$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa File: 585aab71-22e8-39eb-861f-fec76f1605ea.roa (raw, json) Hash identifier: JnBtt2AT09nNl6sHtWQKRHYKCuq6aFuy1LeOrL3E2uI= Subject key identifier: 94:45:C5:95:C5:FF:D2:54:8F:E2:98:CC:EC:38:4A:3A:60:FA:16:AC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A9A25562D171D4761048 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.133.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a9:a2:55:62:d1:71:d4:76:10:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=ad2c9d1a-5f90-4bda-81da-3d299d812a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:51:cf:d2:7e:0d:07:a0:cc:02:e4:b9:9e: fd:d8:c9:1a:c6:9e:1f:4d:a9:98:70:28:00:c4:cf: 63:90:a5:ce:6d:b2:92:a8:9b:32:d8:8f:1c:27:99: 46:4a:b6:6f:c4:56:13:cd:dd:18:f5:7f:66:b6:1b: 97:d7:c6:9c:09:f4:31:7e:a1:50:51:79:7b:aa:d7: 90:4f:8b:78:4f:57:47:77:49:ab:cd:17:f4:1b:87: c1:86:b4:fe:11:b5:20:59:f1:0e:73:9f:71:ef:06: f5:44:ea:a2:85:52:eb:56:e2:d7:27:39:93:c3:25: f5:16:5c:34:cd:a7:02:f9:c7:de:f2:82:66:9a:17: e7:2a:51:12:9c:3c:24:27:8b:3d:84:5a:4a:97:99: b6:e5:61:29:6a:0b:f2:a5:e4:f3:44:d3:26:23:00: 6b:81:9e:b2:d3:8e:c9:0e:0f:51:16:0e:73:2b:15: c1:5d:7d:b4:75:57:33:c5:59:51:4d:28:60:13:b1: 9b:31:45:6c:43:81:82:31:0e:54:4a:5a:96:e8:24: 8f:d4:d3:b4:18:d5:ad:ff:13:f5:d9:14:4a:49:a4: c1:8c:f2:61:ed:65:0d:f6:aa:bd:f9:c4:1c:05:4b: 87:4f:d3:81:1f:83:4d:c7:de:ad:08:fa:ec:c5:d0: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:45:C5:95:C5:FF:D2:54:8F:E2:98:CC:EC:38:4A:3A:60:FA:16:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:5b:fd:b2:da:68:83:67:17:42:95:eb:5f:d8:6c:3e:6e:3e: 08:e8:fc:d1:5c:71:52:1c:44:ed:41:93:49:62:d5:81:61:56: ea:7b:04:2d:e5:3e:47:74:b8:49:2d:d8:be:4e:ea:3d:58:91: b1:4e:07:48:34:d5:79:ad:c7:7c:2e:5c:1a:f7:ca:1c:f4:ae: 8f:fd:a9:17:8f:15:4f:ab:a4:c2:7b:06:74:10:95:7d:64:0f: 32:a6:5a:92:54:f1:d3:f3:d9:55:10:50:63:09:9a:08:d4:89: 31:33:05:49:d9:3e:00:af:4d:b0:eb:84:9c:4c:21:7e:60:ac: fe:a7:c1:4a:fa:1e:09:b1:6f:50:f5:06:3b:93:4e:08:f9:73: 1b:df:a1:70:0f:29:65:55:06:53:81:ab:6d:1c:e1:4d:11:40: 41:d3:df:f6:b5:be:9e:dd:99:18:99:87:27:47:eb:90:b9:01: 7c:51:13:65:91:94:65:98:80:63:ed:b5:eb:66:c8:34:b1:7d: 01:43:21:16:1d:c6:71:67:b7:3e:ae:8d:27:9d:52:26:fa:e5: 62:aa:87:d7:32:87:d5:97:fa:d5:46:30:f8:c5:67:00:8c:f8: 58:d6:3f:dd:35:b2:8d:be:a5:be:b6:72:c0:89:4b:8b:4a:20: 07:dc:88:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6miVWLRcdR2EEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YWQyYzlkMWEtNWY5MC00YmRhLTgxZGEtM2QyOTlkODEyYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOZRz9J+DQegzALkuZ792Mkaxp4fTamYcCgA xM9jkKXObbKSqJsy2I8cJ5lGSrZvxFYTzd0Y9X9mthuX18acCfQxfqFQUXl7qteQ T4t4T1dHd0mrzRf0G4fBhrT+EbUgWfEOc59x7wb1ROqihVLrVuLXJzmTwyX1Flw0 zacC+cfe8oJmmhfnKlESnDwkJ4s9hFpKl5m25WEpagvypeTzRNMmIwBrgZ6y047J Dg9RFg5zKxXBXX20dVczxVlRTShgE7GbMUVsQ4GCMQ5USlqW6CSP1NO0GNWt/xP1 2RRKSaTBjPJh7WUN9qq9+cQcBUuHT9OBH4NNx96tCPrsxdB9ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRFxZXF/9JUj+KYzOw4Sjpg+hasMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg1YWFiNzEtMjJlOC0z OWViLTg2MWYtZmVjNzZmMTYwNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlb/bLaaINnF0KV61/YbD5uPgjo/NFccVIcRO1Bk0li1YFhVup7BC3l Pkd0uEkt2L5O6j1YkbFOB0g01Xmtx3wuXBr3yhz0ro/9qRePFU+rpMJ7BnQQlX1k DzKmWpJU8dPz2VUQUGMJmgjUiTEzBUnZPgCvTbDrhJxMIX5grP6nwUr6Hgmxb1D1 BjuTTgj5cxvfoXAPKWVVBlOBq20c4U0RQEHT3/a1vp7dmRiZhydH65C5AXxRE2WR lGWYgGPttetmyDSxfQFDIRYdxnFntz6ujSedUib65WKqh9cyh9WX+tVGMPjFZwCM +FjWP901so2+pb62csCJS4tKIAfciBo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:22 2025 by rpki-client