$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fa0bc09-ab0f-300d-a3b2-6ace9f339e93.roa File: 5fa0bc09-ab0f-300d-a3b2-6ace9f339e93.roa (raw, json) Hash identifier: rGzN2eTN+GKBE9yd0WAFpCbaXvoyFVxGsa6TCkLdX5k= Subject key identifier: 55:3A:9A:6D:D3:2D:71:53:A4:71:62:FD:88:AC:A6:A4:91:A2:A0:43 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B864CB455246F213B8C0D8D40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fa0bc09-ab0f-300d-a3b2-6ace9f339e93.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 139070 IP address blocks: 34.190.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b4:55:24:6f:21:3b:8c:0d:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=e0ae672d-f5b2-4a1d-97b3-8ea51c7b1c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0c:e5:5e:1b:e1:8b:40:90:b7:c8:83:cc:c9: 81:3a:21:52:f2:ad:38:09:b5:f8:77:07:d9:15:d9: 0f:89:09:d8:e8:4d:f3:86:18:d3:89:93:c8:4a:34: 3d:e1:e8:f2:32:fa:9b:93:c2:c6:65:7e:a5:b4:d6: 62:e9:6a:e0:a1:01:97:12:a9:bd:14:b0:59:38:d9: 3d:a9:6a:23:28:52:08:1e:b4:c0:b6:a8:f7:09:d5: 6f:15:6b:b1:3e:2a:b8:54:7c:04:72:3b:af:52:cb: f0:ee:91:4c:19:69:07:20:6f:3a:22:29:2a:3a:e5: 40:26:e4:30:5b:90:47:dd:8e:24:45:56:ad:5c:cb: 08:7e:3d:08:c3:0d:cf:85:4b:44:5c:20:31:b9:6c: 67:24:76:5a:18:9b:ce:70:42:19:e8:d1:61:f3:61: 4b:2c:e1:41:78:39:83:30:8b:d7:85:30:57:32:c5: 72:0e:e2:52:93:6d:68:8b:34:78:1d:2f:d6:ab:04: d8:0e:19:9f:4f:a5:03:1a:a5:68:7d:bf:a6:cd:6e: ab:3d:54:d3:ac:94:5d:f5:af:9c:99:f1:2e:6f:fb: 3c:ea:a7:de:14:19:ab:f8:c2:c4:72:e5:3a:33:d0: ef:90:55:aa:68:ba:c9:34:e6:0c:05:37:12:bf:ab: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3A:9A:6D:D3:2D:71:53:A4:71:62:FD:88:AC:A6:A4:91:A2:A0:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fa0bc09-ab0f-300d-a3b2-6ace9f339e93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:11:5c:60:a6:3c:b9:eb:4e:15:49:e5:3c:4e:47:0f:55:0a: 24:ac:55:09:72:92:fa:f2:be:b3:59:54:d4:67:02:41:61:c8: de:fd:81:5a:35:67:5d:ea:ff:8a:ef:65:92:37:b2:d0:e2:1d: 55:49:d9:e6:7a:5e:1a:34:7f:7d:5e:6d:2b:c8:1e:46:b9:08: 74:78:8e:4c:da:fb:25:8b:20:d7:dc:e2:7b:cf:20:ea:2b:f4: 3e:b4:79:ad:47:78:0b:f6:76:64:64:53:6b:64:7c:5a:42:57: b7:c1:11:1b:32:a1:1b:02:b1:c8:22:03:9b:ce:48:ae:62:3a: 8d:c3:7f:ff:9c:6b:31:62:a3:d6:9c:9c:6f:cc:4f:7c:e9:70: ab:d9:c1:c6:a7:64:9d:12:b0:d3:3e:3d:b2:7f:49:c9:37:51: c4:da:0b:91:9b:75:af:a0:bf:01:80:6c:70:34:da:20:11:7d: 6b:43:02:6b:03:85:56:74:0d:20:48:bb:ab:2e:66:43:cb:2c: 25:07:d3:f8:15:ae:33:b5:ea:fb:01:9e:1d:3a:4a:0e:3f:56: 8c:43:50:c8:78:d0:57:2f:21:86:5e:2c:4e:20:53:cf:e4:94: 77:3f:d3:0c:e8:11:8f:4b:d4:6f:ae:d6:36:d4:ae:d7:85:47: 33:77:3c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTLRVJG8hO4wNjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk ZTBhZTY3MmQtZjViMi00YTFkLTk3YjMtOGVhNTFjN2IxYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQzlXhvhi0CQt8iDzMmBOiFS8q04CbX4dwfZ FdkPiQnY6E3zhhjTiZPISjQ94ejyMvqbk8LGZX6ltNZi6WrgoQGXEqm9FLBZONk9 qWojKFIIHrTAtqj3CdVvFWuxPiq4VHwEcjuvUsvw7pFMGWkHIG86IikqOuVAJuQw W5BH3Y4kRVatXMsIfj0Iww3PhUtEXCAxuWxnJHZaGJvOcEIZ6NFh82FLLOFBeDmD MIvXhTBXMsVyDuJSk21oizR4HS/WqwTYDhmfT6UDGqVofb+mzW6rPVTTrJRd9a+c mfEub/s86qfeFBmr+MLEcuU6M9DvkFWqaLrJNOYMBTcSv6uu3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU6mm3TLXFTpHFi/YispqSRoqBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZhMGJjMDktYWIwZi0z MDBkLWEzYjItNmFjZTlmMzM5ZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgRXGCmPLnrThVJ5TxORw9VCiSsVQlykvryvrNZVNRnAkFhyN79gVo1 Z13q/4rvZZI3stDiHVVJ2eZ6Xho0f31ebSvIHka5CHR4jkza+yWLINfc4nvPIOor 9D60ea1HeAv2dmRkU2tkfFpCV7fBERsyoRsCscgiA5vOSK5iOo3Df/+cazFio9ac nG/MT3zpcKvZwcanZJ0SsNM+PbJ/Sck3UcTaC5Gbda+gvwGAbHA02iARfWtDAmsD hVZ0DSBIu6suZkPLLCUH0/gVrjO16vsBnh06Sg4/VoxDUMh40FcvIYZeLE4gU8/k lHc/0wzoEY9L1G+u1jbUrteFRzN3PAI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:29 2025 by rpki-client