$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e26fe94-a749-36a3-8d69-3c0946423e7e.roa File: 7e26fe94-a749-36a3-8d69-3c0946423e7e.roa (raw, json) Hash identifier: jthBkAUajWPM6+SO988wVEfm/yxrt1wQC6kyjfiSj8I= Subject key identifier: 5F:7A:92:C2:2A:98:E1:38:BC:18:73:6D:3F:F7:97:0F:05:FB:08:17 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B2A2C224D52E936AB3F9E9280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e26fe94-a749-36a3-8d69-3c0946423e7e.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 19527 IP address blocks: 34.3.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:22:4d:52:e9:36:ab:3f:9e:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=99c6bbd0-bc44-4bbc-8a73-3a38fb0d464f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:90:4e:7f:bb:66:53:83:3c:52:ba:01:c2: ac:12:21:ea:59:69:6b:03:e1:37:50:c0:49:2d:82: 1a:9a:1a:81:63:c8:d5:14:62:5b:30:50:a1:0b:b4: 06:82:1d:ae:6c:0d:5c:a2:4a:bf:55:3d:86:3a:74: 79:6a:5f:cd:7c:24:db:ca:8f:cc:38:cb:c9:d8:99: db:d4:14:51:22:26:75:5f:d5:c0:d9:4a:98:c4:c2: 17:83:e8:63:5f:c3:4f:7e:df:06:47:ec:00:54:1d: 85:b5:2e:3e:63:97:11:c7:d0:50:9d:07:e7:a6:8a: 8e:30:ac:e8:5b:50:40:93:18:5f:07:b6:78:60:7f: 08:27:f8:77:36:80:5b:48:92:86:48:54:b0:42:3c: 85:5d:20:8c:c3:40:ed:06:04:ec:f9:a8:31:d3:e8: 1c:8f:ef:91:5e:65:dd:33:f4:d2:73:0d:cc:ba:9b: 2d:db:41:a1:48:89:9a:64:4b:a3:32:cb:30:4c:a7: 10:04:8d:95:44:d6:f2:43:37:cc:ed:ca:d4:d9:1e: 71:53:80:49:56:ea:82:77:43:d9:66:f0:a8:cc:0e: af:f8:9c:2b:5c:b8:a8:e7:71:7d:f0:b4:c6:5a:d7: 06:dd:ba:c3:69:24:a8:37:b7:05:e6:f0:aa:cc:86: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7A:92:C2:2A:98:E1:38:BC:18:73:6D:3F:F7:97:0F:05:FB:08:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7e26fe94-a749-36a3-8d69-3c0946423e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5f:a0:de:58:73:f4:e2:6f:59:9f:51:a2:d3:8d:f4:fc:9c: 6c:b9:f0:82:5b:32:c6:73:c2:a7:f1:73:60:86:76:04:ac:02: e8:cc:e8:84:8e:fe:31:4c:fe:dc:8d:03:10:e6:25:9a:d8:c1: c2:bd:a1:a3:53:a1:bc:a5:6c:12:49:b8:59:07:d6:61:f2:2a: 9d:86:8d:cf:3c:cf:77:bb:77:5f:4e:82:88:04:f3:0b:d4:1d: 0d:b2:08:a8:b0:c1:62:e9:34:95:bc:e4:b5:65:15:d0:34:07: 42:d4:8b:11:67:0d:1f:5d:c6:74:b6:ab:61:4e:8d:cf:09:71: bc:37:c2:48:35:50:9b:83:96:aa:06:c7:91:43:9b:23:93:58: 36:f9:36:82:ec:79:43:58:78:b9:ed:4c:77:24:64:1d:15:0b: 2e:66:e7:d0:cb:59:af:f9:b5:c8:c9:ac:70:ea:ce:9e:e8:df: fe:9d:0a:c0:0e:3e:e5:da:47:3b:56:51:27:d8:36:09:b7:ea: e1:ec:04:c9:29:9e:ba:85:1f:b3:3c:06:20:4c:ee:48:e0:20: d8:cf:d9:8a:30:8c:8b:e3:1f:fc:0a:0e:13:3f:a4:3e:c8:5b: 00:ff:93:c9:1c:c2:37:ea:2c:69:64:48:4a:98:d5:2b:b7:9d: f8:be:58:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCJNUuk2qz+ekoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk OTljNmJiZDAtYmM0NC00YmJjLThhNzMtM2EzOGZiMGQ0NjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5qQTn+7ZlODPFK6AcKsEiHqWWlrA+E3UMBJ LYIamhqBY8jVFGJbMFChC7QGgh2ubA1cokq/VT2GOnR5al/NfCTbyo/MOMvJ2Jnb 1BRRIiZ1X9XA2UqYxMIXg+hjX8NPft8GR+wAVB2FtS4+Y5cRx9BQnQfnpoqOMKzo W1BAkxhfB7Z4YH8IJ/h3NoBbSJKGSFSwQjyFXSCMw0DtBgTs+agx0+gcj++RXmXd M/TScw3Mupst20GhSImaZEujMsswTKcQBI2VRNbyQzfM7crU2R5xU4BJVuqCd0PZ ZvCozA6v+JwrXLio53F98LTGWtcG3brDaSSoN7cF5vCqzIZEfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF96ksIqmOE4vBhzbT/3lw8F+wgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2UyNmZlOTQtYTc0OS0z NmEzLThkNjktM2MwOTQ2NDIzZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdfoN5Yc/Tib1mfUaLTjfT8nGy58IJbMsZzwqfxc2CGdgSsAujM6ISO /jFM/tyNAxDmJZrYwcK9oaNTobylbBJJuFkH1mHyKp2Gjc88z3e7d19OgogE8wvU HQ2yCKiwwWLpNJW85LVlFdA0B0LUixFnDR9dxnS2q2FOjc8Jcbw3wkg1UJuDlqoG x5FDmyOTWDb5NoLseUNYeLntTHckZB0VCy5m59DLWa/5tcjJrHDqzp7o3/6dCsAO PuXaRztWUSfYNgm36uHsBMkpnrqFH7M8BiBM7kjgINjP2YowjIvjH/wKDhM/pD7I WwD/k8kcwjfqLGlkSEqY1Su3nfi+WPA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:15 2025 by rpki-client