$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9a3d9fb-eaf2-3492-99b0-eb0b473a72c6.roa File: d9a3d9fb-eaf2-3492-99b0-eb0b473a72c6.roa (raw, json) Hash identifier: E1Tks4upsgYNcSKt1wGKOR4lXOdBdMyVnOYEOJmsdBc= Subject key identifier: 15:CB:2B:5C:EE:2C:F3:C8:F1:CF:58:58:44:A2:86:59:68:66:08:A7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BB45D4655A9B841D3570D77D0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9a3d9fb-eaf2-3492-99b0-eb0b473a72c6.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 15169 IP address blocks: 34.191.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:46:55:a9:b8:41:d3:57:0d:77:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=a9bcdfc1-ba6a-4efd-a18a-f3d3e0217be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:18:f9:21:f3:44:2b:18:98:79:21:f9:a8: 61:6d:08:5a:1d:69:3e:e7:13:4d:74:d8:74:73:45: 5b:24:40:6b:b6:a3:73:84:45:b0:24:d4:48:f0:64: 97:62:ec:b7:5f:9c:2b:9b:56:70:93:3c:9c:51:b6: c2:d5:f6:32:1c:2c:be:e0:4d:46:5a:49:20:0f:d8: a9:af:7e:96:a7:84:90:76:0d:8e:87:d9:39:c1:d7: d4:11:81:0d:92:e0:f1:30:4e:16:7c:4d:33:ef:88: d2:64:f1:a0:f8:08:37:1a:f4:93:e4:cf:d8:70:22: e6:f7:c9:19:13:3e:66:58:a6:95:af:63:0e:55:33: df:2c:ae:f4:aa:42:44:ae:90:0d:14:58:5f:15:4d: 6d:35:26:67:3c:18:f3:15:ae:96:d4:f9:8f:17:db: 0d:07:d8:7c:78:7c:35:8c:16:b6:22:82:8c:ac:ef: 50:44:dd:e3:08:e6:33:0a:d1:69:d7:1b:c9:3e:7c: 76:d1:80:a2:4a:8a:d6:8f:1e:7f:75:ac:77:99:8c: bf:ed:6d:04:8e:d0:ac:9a:35:22:9e:1e:a9:cb:91: 68:98:38:00:57:ba:e4:99:fa:3a:b7:01:ad:59:aa: c2:2f:3d:8c:74:a0:01:94:84:32:09:60:14:6d:f4: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CB:2B:5C:EE:2C:F3:C8:F1:CF:58:58:44:A2:86:59:68:66:08:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9a3d9fb-eaf2-3492-99b0-eb0b473a72c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:14:c9:6a:4d:38:21:ba:56:ff:19:e3:8a:73:b4:21:62:83: f3:70:ac:58:4b:2c:ad:d9:c2:21:46:c4:ea:bd:fc:61:6b:1c: 4c:fb:6d:05:78:93:a8:5c:d9:04:e7:7a:6f:17:82:7a:bd:28: 80:05:c2:24:c8:69:e2:6c:4e:d6:b1:3e:e8:b2:78:7f:eb:e5: 99:ff:1a:86:10:07:11:f5:ce:fe:05:27:5f:45:88:6b:ea:af: cb:eb:ac:67:a9:55:bb:d2:ff:b7:60:b0:c6:da:21:39:8b:cf: 81:d5:3e:0b:2c:8a:c2:be:9c:13:50:ce:eb:b6:ed:71:08:b6: 25:bc:5f:94:fd:1c:53:9b:c9:de:42:7f:c4:96:69:a0:c5:d0: 98:6e:83:e9:2f:c0:50:bc:ed:ac:83:60:00:60:1c:ff:aa:8d: 54:2d:97:54:50:c1:31:74:bd:89:11:6b:51:d3:d5:1a:b9:cc: 80:cd:d8:ac:a5:58:33:f2:16:a4:b7:cf:28:7b:a2:ff:f5:aa: 34:be:86:25:5b:14:8b:06:40:3e:82:93:ae:41:a6:39:a6:46: f1:aa:4c:e4:d9:50:76:89:6f:91:70:9f:7e:e4:55:01:bf:cd: 18:73:eb:bc:07:bc:f5:db:86:ce:cb:47:39:d1:e2:33:45:d6: db:4c:80:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUZVqbhB01cNd9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YTliY2RmYzEtYmE2YS00ZWZkLWExOGEtZjNkM2UwMjE3YmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKgY+SHzRCsYmHkh+ahhbQhaHWk+5xNNdNh0 c0VbJEBrtqNzhEWwJNRI8GSXYuy3X5wrm1ZwkzycUbbC1fYyHCy+4E1GWkkgD9ip r36Wp4SQdg2Oh9k5wdfUEYENkuDxME4WfE0z74jSZPGg+Ag3GvST5M/YcCLm98kZ Ez5mWKaVr2MOVTPfLK70qkJErpANFFhfFU1tNSZnPBjzFa6W1PmPF9sNB9h8eHw1 jBa2IoKMrO9QRN3jCOYzCtFp1xvJPnx20YCiSorWjx5/dax3mYy/7W0EjtCsmjUi nh6py5FomDgAV7rkmfo6twGtWarCLz2MdKABlIQyCWAUbfQZUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXLK1zuLPPI8c9YWESihlloZginMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDlhM2Q5ZmItZWFmMi0z NDkyLTk5YjAtZWIwYjQ3M2E3MmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIUyWpNOCG6Vv8Z44pztCFig/NwrFhLLK3ZwiFGxOq9/GFrHEz7bQV4 k6hc2QTnem8Xgnq9KIAFwiTIaeJsTtaxPuiyeH/r5Zn/GoYQBxH1zv4FJ19FiGvq r8vrrGepVbvS/7dgsMbaITmLz4HVPgssisK+nBNQzuu27XEItiW8X5T9HFObyd5C f8SWaaDF0Jhug+kvwFC87ayDYABgHP+qjVQtl1RQwTF0vYkRa1HT1Rq5zIDN2Kyl WDPyFqS3zyh7ov/1qjS+hiVbFIsGQD6Ck65BpjmmRvGqTOTZUHaJb5Fwn37kVQG/ zRhz67wHvPXbhs7LRznR4jNF1ttMgCY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:16 2025 by rpki-client