$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b40d30b-667a-38d9-bcac-578622cba084.roa File: 2b40d30b-667a-38d9-bcac-578622cba084.roa (raw, json) Hash identifier: k19Jt2Sj+4eeo7zj3LQoY9AOQyVK0GgrTu0N2g2mCiM= Subject key identifier: 4F:D5:21:13:96:1F:6C:2C:D5:D4:17:2E:2F:F7:F1:24:72:0B:F1:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B2051830020222DD7280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b40d30b-667a-38d9-bcac-578622cba084.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.174.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b2:05:18:30:02:02:22:dd:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=6c8461cc-09b7-4172-a76f-a4901639e4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6a:6b:a6:e0:66:28:b1:79:50:2e:a9:c5:ce: 27:5f:20:56:04:fd:9b:29:8f:c1:71:4d:a9:a3:c7: 9e:2c:b5:aa:d9:48:33:fb:93:64:77:ca:25:e0:e5: 02:0d:07:80:96:0c:01:33:5f:cf:3c:dc:51:5c:c2: 1c:38:3a:77:9c:9e:80:e7:86:e7:99:ab:bd:36:80: 48:76:e9:1d:6b:e7:02:7a:80:fb:c2:25:44:5c:25: a4:e8:84:95:7a:31:46:35:b0:3e:de:9b:0a:19:d3: 4c:bc:1b:91:ed:b5:5e:6f:6b:87:2a:53:5e:24:12: cd:d8:41:38:c5:7f:d8:fc:f5:13:dd:5f:2b:3c:28: 06:bd:6c:f2:82:5a:f4:64:8d:8c:a6:c1:40:a6:17: be:ac:19:23:5f:d6:12:8c:ac:48:f2:63:03:54:f6: 65:2e:7a:fb:1d:d5:7a:fa:19:8b:13:b9:0c:35:21: 28:7b:dd:a0:e6:85:f1:6b:71:3e:c7:51:05:0e:1c: 77:7d:54:64:8d:47:65:1d:8f:a1:2a:c5:c2:e4:5e: c6:3c:46:69:60:e4:d4:e2:51:7d:d9:84:d2:4c:b9: 4c:06:5e:bc:3e:c5:52:42:df:29:2c:6f:f5:e2:65: 0a:61:0c:10:19:a8:53:3e:c7:12:69:ca:e2:3e:4f: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D5:21:13:96:1F:6C:2C:D5:D4:17:2E:2F:F7:F1:24:72:0B:F1:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b40d30b-667a-38d9-bcac-578622cba084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.174.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9f:63:9a:ef:59:22:d7:7d:ed:bf:f9:53:d6:f0:3f:85:3e: 16:3b:e2:d5:f9:1b:a6:b9:9a:15:6c:38:57:af:d0:0a:34:18: 1a:43:5d:2e:31:af:85:6b:35:ec:20:5f:16:2d:98:bd:d8:9e: 10:bc:16:fa:b2:c4:81:e7:41:79:eb:85:9a:5a:43:91:06:b2: 72:54:3c:ea:42:db:31:77:cc:66:8f:fb:fe:99:65:fe:6c:31: af:a1:ea:b7:73:8a:44:c5:09:a9:6b:69:f9:fa:8b:ff:dc:fd: 9f:75:d0:64:74:1e:12:fe:3c:79:f4:2f:81:7c:ed:b8:b2:38: d1:c2:28:c5:84:20:23:a7:2e:aa:01:1c:37:9e:60:6f:b3:d0: ad:0c:60:a7:6b:9b:0d:f0:df:9a:f5:e0:49:8d:17:de:36:42: 33:4d:40:33:bd:74:b2:33:6d:c6:b0:1d:5e:b3:63:43:53:33: e6:f0:11:8a:1f:97:f3:f2:79:75:07:d5:f3:9b:3c:67:58:32: 52:85:0d:ca:5b:cb:62:ab:cd:aa:9b:28:82:84:a1:c1:1e:d0: 55:43:a6:7f:06:f7:f5:07:08:96:a9:a9:bf:3c:30:a3:44:c0: 4c:e9:28:32:d3:24:4e:82:9f:cd:23:0d:51:11:c4:06:e3:72: b4:df:f4:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7IFGDACAiLdcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NmM4NDYxY2MtMDliNy00MTcyLWE3NmYtYTQ5MDE2MzllNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2prpuBmKLF5UC6pxc4nXyBWBP2bKY/BcU2p o8eeLLWq2Ugz+5Nkd8ol4OUCDQeAlgwBM1/PPNxRXMIcODp3nJ6A54bnmau9NoBI dukda+cCeoD7wiVEXCWk6ISVejFGNbA+3psKGdNMvBuR7bVeb2uHKlNeJBLN2EE4 xX/Y/PUT3V8rPCgGvWzyglr0ZI2MpsFAphe+rBkjX9YSjKxI8mMDVPZlLnr7HdV6 +hmLE7kMNSEoe92g5oXxa3E+x1EFDhx3fVRkjUdlHY+hKsXC5F7GPEZpYOTU4lF9 2YTSTLlMBl68PsVSQt8pLG/14mUKYQwQGahTPscSacriPk/+FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/VIROWH2ws1dQXLi/38SRyC/GQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI0MGQzMGItNjY3YS0z OGQ5LWJjYWMtNTc4NjIyY2JhMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIq6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWfY5rvWSLXfe2/+VPW8D+FPhY74tX5G6a5mhVsOFev0Ao0GBpDXS4x r4VrNewgXxYtmL3YnhC8FvqyxIHnQXnrhZpaQ5EGsnJUPOpC2zF3zGaP+/6ZZf5s Ma+h6rdzikTFCalrafn6i//c/Z910GR0HhL+PHn0L4F87biyONHCKMWEICOnLqoB HDeeYG+z0K0MYKdrmw3w35r14EmNF942QjNNQDO9dLIzbcawHV6zY0NTM+bwEYof l/PyeXUH1fObPGdYMlKFDcpby2KrzaqbKIKEocEe0FVDpn8G9/UHCJapqb88MKNE wEzpKDLTJE6Cn80jDVERxAbjcrTf9Ps= -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:43 2025 by rpki-client