$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa File: a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa (raw, json) Hash identifier: FM40Tf0F6rx6zovYZeQEA+6RXtiRlWcOmz2h0JTs7oA= Subject key identifier: BC:8F:07:CE:E1:27:15:43:88:09:47:92:B0:23:30:21:69:67:48:92 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797CAF567BC4125D94F7280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.95.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ca:f5:67:bc:41:25:d9:4f:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=ae81964d-ef63-4a5b-a53a-3c967257dba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:83:60:dd:81:7d:72:42:4b:ce:3f:b2:ab:b7: b3:91:64:e7:fe:f3:ca:2b:f9:4b:b3:26:a8:70:d2: ec:06:17:0c:ab:9a:a2:5b:a4:a5:55:e3:a0:0d:7e: ac:95:42:8c:f0:6c:8a:f5:65:a1:ab:1a:b7:6b:a2: 30:59:dc:29:52:02:83:b7:dc:bd:66:1f:53:51:fc: 11:31:46:88:90:7b:29:08:73:89:1c:43:f1:5a:ae: 24:23:99:c3:e0:a7:1e:e4:1b:57:bf:f4:9e:bd:0a: c3:59:77:4e:7c:1b:25:08:a8:f0:92:4e:c4:ed:3f: ca:87:5c:db:a8:cb:b6:42:fc:eb:db:3e:d4:35:25: e9:3b:58:41:39:c6:28:b8:93:86:99:27:28:8e:51: 01:91:ce:ee:90:04:f2:c3:bc:e1:de:95:ab:0f:e6: 29:42:ca:ea:30:45:3f:32:16:01:10:80:e2:4c:d2: 15:d6:49:b7:5f:56:35:d0:e8:34:12:f1:ad:e7:aa: 0a:17:15:b4:89:2f:d2:ab:72:f8:56:e7:e4:a6:18: 3c:5f:98:13:a6:ee:20:56:f7:6a:13:b4:97:da:7f: 4b:78:f0:3e:81:d6:80:6b:48:a4:08:90:c3:7f:0a: cd:0a:62:4a:6f:64:4c:bd:45:3b:6c:6d:2d:c6:eb: b7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8F:07:CE:E1:27:15:43:88:09:47:92:B0:23:30:21:69:67:48:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:4b:42:27:43:46:21:d1:ec:96:6a:c7:2a:e3:24:78:d9:25: f1:b0:fb:4f:17:07:e0:a3:12:c0:9f:24:d3:f7:79:c6:36:9c: e8:54:6d:3d:ae:eb:39:5e:85:49:b8:2e:35:5d:aa:d6:0c:ad: f5:53:a4:6c:e2:b7:e1:85:d4:3c:ec:cf:ac:6b:b3:19:5f:17: 1b:73:96:0d:2d:d4:df:ba:92:54:e6:d6:b8:4f:a8:00:fb:cf: a6:28:19:1e:67:bc:9e:ce:bb:f3:a2:3f:a9:9e:bc:79:64:f7: 74:71:b2:e5:84:6e:e3:bd:4d:50:c9:bf:f0:98:17:b9:44:50: c7:08:03:6d:f0:ba:f3:ec:fc:77:b6:bf:f3:14:2f:84:e0:83: b0:99:1e:54:c9:9c:ca:45:4b:bd:b3:13:4f:3e:92:30:56:16: ee:f8:ef:87:55:4f:26:7b:a6:21:03:03:c0:09:00:ac:7f:5f: 85:9b:24:8c:15:d5:c1:59:b1:c1:38:57:0a:f6:ba:34:c8:06: 6f:8d:81:71:9b:f0:83:74:5d:f8:1d:6b:eb:6c:8c:1c:47:1c: 6e:8f:7d:a6:57:fd:ed:97:b3:92:b7:8b:2b:c7:55:f5:1f:8b: 22:bc:81:e3:67:9e:cd:cd:13:93:cf:98:43:93:86:12:26:04: dc:ab:ee:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8r1Z7xBJdlPcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YWU4MTk2NGQtZWY2My00YTViLWE1M2EtM2M5NjcyNTdkYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Ng3YF9ckJLzj+yq7ezkWTn/vPKK/lLsyao cNLsBhcMq5qiW6SlVeOgDX6slUKM8GyK9WWhqxq3a6IwWdwpUgKDt9y9Zh9TUfwR MUaIkHspCHOJHEPxWq4kI5nD4Kce5BtXv/SevQrDWXdOfBslCKjwkk7E7T/Kh1zb qMu2Qvzr2z7UNSXpO1hBOcYouJOGmScojlEBkc7ukATyw7zh3pWrD+YpQsrqMEU/ MhYBEIDiTNIV1km3X1Y10Og0EvGt56oKFxW0iS/Sq3L4Vufkphg8X5gTpu4gVvdq E7SX2n9LePA+gdaAa0ikCJDDfwrNCmJKb2RMvUU7bG0txuu3hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyPB87hJxVDiAlHkrAjMCFpZ0iSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQwZWQwY2EtNjZiOS0z ZjMwLWJjZjAtNDI5ZDM1NzBmMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtLQidDRiHR7JZqxyrjJHjZJfGw+08XB+CjEsCfJNP3ecY2nOhUbT2u 6zlehUm4LjVdqtYMrfVTpGzit+GF1Dzsz6xrsxlfFxtzlg0t1N+6klTm1rhPqAD7 z6YoGR5nvJ7Ou/OiP6mevHlk93RxsuWEbuO9TVDJv/CYF7lEUMcIA23wuvPs/He2 v/MUL4Tgg7CZHlTJnMpFS72zE08+kjBWFu7474dVTyZ7piEDA8AJAKx/X4WbJIwV 1cFZscE4Vwr2ujTIBm+NgXGb8IN0Xfgda+tsjBxHHG6PfaZX/e2Xs5K3iyvHVfUf iyK8geNnns3NE5PPmEOThhImBNyr7qU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:40:41 2025 by rpki-client