$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa File: 95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa (raw, json) Hash identifier: wiUVgpBI50bVNyRmL1lA2FHylyp6xhkVPgCQ0nhHLdQ= Subject key identifier: A4:74:EE:82:30:C0:6D:99:74:50:C0:72:B5:A5:6A:07:62:97:F0:1E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D37B5AC14DAC5DE020C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.148.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d3:7b:5a:c1:4d:ac:5d:e0:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=ea63a633-0501-4e64-9172-65f3088fcbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:b8:8b:d3:6e:98:ae:c6:28:4f:2f:5e:5b: 14:a3:fa:8d:2f:1e:88:df:3b:2d:b2:71:03:56:f5: e7:da:e2:c7:d0:5a:f6:6d:86:25:fc:1f:1b:7a:85: 78:3c:99:d1:a1:5b:22:66:69:a6:f7:67:d0:de:a5: bf:39:6a:55:19:00:ed:c7:d7:b5:5b:a6:4e:0f:72: fc:a1:29:7c:c9:50:07:d9:f0:c5:55:73:95:44:b9: bd:7d:1a:1f:ad:a5:e2:43:15:62:c6:88:f0:c1:20: 4b:2a:84:6a:b2:a9:be:a2:f2:2d:7f:6b:43:25:3a: 54:cf:09:a9:0f:a3:74:1c:f1:28:ed:f1:24:12:7f: d6:27:74:18:b1:95:88:95:8c:fb:7b:9d:ac:39:7b: 2c:c0:9f:3f:80:dd:23:c3:64:fc:10:be:9a:aa:c9: c8:b4:a8:60:5e:1d:51:7c:6f:21:0b:b4:f6:bb:bb: e3:a2:a2:55:21:83:a8:37:61:1e:45:70:c4:de:68: b8:d1:91:98:82:30:9e:2d:23:b9:da:d1:20:5a:8a: 54:eb:ce:14:58:3c:78:2b:1a:e1:69:3c:9d:67:af: 52:13:c5:28:5d:65:53:17:96:33:58:5d:d3:55:c0: 5a:ec:bf:c0:cf:2e:03:93:f9:b9:77:14:07:88:8b: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:74:EE:82:30:C0:6D:99:74:50:C0:72:B5:A5:6A:07:62:97:F0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.148.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:dc:de:23:96:e6:1d:e3:90:cd:63:66:fd:38:95:1b:7a:25: c5:fb:eb:6e:71:45:e3:d5:8b:3c:57:ef:25:dc:83:14:73:8e: 0a:35:85:01:b0:45:2d:92:94:52:30:6b:78:2b:27:a1:c7:e0: 4a:c6:4e:b9:45:4a:77:30:42:af:41:18:ea:6d:26:0c:72:aa: bd:d2:33:bd:a3:ae:80:7e:f1:83:cc:18:aa:03:16:b5:8e:34: 63:6e:2f:04:a8:ee:33:ee:62:54:0c:19:5f:c5:6e:de:e6:cb: f6:4a:ea:d5:56:bc:c0:6b:cd:2f:79:66:70:0c:39:d5:0b:9a: 58:5e:4b:4a:69:51:47:a2:ae:b4:6e:8a:26:2a:b9:4e:eb:9d: 05:37:34:5d:5e:29:1a:ba:02:ff:1f:0c:ab:75:30:76:42:2b: ea:af:d4:da:fb:77:88:40:48:42:7a:bc:58:33:0d:ef:a8:4c: 8e:87:e7:c4:f2:9e:26:a0:00:f4:fc:88:37:43:cb:06:5d:87: e6:9a:7f:b0:6b:b7:f2:8b:64:36:4c:3d:95:a5:c2:ca:cc:e4: 5c:c1:9c:2b:72:65:56:4b:4f:fa:5d:42:aa:a5:91:2f:05:c6: ad:34:81:37:2d:b1:17:d6:00:11:6f:30:0a:41:e0:60:52:57: 4f:99:5c:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9N7WsFNrF3gIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWE2M2E2MzMtMDUwMS00ZTY0LTkxNzItNjVmMzA4OGZjYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC24i9NumK7GKE8vXlsUo/qNLx6I3zstsnED VvXn2uLH0Fr2bYYl/B8beoV4PJnRoVsiZmmm92fQ3qW/OWpVGQDtx9e1W6ZOD3L8 oSl8yVAH2fDFVXOVRLm9fRofraXiQxVixojwwSBLKoRqsqm+ovItf2tDJTpUzwmp D6N0HPEo7fEkEn/WJ3QYsZWIlYz7e52sOXsswJ8/gN0jw2T8EL6aqsnItKhgXh1R fG8hC7T2u7vjoqJVIYOoN2EeRXDE3mi40ZGYgjCeLSO52tEgWopU684UWDx4Kxrh aTydZ69SE8UoXWVTF5YzWF3TVcBa7L/Azy4Dk/m5dxQHiIte+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR07oIwwG2ZdFDAcrWlagdil/AeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTVhMGU0MDEtZjcyYS0z ZDhkLThjNzctYjczZGUwNmE1MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHc3iOW5h3jkM1jZv04lRt6JcX7625xRePVizxX7yXcgxRzjgo1hQGw RS2SlFIwa3grJ6HH4ErGTrlFSncwQq9BGOptJgxyqr3SM72jroB+8YPMGKoDFrWO NGNuLwSo7jPuYlQMGV/Fbt7my/ZK6tVWvMBrzS95ZnAMOdULmlheS0ppUUeirrRu iiYquU7rnQU3NF1eKRq6Av8fDKt1MHZCK+qv1Nr7d4hASEJ6vFgzDe+oTI6H58Ty niagAPT8iDdDywZdh+aaf7Brt/KLZDZMPZWlwsrM5FzBnCtyZVZLT/pdQqqlkS8F xq00gTctsRfWABFvMApB4GBSV0+ZXCQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:09 2025 by rpki-client