$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa File: 3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa (raw, json) Hash identifier: uJ4+gG7ldsiMc+RSR5epOlqZnGrGVl5fGgeQJJ20xx4= Subject key identifier: C1:22:C7:B2:3E:25:DB:DD:9D:4C:38:99:24:8E:CB:40:D5:61:FC:64 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976058C73BC63B49465C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.95.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:60:58:c7:3b:c6:3b:49:46:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5da8bb83-f912-4a9a-9303-b8c7d5bf605f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:93:fb:94:4a:de:cc:77:41:dc:0f:2d:4a: 60:de:53:f0:17:a6:02:ee:4e:50:1e:2a:75:08:1a: 0f:f1:92:04:1b:36:53:22:44:40:3b:32:0c:ff:9e: c0:27:cb:d6:31:55:b5:43:81:14:dd:ea:d2:9c:6f: 25:be:3b:3e:98:a2:82:d2:2f:47:5d:38:b2:c3:fc: ef:17:9d:f3:71:fc:f4:4f:6d:7e:b7:8d:58:75:50: e2:2a:e1:e8:ed:c4:b3:79:81:e9:59:7b:84:e1:3b: 96:ba:f4:50:81:06:7f:0d:b3:99:c9:92:0a:eb:49: c0:77:e9:7e:96:c1:82:09:c6:a4:69:a6:57:73:ea: 5e:72:45:82:22:11:f7:13:16:b4:11:d4:14:6d:11: 04:f6:37:ef:35:b3:7b:d3:c3:20:6e:95:d1:e7:60: 4c:8b:7f:b3:12:e4:ac:cd:23:90:b7:5d:c5:17:4e: 4a:3f:0c:ee:71:97:a5:6a:cd:1e:6e:ae:26:9b:43: df:14:04:3c:52:42:a7:52:6e:7f:d0:ff:e6:8c:e7: 9b:ec:77:e8:52:e8:34:6c:ec:a5:e3:b0:f2:65:7b: 85:03:a6:aa:4e:d6:6e:50:19:0d:9d:fb:82:41:d1: 6b:e6:80:a0:38:5d:ca:95:7e:5a:f1:49:95:49:46: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:22:C7:B2:3E:25:DB:DD:9D:4C:38:99:24:8E:CB:40:D5:61:FC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:56:b9:a5:13:39:12:7b:dc:25:7d:2f:00:cb:d0:49:7a:2d: 74:bc:6f:b9:0f:9f:44:0c:93:69:51:35:c3:05:2e:5d:67:5b: da:af:01:e6:c4:6a:ff:13:d1:f8:96:06:32:51:be:fb:69:51: ab:9f:47:a4:a8:89:f8:7d:d2:2f:c9:5e:d0:0d:7a:0d:83:36: 82:1b:91:22:84:aa:19:7b:80:25:80:0f:b2:c4:91:25:4e:be: ea:30:f2:31:55:76:b9:75:98:fb:95:b6:c0:be:38:9c:07:a6: dd:71:db:73:05:c3:b3:7e:e7:08:8a:3c:f5:ca:65:4a:e9:bf: 64:8a:35:f3:0b:83:7b:70:04:5f:c9:4e:b4:40:5a:1b:65:a3: 0d:f1:41:41:5d:27:ff:c6:d6:28:5a:da:e2:f2:7e:b0:f3:da: 03:10:04:07:d1:30:29:d2:b7:79:26:a4:57:73:ce:70:9d:16: 30:12:a6:59:e1:23:ec:00:5c:52:24:e6:38:be:fe:a7:56:9d: c4:8b:d1:dc:cd:e9:a4:ec:63:fa:6f:cb:23:31:a8:26:7f:bf: 04:40:aa:de:40:b7:42:2c:71:b2:b4:d4:74:2a:b5:f4:3e:cf: db:20:98:59:95:1e:b6:d7:23:f6:52:05:fc:f5:7a:53:c2:6e: 56:7f:fc:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2BYxzvGO0lGXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NWRhOGJiODMtZjkxMi00YTlhLTkzMDMtYjhjN2Q1YmY2MDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsmT+5RK3sx3QdwPLUpg3lPwF6YC7k5QHip1 CBoP8ZIEGzZTIkRAOzIM/57AJ8vWMVW1Q4EU3erSnG8lvjs+mKKC0i9HXTiyw/zv F53zcfz0T21+t41YdVDiKuHo7cSzeYHpWXuE4TuWuvRQgQZ/DbOZyZIK60nAd+l+ lsGCCcakaaZXc+peckWCIhH3Exa0EdQUbREE9jfvNbN708MgbpXR52BMi3+zEuSs zSOQt13FF05KPwzucZelas0ebq4mm0PfFAQ8UkKnUm5/0P/mjOeb7HfoUug0bOyl 47DyZXuFA6aqTtZuUBkNnfuCQdFr5oCgOF3KlX5a8UmVSUYgBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEix7I+JdvdnUw4mSSOy0DVYfxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Y1NTk3YTktM2E1YS0z YjYxLTgzZDItMGE4MjNiYzA5NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpWuaUTORJ73CV9LwDL0El6LXS8b7kPn0QMk2lRNcMFLl1nW9qvAebE av8T0fiWBjJRvvtpUaufR6Soifh90i/JXtANeg2DNoIbkSKEqhl7gCWAD7LEkSVO vuow8jFVdrl1mPuVtsC+OJwHpt1x23MFw7N+5wiKPPXKZUrpv2SKNfMLg3twBF/J TrRAWhtlow3xQUFdJ//G1iha2uLyfrDz2gMQBAfRMCnSt3kmpFdzznCdFjASplnh I+wAXFIk5ji+/qdWncSL0dzN6aTsY/pvyyMxqCZ/vwRAqt5At0IscbK01HQqtfQ+ z9sgmFmVHrbXI/ZSBfz1elPCblZ//Ls= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:44 2025 by rpki-client