$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa File: ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa (raw, json) Hash identifier: QJnSKedItSUHiZiWQpZb4/PnA9OixOZ2vYJOHAxYSfA= Subject key identifier: 21:EA:F7:55:37:3D:35:C3:81:D8:67:F8:68:A4:DD:44:EB:08:F2:04 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BB45D3BB796A313BC43719040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 396982 IP address blocks: 34.12.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3b:b7:96:a3:13:bc:43:71:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=7aa45316-82b1-47a6-bdfc-64d1b0820f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:13:c4:c3:92:85:fc:15:1e:3c:60:68:55:94: c4:a8:39:d5:c9:f0:79:e5:3b:5f:9f:09:80:7c:f4: ae:29:1d:f4:af:6d:d1:8d:8b:4e:7a:f3:9f:11:29: ff:a4:aa:6e:53:84:4f:f4:82:5e:bf:94:86:d7:bf: 19:0d:3c:48:3f:34:49:96:cd:92:de:d9:75:04:c5: 57:89:a8:1a:a9:e5:8f:66:54:11:2b:ca:4f:e7:2d: 02:80:60:32:9c:9e:bc:0d:31:e0:10:79:3f:0a:19: 06:9e:0a:f1:db:9f:cf:6d:12:62:fd:a3:c6:e1:b2: d0:d1:98:1b:e9:45:b0:99:85:72:2b:4d:c1:a1:50: 10:3a:e0:50:47:c3:b2:15:0b:83:9c:28:af:16:d7: 55:43:e9:8a:43:47:df:47:9f:66:78:0e:32:d7:c5: 6e:0c:aa:bb:a8:f4:87:e0:ae:aa:34:9f:4c:ce:e7: 6f:a3:21:2b:23:e0:19:5b:e9:6d:10:b2:9f:56:0b: 5a:af:61:2c:e0:03:26:aa:24:2d:c8:ca:5a:c5:9b: e7:e0:a1:5d:b2:86:bd:c0:26:5b:5d:d0:9e:8a:5c: 54:ff:b8:d8:4d:03:13:a8:a1:47:0a:52:c9:8a:c7: 38:06:d2:1f:bf:b5:0c:c3:ec:02:5b:a3:2d:2f:d2: e2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EA:F7:55:37:3D:35:C3:81:D8:67:F8:68:A4:DD:44:EB:08:F2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.12.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a2:0d:b6:d4:87:9d:16:29:4d:88:3d:4c:9a:8a:3a:9e:37: 5b:7e:92:2f:dd:81:1d:21:54:08:91:ef:a3:c8:57:9f:9f:e5: 7f:70:b9:85:45:36:89:ad:a8:18:0a:70:36:c4:14:29:e8:6e: c1:cf:fe:f8:bf:48:11:54:92:8a:21:8d:8a:8d:4e:32:54:8a: 09:66:36:7a:6e:da:3e:5e:7c:6b:26:b3:05:e0:97:bb:1b:55: cc:4d:cc:bf:cd:81:8b:57:c9:4e:d6:b2:a7:be:19:9b:0c:30: a3:5b:49:bd:83:8e:b0:9c:02:d5:dc:49:d6:5a:15:cc:14:f0: ce:02:85:33:05:15:c4:d8:b0:b7:68:28:7b:ab:1b:a2:ca:e9: 8b:10:ce:e8:85:1e:f9:d1:c1:2c:48:d2:df:73:70:5b:dd:db: 26:92:72:e1:62:7d:b9:48:24:89:74:7b:dd:b9:28:4c:28:b1: a2:8c:f4:c3:92:77:a3:c1:59:bc:4f:3a:c1:10:5c:61:15:df: 76:57:19:2e:ae:9b:25:e9:5d:9b:d3:f8:fd:a4:df:05:81:e2: 94:ff:b6:27:55:1b:62:e5:cd:19:99:db:61:a8:48:d5:6a:0f: 40:dd:ce:df:a0:48:9e:33:45:ed:c7:db:35:81:ac:c1:3e:79: ae:ce:64:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTu3lqMTvENxkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk N2FhNDUzMTYtODJiMS00N2E2LWJkZmMtNjRkMWIwODIwZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBPEw5KF/BUePGBoVZTEqDnVyfB55TtfnwmA fPSuKR30r23RjYtOevOfESn/pKpuU4RP9IJev5SG178ZDTxIPzRJls2S3tl1BMVX iagaqeWPZlQRK8pP5y0CgGAynJ68DTHgEHk/ChkGngrx25/PbRJi/aPG4bLQ0Zgb 6UWwmYVyK03BoVAQOuBQR8OyFQuDnCivFtdVQ+mKQ0ffR59meA4y18VuDKq7qPSH 4K6qNJ9MzudvoyErI+AZW+ltELKfVgtar2Es4AMmqiQtyMpaxZvn4KFdsoa9wCZb XdCeilxU/7jYTQMTqKFHClLJisc4BtIfv7UMw+wCW6MtL9LiwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHq91U3PTXDgdhn+Gik3UTrCPIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmE5ZTI4YzctMjdhMS0z MGY5LWJhMzgtOGUxZmZjNzViNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKiDbbUh50WKU2IPUyaijqeN1t+ki/dgR0hVAiR76PIV5+f5X9wuYVF NomtqBgKcDbEFCnobsHP/vi/SBFUkoohjYqNTjJUiglmNnpu2j5efGsmswXgl7sb VcxNzL/NgYtXyU7Wsqe+GZsMMKNbSb2DjrCcAtXcSdZaFcwU8M4ChTMFFcTYsLdo KHurG6LK6YsQzuiFHvnRwSxI0t9zcFvd2yaScuFifblIJIl0e925KEwosaKM9MOS d6PBWbxPOsEQXGEV33ZXGS6umyXpXZvT+P2k3wWB4pT/tidVG2LlzRmZ22GoSNVq D0Ddzt+gSJ4zRe3H2zWBrME+ea7OZEc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:08 2025 by rpki-client