$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa File: 8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa (raw, json) Hash identifier: isavdn8LFEKyeQ8uQUtFHx3+cpvoCFRtUHbKZ7EjCzA= Subject key identifier: 93:CC:FA:73:14:A5:24:B2:58:ED:E4:48:95:23:2A:4D:6B:C2:A3:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B72C1EFA1EDCE52062CA80600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 19527 IP address blocks: 34.0.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:ef:a1:ed:ce:52:06:2c:a8:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=cc390fe5-af38-4cb4-abc2-0469fbb18a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:73:bb:04:5b:95:9a:8b:56:c0:bf:e1:b5: 96:c2:c3:11:f6:03:69:ef:97:87:f8:3d:9c:a0:a1: 28:8b:e1:92:97:3a:19:ab:5d:f0:92:eb:47:79:e7: ad:09:a7:12:6c:39:44:33:9f:dc:47:7b:9f:f7:cf: e0:4e:cd:59:96:c1:91:04:51:61:12:72:95:d4:c6: 88:29:63:d9:fe:3d:f5:be:f6:50:c9:8f:57:8d:ca: 13:31:96:fe:35:74:a2:85:e9:98:45:d4:52:6f:f2: 24:d1:88:c9:c2:b9:24:fb:45:dc:a3:86:bd:70:41: fe:b0:10:a2:02:4b:e7:52:02:55:a0:cd:53:7c:b8: 31:82:07:73:35:42:7e:3e:1d:7f:0d:cd:a8:26:66: 14:d2:57:24:46:60:5d:39:ce:24:c4:0a:fd:69:11: f1:5f:52:18:d3:49:9a:45:e3:e6:6a:73:62:bf:59: 09:0b:c7:b8:ab:41:8c:fb:a5:b5:a6:e6:bb:c1:fb: 77:a0:42:02:38:a6:7b:61:76:4e:90:0e:54:01:72: e6:28:e0:44:f2:19:c0:d7:94:0d:d9:94:d8:f1:04: f2:45:12:20:50:18:dd:80:8e:82:96:30:a2:e8:ba: 69:5a:a1:ef:61:68:1d:38:75:db:48:09:61:4b:37: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CC:FA:73:14:A5:24:B2:58:ED:E4:48:95:23:2A:4D:6B:C2:A3:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9b:45:35:fb:29:55:1e:f6:1f:fb:dd:98:06:74:e8:8c:f6: ed:63:23:bd:f2:86:e2:cb:20:b7:75:22:99:79:49:01:a8:90: 0b:37:3c:f6:3a:14:7e:cb:57:1a:15:34:12:a3:3b:a6:41:4a: 83:e1:08:77:6a:c3:24:35:6b:e4:6d:73:64:c9:81:1f:63:f4: 8d:51:1b:f9:b6:37:c6:ad:a1:09:4c:80:8c:09:57:e6:00:2d: 33:36:95:e5:2b:f3:bb:67:0e:98:17:33:10:b0:96:0e:db:ad: 4b:83:d9:2c:d3:7b:13:a7:5a:15:7f:cc:b3:ca:82:b3:8c:32: 02:56:de:d4:40:35:eb:58:70:51:1b:13:bc:07:4f:3a:20:d5: 61:71:71:87:27:8b:5b:84:28:dd:bd:8c:39:df:ca:a4:b9:d5: 5b:3d:97:1b:83:55:0c:53:47:48:de:49:b7:bc:d8:bf:3e:06: ac:f8:25:8e:5b:15:3a:90:a1:0d:5b:ac:55:12:1d:48:b7:db: 0e:55:0b:e1:e9:d3:7e:6b:a4:ca:59:84:55:6e:67:6e:85:63: d0:4f:d6:28:bb:77:c9:19:b4:09:15:76:8d:78:8e:0f:79:04: b3:9e:14:c1:a0:1c:42:72:19:3c:14:ff:2f:5a:b8:08:c6:fb: e6:5d:4b:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywe+h7c5SBiyoBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk Y2MzOTBmZTUtYWYzOC00Y2I0LWFiYzItMDQ2OWZiYjE4YTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfdzuwRblZqLVsC/4bWWwsMR9gNp75eH+D2c oKEoi+GSlzoZq13wkutHeeetCacSbDlEM5/cR3uf98/gTs1ZlsGRBFFhEnKV1MaI KWPZ/j31vvZQyY9XjcoTMZb+NXSihemYRdRSb/Ik0YjJwrkk+0Xco4a9cEH+sBCi AkvnUgJVoM1TfLgxggdzNUJ+Ph1/Dc2oJmYU0lckRmBdOc4kxAr9aRHxX1IY00ma RePmanNiv1kJC8e4q0GM+6W1pua7wft3oEICOKZ7YXZOkA5UAXLmKOBE8hnA15QN 2ZTY8QTyRRIgUBjdgI6CljCi6LppWqHvYWgdOHXbSAlhSze0hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPM+nMUpSSyWO3kSJUjKk1rwqNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGI2NzdkMmYtN2QyZi0z ZjQwLWI4MDYtN2JmNDFmZjFkMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHubRTX7KVUe9h/73ZgGdOiM9u1jI73yhuLLILd1Ipl5SQGokAs3PPY6 FH7LVxoVNBKjO6ZBSoPhCHdqwyQ1a+Rtc2TJgR9j9I1RG/m2N8atoQlMgIwJV+YA LTM2leUr87tnDpgXMxCwlg7brUuD2SzTexOnWhV/zLPKgrOMMgJW3tRANetYcFEb E7wHTzog1WFxcYcni1uEKN29jDnfyqS51Vs9lxuDVQxTR0jeSbe82L8+Bqz4JY5b FTqQoQ1brFUSHUi32w5VC+Hp035rpMpZhFVuZ26FY9BP1ii7d8kZtAkVdo14jg95 BLOeFMGgHEJyGTwU/y9auAjG++ZdS54= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:57 2025 by rpki-client