$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb281e69-4165-36f1-be91-0268b6195a4f.roa File: bb281e69-4165-36f1-be91-0268b6195a4f.roa (raw, json) Hash identifier: OT3tz5ZqXX3cDd0jMPIw8r5nJLG5oTf9Mt1TcgxoPts= Subject key identifier: 9D:9F:51:C2:12:7E:F5:A9:20:EC:4C:6E:49:DB:B1:5A:BE:ED:82:B9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE1B526716C02B2E016680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb281e69-4165-36f1-be91-0268b6195a4f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 19527 IP address blocks: 34.0.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:1b:52:67:16:c0:2b:2e:01:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=db32621b-3bb8-41b3-b6bd-c0acdbfe96ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1b:10:4b:0b:85:d3:21:49:dc:7a:45:9f:22: 97:6f:ed:a1:37:c6:4a:39:ac:c5:a3:b5:d9:93:d9: 46:9a:5b:4b:7b:a7:44:3e:31:5f:cb:f6:4f:26:3e: ef:d3:d5:e2:bb:01:c8:a0:ef:f1:39:94:44:d2:7d: 48:09:8c:ea:71:62:50:6f:86:79:5a:7d:0e:9f:d0: 2c:cd:7a:bc:03:04:38:c0:bb:11:ec:fd:4d:16:0d: f5:9f:68:41:ce:3e:08:71:06:74:2b:d2:b2:d7:d0: 90:c3:09:d1:96:73:ba:db:57:40:ef:d7:e6:26:79: 71:18:31:f6:f0:ce:a5:58:29:53:4a:40:cc:69:b1: 6f:21:2e:93:26:1c:a1:f7:de:4e:13:31:f7:55:3e: df:90:3f:26:87:80:35:e7:53:5c:44:6a:04:bf:10: b6:0b:9a:c0:af:21:69:57:2b:71:62:8d:25:ec:42: 00:dd:4a:2f:30:97:aa:ea:6d:db:7b:e6:2d:e7:00: 39:86:7a:99:6d:ce:57:57:c8:6c:63:a9:64:96:f8: 48:2e:06:75:9f:61:9b:e1:af:4f:27:64:3e:cd:44: 18:7c:30:75:f0:ed:89:ff:6c:b8:3f:80:51:f5:3e: b6:8b:c1:62:92:f4:e3:35:c2:7f:20:63:f7:9f:78: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9F:51:C2:12:7E:F5:A9:20:EC:4C:6E:49:DB:B1:5A:BE:ED:82:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb281e69-4165-36f1-be91-0268b6195a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ea:d9:f7:7f:ca:6d:f4:49:36:4d:a5:63:00:ab:25:97:a6: 94:82:35:76:32:37:c1:17:13:ea:17:ac:15:6a:91:75:c3:a3: 9f:b1:91:c9:18:6e:2f:21:be:96:43:65:e9:17:c8:e4:3f:af: 9b:27:d8:9d:5c:6a:b4:47:13:1e:fe:ab:2d:4a:a9:10:50:2a: e4:f3:8a:18:d9:33:17:60:06:5d:21:4e:95:ed:f2:40:f1:a9: 1e:bf:8a:a1:ed:be:45:f7:ab:6b:e9:77:e3:3a:6c:7e:aa:8b: 1d:b1:f8:76:50:01:8c:61:d0:de:53:91:5c:91:3d:69:66:df: 46:52:38:20:9b:e2:d4:1f:15:7a:67:0e:f2:46:bf:2f:f3:16: 5b:bd:10:2b:81:b2:a9:36:6b:73:a4:47:31:f0:c0:c0:55:ae: 67:c3:f4:94:5f:ec:6d:62:b4:63:78:6c:0f:70:9a:59:47:2c: bb:55:9b:4b:4b:fc:ee:69:6d:92:8a:fb:09:7d:36:98:3d:8f: 47:9d:78:4f:b2:a7:27:bd:f5:79:3c:3a:31:12:14:d7:ad:59: ee:1c:11:5a:ef:e5:e1:e7:bd:94:25:ec:63:f0:13:86:ec:b2: dd:d9:67:99:eb:a1:00:78:86:fe:be:09:20:c2:73:44:0b:7f: 6d:17:1c:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhtSZxbAKy4BZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGIzMjYyMWItM2JiOC00MWIzLWI2YmQtYzBhY2RiZmU5NmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBsQSwuF0yFJ3HpFnyKXb+2hN8ZKOazFo7XZ k9lGmltLe6dEPjFfy/ZPJj7v09XiuwHIoO/xOZRE0n1ICYzqcWJQb4Z5Wn0On9As zXq8AwQ4wLsR7P1NFg31n2hBzj4IcQZ0K9Ky19CQwwnRlnO621dA79fmJnlxGDH2 8M6lWClTSkDMabFvIS6TJhyh995OEzH3VT7fkD8mh4A151NcRGoEvxC2C5rAryFp VytxYo0l7EIA3UovMJeq6m3be+Yt5wA5hnqZbc5XV8hsY6lklvhILgZ1n2Gb4a9P J2Q+zUQYfDB18O2J/2y4P4BR9T62i8FikvTjNcJ/IGP3n3g5LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2fUcISfvWpIOxMbknbsVq+7YK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmIyODFlNjktNDE2NS0z NmYxLWJlOTEtMDI2OGI2MTk1YTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrq2fd/ym30STZNpWMAqyWXppSCNXYyN8EXE+oXrBVqkXXDo5+xkckY bi8hvpZDZekXyOQ/r5sn2J1carRHEx7+qy1KqRBQKuTzihjZMxdgBl0hTpXt8kDx qR6/iqHtvkX3q2vpd+M6bH6qix2x+HZQAYxh0N5TkVyRPWlm30ZSOCCb4tQfFXpn DvJGvy/zFlu9ECuBsqk2a3OkRzHwwMBVrmfD9JRf7G1itGN4bA9wmllHLLtVm0tL /O5pbZKK+wl9Npg9j0edeE+ypye99Xk8OjESFNetWe4cEVrv5eHnvZQl7GPwE4bs st3ZZ5nroQB4hv6+CSDCc0QLf20XHPM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:20 2025 by rpki-client