$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81c89afc-5b29-3f9c-89d8-f47b5852725e.roa File: 81c89afc-5b29-3f9c-89d8-f47b5852725e.roa (raw, json) Hash identifier: +aGx/1CM4yA5epnSC9JY9nKTix/6MFdmxBkiVDUXcUs= Subject key identifier: BE:87:96:CF:C9:53:C5:D1:C9:57:21:58:F0:A1:B5:E1:16:BF:A3:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B33F1A0F75F1603EFCD883E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81c89afc-5b29-3f9c-89d8-f47b5852725e.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 19527 IP address blocks: 34.2.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a0:f7:5f:16:03:ef:cd:88:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=306a3d26-aecd-4302-a9e6-1fd89df8ba29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:a1:10:77:23:6b:ff:3b:d1:a0:92:22:f1: 83:ef:41:e3:f2:75:49:65:9b:9f:55:65:81:b0:50: 8a:4b:19:2b:dc:77:d5:16:ab:e1:3f:b2:3a:3f:da: 84:2a:c3:d8:e8:4d:cd:b1:bd:0f:f9:9e:6e:87:c6: 5f:c4:3f:30:ea:b0:66:a9:d1:e7:39:a6:5d:58:ff: 1f:65:b8:71:ad:e0:7f:c5:17:16:5b:30:8f:90:01: 8c:6a:8d:59:b0:9a:97:15:32:0e:2b:0c:cf:7f:13: 21:f4:9f:83:7c:34:f4:d9:e5:9e:16:a8:27:39:b8: f7:dd:b5:01:65:cb:46:87:7b:fd:76:8a:85:b0:61: d3:ae:41:ca:6e:77:ac:61:7b:d0:00:fe:9e:ab:a2: b2:75:67:50:77:03:78:2c:72:44:1d:2e:50:38:e3: cb:08:49:97:8f:6d:50:42:83:da:71:fb:48:8e:4c: 9f:5b:8e:2d:82:90:3e:54:55:80:dd:7b:48:df:2a: a7:bc:10:3d:34:57:55:cd:67:8d:02:3a:df:e6:44: 29:a5:79:4d:4f:01:42:b9:f6:bf:9f:d9:eb:a6:7e: 33:81:35:ca:a2:e1:d3:69:06:dc:73:4f:64:84:70: 63:66:b8:a8:16:48:92:95:9d:66:c6:38:2f:9b:ec: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:87:96:CF:C9:53:C5:D1:C9:57:21:58:F0:A1:B5:E1:16:BF:A3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81c89afc-5b29-3f9c-89d8-f47b5852725e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fe:db:f8:1f:3f:29:fe:c5:5c:98:1f:47:bf:4c:21:77:cb: b4:f6:ee:f6:c6:72:be:da:f5:d2:49:0a:e1:c3:5f:58:f5:a8: ab:45:94:dc:e5:c7:27:50:3b:4c:ac:c8:6d:17:03:eb:e9:9d: 95:8e:75:06:f7:a7:3a:79:00:5c:40:14:17:f5:39:66:31:4a: 58:59:e2:77:fc:ef:aa:e1:1f:05:7f:c4:19:24:80:9c:be:e9: 61:db:84:14:ca:04:cd:8e:5f:75:8d:aa:48:0f:5f:77:ee:30: 39:85:91:bb:15:95:39:b3:80:ea:e6:1d:ce:89:da:5c:ca:c8: c9:96:6e:43:5e:7d:53:56:b4:82:89:a8:72:f3:ab:08:6d:0c: 0f:28:f5:4c:ac:48:99:4e:1e:0f:31:2f:db:07:a2:c8:06:1d: 16:41:e7:f3:fb:f0:12:d1:0c:f7:1c:d6:7c:3b:56:ec:8f:18: f5:07:6b:71:2f:c2:cf:97:c8:94:6c:1c:f9:72:e5:91:52:51: a9:40:10:80:36:c5:f6:85:ce:94:d9:7e:04:46:15:d2:8d:4e: ad:2d:50:4b:11:89:fb:7c:04:a2:cb:30:7f:39:b4:09:60:1e: c7:70:fc:9a:c1:11:69:04:49:07:18:a5:46:89:a1:5b:f9:1d: b1:a0:2e:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aD3XxYD782IPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk MzA2YTNkMjYtYWVjZC00MzAyLWE5ZTYtMWZkODlkZjhiYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaqhEHcja/870aCSIvGD70Hj8nVJZZufVWWB sFCKSxkr3HfVFqvhP7I6P9qEKsPY6E3Nsb0P+Z5uh8ZfxD8w6rBmqdHnOaZdWP8f ZbhxreB/xRcWWzCPkAGMao1ZsJqXFTIOKwzPfxMh9J+DfDT02eWeFqgnObj33bUB ZctGh3v9doqFsGHTrkHKbnesYXvQAP6eq6KydWdQdwN4LHJEHS5QOOPLCEmXj21Q QoPacftIjkyfW44tgpA+VFWA3XtI3yqnvBA9NFdVzWeNAjrf5kQppXlNTwFCufa/ n9nrpn4zgTXKouHTaQbcc09khHBjZrioFkiSlZ1mxjgvm+ygoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6Hls/JU8XRyVchWPChteEWv6MjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODFjODlhZmMtNWIyOS0z ZjljLTg5ZDgtZjQ3YjU4NTI3MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn+2/gfPyn+xVyYH0e/TCF3y7T27vbGcr7a9dJJCuHDX1j1qKtFlNzl xydQO0ysyG0XA+vpnZWOdQb3pzp5AFxAFBf1OWYxSlhZ4nf876rhHwV/xBkkgJy+ 6WHbhBTKBM2OX3WNqkgPX3fuMDmFkbsVlTmzgOrmHc6J2lzKyMmWbkNefVNWtIKJ qHLzqwhtDA8o9UysSJlOHg8xL9sHosgGHRZB5/P78BLRDPcc1nw7VuyPGPUHa3Ev ws+XyJRsHPly5ZFSUalAEIA2xfaFzpTZfgRGFdKNTq0tUEsRift8BKLLMH85tAlg Hsdw/JrBEWkESQcYpUaJoVv5HbGgLh4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:39 2025 by rpki-client