$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa File: cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa (raw, json) Hash identifier: KLYq9vmzy0nUj7BmmPg3Sn1M1nO22viR4TFX8bG6cks= Subject key identifier: 2A:1D:8B:52:67:91:A1:95:C9:30:A4:6A:34:34:37:B1:59:A3:7D:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BB45D406B0F653650A99E2980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 396982 IP address blocks: 34.12.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:40:6b:0f:65:36:50:a9:9e:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=26662c8c-57cf-43be-8320-8c51b0ab0c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d0:9e:9c:86:bc:fb:27:da:b8:04:70:04:8c: 24:8a:9a:fb:c8:69:41:84:31:f9:6f:a4:ef:3a:ea: de:c3:e3:f5:1f:0c:86:d5:76:80:58:22:92:38:7a: 52:0a:bb:c8:ef:31:e1:4e:f5:fc:c6:e3:3a:ee:da: c0:d2:25:12:e8:0d:e9:af:86:11:89:dc:7c:41:f9: 97:94:f0:4f:a0:52:cd:5c:95:6e:a9:25:40:f8:1a: 57:11:4b:8b:3b:5c:e4:07:fd:29:1f:af:0b:77:37: dc:6b:34:13:4f:88:61:26:1b:09:6a:8e:ce:05:9f: c2:31:09:64:70:7f:89:78:60:f6:6c:73:62:7c:56: dd:e0:16:10:59:32:b1:25:ce:bd:50:df:8f:6a:c0: 5a:9e:f6:41:bd:51:f5:a9:5a:a1:3d:39:7f:f5:11: ec:95:7e:62:e5:99:c7:6e:4f:9b:60:9e:3c:c2:5c: 9d:9d:3c:a8:1a:fb:9a:ae:da:14:84:c4:86:ff:e2: 01:de:71:74:4f:48:9c:64:fe:80:33:25:f2:34:28: a3:2b:12:43:8c:6c:d4:39:65:dd:33:f2:c8:3b:db: 80:d2:07:97:00:c7:ce:b6:79:55:42:0c:44:48:92: ed:2e:31:de:0f:66:8e:cd:a1:22:0c:12:2d:31:ce: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1D:8B:52:67:91:A1:95:C9:30:A4:6A:34:34:37:B1:59:A3:7D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.12.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:40:07:54:51:b1:69:e2:1b:66:ec:f5:e4:15:4b:d9:7e:94: 58:b6:7c:71:4f:55:34:15:89:36:b2:8c:bd:99:50:ef:8f:59: 3d:9f:c8:03:4e:d2:a8:c2:e3:be:b5:4a:5d:8b:5a:f0:5a:fd: 8f:a3:ab:b4:13:c2:45:b7:97:41:d9:a2:cc:b9:86:60:46:d6: 91:16:c4:a4:8a:cf:e8:fd:af:f5:54:3e:5b:e8:fc:fa:2c:b7: 69:3b:be:88:cf:60:b9:98:60:6d:30:5f:e5:fb:a5:d0:18:ff: 77:37:d8:01:8f:58:21:fa:dd:c4:b1:77:6a:77:84:1d:32:21: 7e:c6:6b:83:ff:b2:db:59:8d:5e:6a:f2:62:cd:af:7e:73:f2: 07:de:3a:86:b4:13:a1:90:f3:4b:ec:59:b3:d1:eb:a6:df:77: 7c:77:95:f9:d8:29:71:82:5d:db:6b:f1:1b:d0:95:80:f3:bb: 9d:f1:31:35:5b:40:35:2f:78:01:2c:20:65:9a:63:53:28:e2: f4:dd:1a:98:55:f8:7c:42:f1:9b:1b:b5:75:b5:16:04:ad:32: f7:ea:60:c2:46:a7:ad:82:e7:4c:3c:7e:4c:0a:85:43:86:3e: b1:06:92:db:25:99:69:42:33:af:ee:e7:e8:32:14:17:da:07: 64:95:67:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUBrD2U2UKmeKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MjY2NjJjOGMtNTdjZi00M2JlLTgzMjAtOGM1MWIwYWIwYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9CenIa8+yfauARwBIwkipr7yGlBhDH5b6Tv Ourew+P1HwyG1XaAWCKSOHpSCrvI7zHhTvX8xuM67trA0iUS6A3pr4YRidx8QfmX lPBPoFLNXJVuqSVA+BpXEUuLO1zkB/0pH68LdzfcazQTT4hhJhsJao7OBZ/CMQlk cH+JeGD2bHNifFbd4BYQWTKxJc69UN+PasBanvZBvVH1qVqhPTl/9RHslX5i5ZnH bk+bYJ48wlydnTyoGvuartoUhMSG/+IB3nF0T0icZP6AMyXyNCijKxJDjGzUOWXd M/LIO9uA0geXAMfOtnlVQgxESJLtLjHeD2aOzaEiDBItMc5B6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCodi1JnkaGVyTCkajQ0N7FZo30IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2I4ZTYzMmUtOTU2Yy0z MGI1LWEzMGEtYTZmNDhhMmZmYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRAB1RRsWniG2bs9eQVS9l+lFi2fHFPVTQViTayjL2ZUO+PWT2fyANO 0qjC4761Sl2LWvBa/Y+jq7QTwkW3l0HZosy5hmBG1pEWxKSKz+j9r/VUPlvo/Pos t2k7vojPYLmYYG0wX+X7pdAY/3c32AGPWCH63cSxd2p3hB0yIX7Ga4P/sttZjV5q 8mLNr35z8gfeOoa0E6GQ80vsWbPR66bfd3x3lfnYKXGCXdtr8RvQlYDzu53xMTVb QDUveAEsIGWaY1Mo4vTdGphV+HxC8ZsbtXW1FgStMvfqYMJGp62C50w8fkwKhUOG PrEGktslmWlCM6/u5+gyFBfaB2SVZ+U= -----END CERTIFICATE-----Generated at Wed Nov 5 00:37:55 2025 by rpki-client