$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc1b999-7d74-3638-a48d-92624a9e481a.roa File: cfc1b999-7d74-3638-a48d-92624a9e481a.roa (raw, json) Hash identifier: eahpRmjMf1xVaNSYH1px0+cuSBsu1jYXF1qUiivNtkI= Subject key identifier: BB:3B:9B:AA:24:75:3E:64:BE:5C:BC:59:9A:B4:06:C3:C4:78:65:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BA39D2F73FC910FB38767BCC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc1b999-7d74-3638-a48d-92624a9e481a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 15169 IP address blocks: 34.1.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2f:73:fc:91:0f:b3:87:67:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=af3bde54-4029-4a7f-8ccc-ad0a4347d8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:1b:14:dc:42:55:ba:cc:29:8c:73:71:26: 6e:15:fd:e5:45:3d:06:dc:9d:b2:39:57:a4:84:6f: e1:e0:70:66:68:98:fa:ef:22:ff:43:00:3d:78:e2: a9:92:5b:a7:11:b3:db:83:d3:3a:4b:64:a7:11:28: 71:fe:05:9b:6f:23:73:98:65:c3:5c:92:21:6e:35: 45:3b:69:78:91:17:91:df:86:cb:d2:dc:9c:89:6c: c3:ab:f8:78:1b:bb:14:09:78:56:03:49:98:70:0c: 6a:4c:3b:dd:db:c5:29:1f:04:2b:42:04:1e:f0:11: c2:c4:a6:b3:95:9e:f4:c1:dd:b6:c3:32:2a:26:a6: 67:be:d4:56:38:bd:49:a5:ce:17:26:05:8b:c8:0d: 88:86:3e:cb:a3:93:a8:a3:13:a5:ac:ce:f8:38:90: 8d:f6:e1:77:21:1b:23:91:1c:c6:f1:dc:c6:24:4f: 8e:a4:39:e6:b2:70:d1:cf:34:88:93:f1:77:22:93: 41:d6:80:47:d5:af:f4:83:49:ba:b6:1d:0f:72:e2: 14:04:0e:3e:27:c9:1c:71:c1:33:86:6f:40:e9:43: 1e:a3:33:c3:e2:0e:0d:1f:07:74:92:15:fe:15:b6: 13:1e:fd:19:fe:fe:7a:d2:ef:ae:ac:57:42:2e:bb: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3B:9B:AA:24:75:3E:64:BE:5C:BC:59:9A:B4:06:C3:C4:78:65:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc1b999-7d74-3638-a48d-92624a9e481a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:69:cf:e2:a6:69:3b:8c:48:e1:76:8d:dd:63:51:e3:f2:ae: f9:84:41:51:f2:90:53:63:3c:35:89:9a:8e:e2:84:ef:20:d7: 74:c0:66:54:6d:5d:14:77:c2:15:f0:6a:aa:2e:4b:bb:63:e6: d1:39:86:99:ea:42:ea:ff:22:a6:40:a1:68:46:e2:1f:63:ac: 27:da:77:db:f9:28:40:ea:29:c7:ed:78:20:4b:7c:db:05:e6: d4:70:2b:43:c4:1b:6f:28:90:1e:de:ac:7a:74:be:ab:de:b4: 37:ba:77:bd:01:20:47:87:53:7b:a0:b4:78:bc:f1:fc:7d:0f: 84:cc:e6:16:bc:3d:fa:b7:1d:67:20:7e:90:ab:fb:d4:4d:3c: 78:44:69:e3:eb:bc:bb:58:49:eb:a2:aa:0f:06:ad:4f:83:54: bc:5a:a1:c8:ad:09:c4:e9:69:c3:3a:ed:fa:0b:3b:ca:03:1c: 5c:27:70:00:46:db:c5:74:fe:ca:3f:13:24:48:f0:44:bb:b7: 85:8f:8e:9c:ce:5f:89:26:5a:12:12:85:dd:b2:da:65:64:e5: a3:82:a1:3d:30:7b:5a:9e:80:43:1b:c5:1f:04:7d:01:4a:e7: f6:75:e3:29:66:e2:0c:e5:1d:c5:47:cc:c7:b3:9a:78:1c:bb: ab:b3:0d:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnS9z/JEPs4dnvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YWYzYmRlNTQtNDAyOS00YTdmLThjY2MtYWQwYTQzNDdkOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofEbFNxCVbrMKYxzcSZuFf3lRT0G3J2yOVek hG/h4HBmaJj67yL/QwA9eOKpklunEbPbg9M6S2SnEShx/gWbbyNzmGXDXJIhbjVF O2l4kReR34bL0tyciWzDq/h4G7sUCXhWA0mYcAxqTDvd28UpHwQrQgQe8BHCxKaz lZ70wd22wzIqJqZnvtRWOL1Jpc4XJgWLyA2Ihj7Lo5OooxOlrM74OJCN9uF3IRsj kRzG8dzGJE+OpDnmsnDRzzSIk/F3IpNB1oBH1a/0g0m6th0PcuIUBA4+J8kcccEz hm9A6UMeozPD4g4NHwd0khX+FbYTHv0Z/v560u+urFdCLru+pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs7m6okdT5kvly8WZq0BsPEeGVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZjMWI5OTktN2Q3NC0z NjM4LWE0OGQtOTI2MjRhOWU0ODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBpz+KmaTuMSOF2jd1jUePyrvmEQVHykFNjPDWJmo7ihO8g13TAZlRt XRR3whXwaqouS7tj5tE5hpnqQur/IqZAoWhG4h9jrCfad9v5KEDqKcfteCBLfNsF 5tRwK0PEG28okB7erHp0vqvetDe6d70BIEeHU3ugtHi88fx9D4TM5ha8Pfq3HWcg fpCr+9RNPHhEaePrvLtYSeuiqg8GrU+DVLxaocitCcTpacM67foLO8oDHFwncABG 28V0/so/EyRI8ES7t4WPjpzOX4kmWhIShd2y2mVk5aOCoT0we1qegEMbxR8EfQFK 5/Z14ylm4gzlHcVHzMezmngcu6uzDVM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:27:17 2025 by rpki-client