$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa File: abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa (raw, json) Hash identifier: 4nkUuDaM8NZNKZCUvDwdfj4d1R0NpzOUo9pzW+1N+QI= Subject key identifier: 37:90:3E:A9:F6:D2:80:AA:0F:80:C9:00:CA:83:B4:4A:97:E0:FE:05 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE28FC0BFFA8E723BCFA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 34.121.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:28:fc:0b:ff:a8:e7:23:bc:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a87f9690-225c-40ca-bdd6-eba4daa65af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:79:d9:6b:c8:7c:fd:07:05:f8:fb:ac:7f:9f: 54:a9:cf:dd:42:32:77:de:1d:c7:8b:b3:a3:f0:1b: 19:91:07:b8:9a:1e:f2:83:59:b7:2a:b0:f7:24:87: 8d:02:2e:3a:89:35:41:6f:25:72:85:2a:46:45:81: f6:af:22:a7:0d:e9:c4:6d:5d:ff:f3:d9:97:e3:d0: 3c:f2:b0:c7:7e:15:c6:f5:95:f9:dc:41:ab:5a:74: fe:83:82:04:43:05:16:2c:39:be:87:a3:3c:cc:c0: 74:4d:53:0d:9d:0c:05:3c:22:93:09:74:7d:c9:69: a5:87:f6:99:fe:d7:f8:ea:2f:e6:2f:14:c2:36:d7: 87:44:38:63:b5:30:55:4b:65:c4:34:71:c0:80:0e: d3:72:cc:11:17:60:bf:d2:67:c9:8a:3f:5b:5d:52: 0c:c7:05:71:13:7e:cb:29:05:a6:ae:fa:4b:fe:85: bf:89:65:3e:38:da:6b:81:c0:1b:b1:81:dc:28:a6: 43:fc:95:d7:e6:96:57:b9:bd:d7:81:54:0a:30:dd: b6:85:8a:ce:ae:3d:50:a7:72:6f:87:f3:45:9e:9c: bd:0a:72:8d:32:b1:cb:71:34:4a:49:53:5b:96:6b: 49:b9:14:1f:11:b8:41:a0:77:38:ae:46:6f:44:4c: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:90:3E:A9:F6:D2:80:AA:0F:80:C9:00:CA:83:B4:4A:97:E0:FE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:7e:41:d3:1a:f0:ce:13:42:86:e2:7d:52:9a:ca:2a:01:aa: 07:08:e9:b8:df:e4:99:bf:34:7a:8b:fa:a4:c3:52:15:49:d1: e0:ea:9d:b7:9e:e3:97:b4:a4:09:7e:da:c8:85:35:4d:04:b5: 59:7c:74:b0:74:f4:13:4f:c4:b7:40:c1:65:40:59:94:d8:f3: 60:9e:5d:2f:de:89:fa:f9:2c:2e:0a:3c:48:8c:66:82:d3:4c: 59:2b:34:0f:dd:b3:98:e8:80:0d:d7:d8:88:18:6b:8d:9b:6a: 98:9e:19:72:5b:4f:b4:a6:8c:ec:c5:6f:c5:b0:ed:2a:dc:89: 7d:65:27:9e:52:4f:68:d1:db:ea:75:73:63:e9:ad:80:88:a9: b5:ad:c8:af:2b:f1:86:9e:0f:84:45:96:93:b2:ec:73:6c:70: 7f:70:75:ce:89:f1:95:98:ff:dd:5a:d1:5a:11:37:6f:64:1f: e2:3f:83:a4:34:95:f9:38:9b:cc:05:3f:a6:a9:0f:dc:6f:38: f1:ec:53:0b:9a:c7:07:6b:f9:09:34:99:f6:11:9b:64:d0:98: cc:1a:54:76:be:3a:77:92:2d:be:18:a7:66:dc:48:bd:64:33: 46:a6:1a:0e:0d:db:80:de:dd:df:90:1d:c7:3c:49:93:7f:68: 22:37:14:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzij8C/+o5yO8+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTg3Zjk2OTAtMjI1Yy00MGNhLWJkZDYtZWJhNGRhYTY1YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHnZa8h8/QcF+Pusf59Uqc/dQjJ33h3Hi7Oj 8BsZkQe4mh7yg1m3KrD3JIeNAi46iTVBbyVyhSpGRYH2ryKnDenEbV3/89mX49A8 8rDHfhXG9ZX53EGrWnT+g4IEQwUWLDm+h6M8zMB0TVMNnQwFPCKTCXR9yWmlh/aZ /tf46i/mLxTCNteHRDhjtTBVS2XENHHAgA7TcswRF2C/0mfJij9bXVIMxwVxE37L KQWmrvpL/oW/iWU+ONprgcAbsYHcKKZD/JXX5pZXub3XgVQKMN22hYrOrj1Qp3Jv h/NFnpy9CnKNMrHLcTRKSVNblmtJuRQfEbhBoHc4rkZvRExX5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeQPqn20oCqD4DJAMqDtEqX4P4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWJjOTM4YzMtMGYwNC0z YzFjLWIyYjUtZGI5YmVlN2Q1NjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt+QdMa8M4TQobifVKayioBqgcI6bjf5Jm/NHqL+qTDUhVJ0eDqnbee 45e0pAl+2siFNU0EtVl8dLB09BNPxLdAwWVAWZTY82CeXS/eifr5LC4KPEiMZoLT TFkrNA/ds5jogA3X2IgYa42bapieGXJbT7SmjOzFb8Ww7SrciX1lJ55ST2jR2+p1 c2PprYCIqbWtyK8r8YaeD4RFlpOy7HNscH9wdc6J8ZWY/91a0VoRN29kH+I/g6Q0 lfk4m8wFP6apD9xvOPHsUwuaxwdr+Qk0mfYRm2TQmMwaVHa+OneSLb4Yp2bcSL1k M0amGg4N24De3d+QHcc8SZN/aCI3FJE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:06:29 2025 by rpki-client