$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ae4aad7-d386-3522-8e8d-d6ab5ffbf629.roa File: 4ae4aad7-d386-3522-8e8d-d6ab5ffbf629.roa (raw, json) Hash identifier: Fj45nuYqpbzqBJncHWXhU3c/4B+DceqJMdtBUcdFmLo= Subject key identifier: 85:BA:1C:35:5A:E8:27:A2:86:0B:42:5D:CC:60:7E:84:E7:C5:F9:97 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B029453F34A0C7C3DF7C84300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ae4aad7-d386-3522-8e8d-d6ab5ffbf629.roa Signing time: Thu 28 Aug 2025 20:38:11 +0000 ROA not before: Thu 28 Aug 2025 20:38:11 +0000 ROA not after: Wed 26 Nov 2025 21:38:11 +0000 asID: 396982 IP address blocks: 34.128.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:94:53:f3:4a:0c:7c:3d:f7:c8:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 28 20:38:11 2025 GMT Not After : Nov 26 21:38:11 2025 GMT Subject: CN=a75a7fe2-4bbb-4b23-bed0-d7cbe1ab62d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:03:e1:1d:99:07:7e:af:f8:6a:0a:6b:dd:25: d4:2b:b3:e0:65:f1:d4:5e:08:8a:d3:6f:c9:0a:e9: 1a:56:ba:4b:9e:1a:ae:4c:b2:2b:f1:ae:87:4c:7a: 3d:7c:8b:fb:bb:23:b3:be:ba:01:79:4f:36:f4:66: 9b:2b:9f:9c:a4:24:30:a6:56:00:05:e3:12:a1:ff: 0e:de:96:ed:61:33:cd:b5:07:e3:36:d0:9a:b3:3c: e9:85:d3:cc:db:b0:69:d7:a0:c6:6f:1a:bf:60:8f: 39:69:39:a1:24:be:30:27:ee:fd:1e:62:67:e9:e8: c6:d5:22:c9:dc:38:39:7e:21:8d:f6:a4:2a:20:20: d5:5c:c9:db:72:38:68:37:26:ae:64:a3:c2:b9:05: ba:26:e5:25:88:1a:29:5d:90:0d:e1:8f:8a:60:67: 5a:a6:4e:07:b1:9c:db:ac:66:d7:ac:74:68:b1:f6: 07:9e:97:1b:e1:6c:6d:27:c7:e8:8e:87:44:c0:2f: d5:82:d9:df:18:68:32:1b:ed:27:82:59:80:56:8f: f6:50:61:a1:d0:52:b6:5b:36:30:22:a4:a8:21:0e: 8c:36:0b:ec:57:41:0a:6b:46:d0:dd:96:9a:85:f2: db:e8:92:ce:60:57:55:76:f1:d6:89:ce:a4:01:ed: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BA:1C:35:5A:E8:27:A2:86:0B:42:5D:CC:60:7E:84:E7:C5:F9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ae4aad7-d386-3522-8e8d-d6ab5ffbf629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:61:ea:d1:1c:7b:14:0b:3e:98:37:3c:ac:f1:81:5d:e5:4b: ba:88:19:ca:9d:ad:3a:25:1d:a9:17:77:70:64:af:c0:c9:2a: 39:23:b9:34:6a:6a:85:c0:01:69:b8:ad:31:05:3f:14:0b:ff: bb:22:a0:4b:2e:42:ef:76:b5:23:2b:8d:d5:7e:be:4e:ae:51: 47:ab:72:f0:b9:a3:93:4b:99:3e:6d:a8:b5:c7:e9:e7:00:90: 38:66:df:da:4f:5b:e4:17:38:d3:21:e5:98:fe:f2:b0:30:14: 74:b7:c6:c6:47:28:0e:8f:74:be:6b:a1:6a:7c:2c:02:c0:03: ef:a3:33:f5:bd:a9:c1:60:d1:59:3b:2a:f8:43:93:10:cc:38: 53:5f:1a:41:8a:50:00:42:8e:2c:16:81:fd:78:ad:53:d0:63: 62:8d:e1:15:4e:89:d0:03:78:09:c1:90:86:52:ac:53:7d:77: c3:33:0f:2c:67:2b:a3:5a:54:fc:7e:a2:45:6c:c9:fa:47:61: cd:01:1c:3c:71:20:28:89:c8:39:4c:c6:fa:eb:f5:c1:f1:02: 62:4a:f9:94:3d:18:e5:58:39:50:11:78:e3:08:d7:28:01:b2: 4e:ab:8d:5e:a0:1e:02:85:2a:b9:b0:a9:e0:33:50:40:c5:34: 21:77:f2:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsClFPzSgx8PffIQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgyODIwMzgxMVoXDTI1MTEyNjIxMzgxMVowLzEtMCsGA1UEAxMk YTc1YTdmZTItNGJiYi00YjIzLWJlZDAtZDdjYmUxYWI2MmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAPhHZkHfq/4agpr3SXUK7PgZfHUXgiK02/J CukaVrpLnhquTLIr8a6HTHo9fIv7uyOzvroBeU829GabK5+cpCQwplYABeMSof8O 3pbtYTPNtQfjNtCaszzphdPM27Bp16DGbxq/YI85aTmhJL4wJ+79HmJn6ejG1SLJ 3Dg5fiGN9qQqICDVXMnbcjhoNyauZKPCuQW6JuUliBopXZAN4Y+KYGdapk4HsZzb rGbXrHRosfYHnpcb4WxtJ8fojodEwC/VgtnfGGgyG+0nglmAVo/2UGGh0FK2WzYw IqSoIQ6MNgvsV0EKa0bQ3ZaahfLb6JLOYFdVdvHWic6kAe3ZtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW6HDVa6CeihgtCXcxgfoTnxfmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGFlNGFhZDctZDM4Ni0z NTIyLThlOGQtZDZhYjVmZmJmNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNh6tEcexQLPpg3PKzxgV3lS7qIGcqdrTolHakXd3Bkr8DJKjkjuTRq aoXAAWm4rTEFPxQL/7sioEsuQu92tSMrjdV+vk6uUUercvC5o5NLmT5tqLXH6ecA kDhm39pPW+QXONMh5Zj+8rAwFHS3xsZHKA6PdL5roWp8LALAA++jM/W9qcFg0Vk7 KvhDkxDMOFNfGkGKUABCjiwWgf14rVPQY2KN4RVOidADeAnBkIZSrFN9d8MzDyxn K6NaVPx+okVsyfpHYc0BHDxxICiJyDlMxvrr9cHxAmJK+ZQ9GOVYOVAReOMI1ygB sk6rjV6gHgKFKrmwqeAzUEDFNCF38nU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:34:42 2025 by rpki-client