:1b:bd:8e:c9:7f:fa:5e:af:ec:8b: 18:b4:34:d2:8e:10:b2:2e:ca:fd:77:b7:1b:dc:b2: 38:63:c1:fa:49:52:7c:21:16:6e:49:be:a9:63:78: a1:a4:cd:81:f6:bb:cf:49:0c:c8:72:b1:39:47:41: 5b:5a:f6:95:66:7f:c7:68:90:16:19:af:54:08:03: b6:33:bf:47:3d:77:58:9e:22:f7:10:17:32:93:6f: d6:7b:d4:ae:c9:da:d1:6c:1f:96:06:d7:ca:76:b8: 31:bc:72:3f:7e:7d:57:b6:c2:dd:39:db:e3:60:a7: b4:b2:68:26:1f:44:52:c4:a2:c8:42:a5:eb:65:f4: 5e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:58:E0:B1:05:D0:62:85:02:33:BF:94:42:E7:90:A4:77:57:B7:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:05:4e:13:a2:36:d4:11:56:25:2b:cd:4f:8d:e2:86:83:0c: 05:4b:cd:99:9c:6c:79:ad:91:26:e2:86:41:fb:a8:d6:d1:0b: a7:02:eb:3f:70:92:b9:df:be:0c:4e:85:ec:cc:b1:9b:b5:ee: 2d:c5:81:d1:7a:2d:28:96:15:f5:d5:18:95:5b:c1:72:d6:7f: 17:67:ca:0c:c1:0b:48:f0:ba:31:40:e1:b2:8f:84:2b:c5:d9: 1f:c7:c0:73:81:f6:da:ef:e6:7e:94:f5:c0:8a:f5:b1:59:aa: 42:93:9b:da:e9:2d:df:b6:44:e0:d7:e0:74:7b:79:07:15:56: 75:53:4a:9c:93:f1:90:2f:fa:bb:24:7e:e4:39:82:ac:c8:f1: fd:99:6d:6a:21:4d:5d:3e:39:6f:a8:14:cb:75:04:9d:bb:27: dd:e1:ae:3d:05:dd:0f:0a:6e:71:e6:ac:dd:e5:a1:e9:6c:26: 5e:4c:1d:f7:1e:10:51:10:c1:21:23:27:51:77:9b:40:9b:9a: e4:bf:d3:9f:52:2b:b4:48:13:80:44:9b:35:51:f2:b3:3a:60: 6f:8d:42:d0:d6:45:af:aa:8d:b6:74:f5:47:b0:1c:be:62:97: 09:26:df:aa:1f:cb:3c:c2:e1:b8:20:4a:16:fe:77:27:63:67: a8:86:02:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVBeZU2ZXqBe4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjdhOWE0NWYtYjRmZC00NzQzLTkwY2UtZjhmNDZlMTM1YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCzu/29vs2eEXADRgptj00HYj6FdZUU5Ny0a sHDOLIdCNmHGLf/svjf8VV37B0cX66ljzXt8VxU2+UzO2Ghuaxoa4H8bNTXDnykD bz5Xg1a96BruEFWSJ0uSGxM64FvcL/UZAZ/hlFWncbJ9ynM1mYvo4dCnxIrCnipv /xu9jsl/+l6v7IsYtDTSjhCyLsr9d7cb3LI4Y8H6SVJ8IRZuSb6pY3ihpM2B9rvP SQzIcrE5R0FbWvaVZn/HaJAWGa9UCAO2M79HPXdYniL3EBcyk2/We9SuydrRbB+W BtfKdrgxvHI/fn1XtsLdOdvjYKe0smgmH0RSxKLIQqXrZfRe8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBY4LEF0GKFAjO/lELnkKR3V7elMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhjYWZiYTMtZDUyMy0z ZmRhLTkyYTItODkzYmY5YjNlZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYFThOiNtQRViUrzU+N4oaDDAVLzZmcbHmtkSbihkH7qNbRC6cC6z9w krnfvgxOhezMsZu17i3FgdF6LSiWFfXVGJVbwXLWfxdnygzBC0jwujFA4bKPhCvF 2R/HwHOB9trv5n6U9cCK9bFZqkKTm9rpLd+2RODX4HR7eQcVVnVTSpyT8ZAv+rsk fuQ5gqzI8f2ZbWohTV0+OW+oFMt1BJ27J93hrj0F3Q8KbnHmrN3loelsJl5MHfce EFEQwSEjJ1F3m0CbmuS/059SK7RIE4BEmzVR8rM6YG+NQtDWRa+qjbZ09UewHL5i lwkm36ofyzzC4bggShb+dydjZ6iGAkc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:11 2025 by rpki-client