$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea45876-71e4-3bc2-a68f-4a22492e39b7.roa File: aea45876-71e4-3bc2-a68f-4a22492e39b7.roa (raw, json) Hash identifier: uII74qHXj1rDhGrwaDzmCga/xG/lE/L8ZQnrfJ0lTzA= Subject key identifier: 00:F8:AB:50:25:93:7B:2F:25:0E:FC:39:61:15:9F:08:4D:1C:BD:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BB2F7A27229EEA8A0F5442B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea45876-71e4-3bc2-a68f-4a22492e39b7.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 396982 IP address blocks: 34.187.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a2:72:29:ee:a8:a0:f5:44:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=e20c8536-3422-421c-beb2-08b9b8b3fa0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:cb:4a:c0:52:48:a1:4d:06:c0:8e:8b:4e: c1:ec:d1:0e:7c:08:af:5d:77:6c:bf:39:7f:6b:4b: 00:4e:36:58:03:32:85:f3:1d:de:2d:7f:67:c9:c3: 3c:51:31:c0:4f:69:34:22:30:19:a7:e6:83:07:a4: 67:74:ab:f2:9d:42:5c:61:2f:10:87:99:da:d5:14: 50:97:26:45:cb:36:46:1b:4e:c9:bc:3d:ef:77:fe: 0d:74:03:8a:98:b2:63:92:46:74:b7:47:cd:fb:5f: ac:6b:fa:b2:76:f4:9d:a7:97:ad:1f:90:e6:0e:38: 88:40:8b:24:8c:f2:23:dd:97:eb:45:f6:52:76:d8: 2e:60:7c:cf:ed:8f:ea:ef:3d:83:a7:70:bb:20:0d: 4f:e6:21:27:dd:4e:0c:c0:46:57:81:95:e7:98:90: 79:09:76:7b:a2:d7:3d:82:af:9a:42:4a:75:b1:d9: f1:bf:c0:97:f1:35:3d:bf:b8:91:02:b0:13:20:0f: 3c:ca:ab:74:5f:10:3d:4e:4c:f6:57:bc:f3:ca:a2: bd:bf:92:1e:ca:c7:5f:57:3b:20:13:f1:e4:e4:39: f9:d9:25:74:65:e7:66:ab:79:c8:f9:26:65:bf:13: e1:c7:85:7f:8e:77:b5:41:b8:c1:52:b7:08:3a:af: e5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F8:AB:50:25:93:7B:2F:25:0E:FC:39:61:15:9F:08:4D:1C:BD:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea45876-71e4-3bc2-a68f-4a22492e39b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.187.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a3:31:57:c9:f0:51:fa:6e:37:8b:3e:b8:68:30:24:23:44: 2a:35:f3:02:e2:a1:fa:56:5b:7d:10:5e:e6:33:27:57:1b:2b: 5f:2e:91:8f:03:67:27:97:ed:76:9c:5d:0d:a3:fa:63:87:8e: e3:af:64:0e:33:e0:96:2b:35:1a:47:8c:d5:18:08:08:af:2d: 27:82:0d:cf:ec:d1:de:7d:9b:c1:72:02:3c:69:d2:5b:58:36: 14:f2:fe:24:3b:3d:e7:e9:3b:6b:9a:24:e6:5b:f3:6f:17:8c: 8c:69:02:f6:49:3b:09:b3:57:ba:53:5a:c2:ea:49:7f:80:99: 30:f2:59:11:9b:b3:11:6a:12:94:58:d7:fd:89:19:5e:9d:f5: 71:3b:9e:31:d4:22:3b:02:7e:a1:28:bd:ef:09:46:56:cb:f1: 55:67:4b:e1:45:4c:64:5a:00:c3:17:d5:0d:c8:41:d2:b8:02: d2:32:63:0c:73:22:37:99:3e:77:d7:e9:2d:40:a3:f2:26:84: c5:4b:2e:e0:38:a9:95:55:b1:8b:08:6f:c7:42:ab:5a:f6:d6: 08:ff:3c:b4:04:eb:ad:5d:83:cd:cd:10:8f:19:ae:0c:4b:b2: 6f:75:fb:06:1c:59:3d:31:86:12:33:73:55:d3:71:69:e7:8c: bb:b9:30:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96JyKe6ooPVEK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZTIwYzg1MzYtMzQyMi00MjFjLWJlYjItMDhiOWI4YjNmYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnrLSsBSSKFNBsCOi07B7NEOfAivXXdsvzl/ a0sATjZYAzKF8x3eLX9nycM8UTHAT2k0IjAZp+aDB6RndKvynUJcYS8Qh5na1RRQ lyZFyzZGG07JvD3vd/4NdAOKmLJjkkZ0t0fN+1+sa/qydvSdp5etH5DmDjiIQIsk jPIj3ZfrRfZSdtguYHzP7Y/q7z2Dp3C7IA1P5iEn3U4MwEZXgZXnmJB5CXZ7otc9 gq+aQkp1sdnxv8CX8TU9v7iRArATIA88yqt0XxA9Tkz2V7zzyqK9v5IeysdfVzsg E/Hk5Dn52SV0Zedmq3nI+SZlvxPhx4V/jne1QbjBUrcIOq/l8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD4q1Alk3svJQ78OWEVnwhNHL3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVhNDU4NzYtNzFlNC0z YmMyLWE2OGYtNGEyMjQ5MmUzOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIrsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABijMVfJ8FH6bjeLPrhoMCQjRCo18wLiofpWW30QXuYzJ1cbK18ukY8D ZyeX7XacXQ2j+mOHjuOvZA4z4JYrNRpHjNUYCAivLSeCDc/s0d59m8FyAjxp0ltY NhTy/iQ7PefpO2uaJOZb828XjIxpAvZJOwmzV7pTWsLqSX+AmTDyWRGbsxFqEpRY 1/2JGV6d9XE7njHUIjsCfqEove8JRlbL8VVnS+FFTGRaAMMX1Q3IQdK4AtIyYwxz IjeZPnfX6S1Ao/ImhMVLLuA4qZVVsYsIb8dCq1r21gj/PLQE661dg83NEI8ZrgxL sm91+wYcWT0xhhIzc1XTcWnnjLu5MGc= -----END CERTIFICATE-----Generated at Tue Nov 4 18:49:25 2025 by rpki-client