$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db237405-112f-32f5-914a-855f7fddaaa5.roa File: db237405-112f-32f5-914a-855f7fddaaa5.roa (raw, json) Hash identifier: yRT93teKBWyudtZsk8MBEv4h+xmj0VDWbVbxwMWsFfw= Subject key identifier: 9A:F5:FB:6E:D1:09:A7:5F:BD:95:F0:31:3B:4F:DD:27:BC:F2:37:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BB45D4676C3C0E9C080C6AF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db237405-112f-32f5-914a-855f7fddaaa5.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 19527 IP address blocks: 34.191.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:46:76:c3:c0:e9:c0:80:c6:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=e43a0790-6794-4909-b6b6-2db28be0d2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2f:d9:d2:30:ae:83:05:4f:08:af:02:3d:fc: 47:c6:ad:0d:93:94:5c:e2:4d:90:1e:f7:c4:a5:c1: bb:44:36:f3:22:e4:ee:63:3f:b4:90:b9:bf:bf:09: 25:df:73:da:f3:39:00:44:d6:48:88:d5:b7:54:c9: dd:19:e1:f1:37:a6:83:3c:5e:02:84:3e:ab:73:a8: 98:ae:3d:6e:9c:23:d2:22:7a:be:3d:33:67:45:28: 02:4f:29:63:e3:95:85:c9:61:88:7c:40:8b:7b:d2: 24:56:4f:1a:6f:23:4c:be:92:7f:1a:ab:d4:f7:ed: 9b:09:d5:b6:02:ba:0c:2d:00:14:b8:b9:9a:b5:fe: bd:dd:31:03:73:23:50:dc:1f:dd:98:1a:a7:7f:4d: 19:bc:4c:f0:8d:0b:0d:e4:a2:fc:74:a1:01:b0:50: 4b:82:1d:37:92:71:31:9e:99:a2:76:fb:fb:17:d2: ec:d5:49:b9:99:58:88:cb:64:d2:fc:53:dc:78:55: 55:77:9c:27:6b:b5:9c:19:1c:9f:eb:ed:8e:a6:7b: 30:46:c4:13:2e:87:95:2a:e5:58:7f:4a:c6:10:ae: 60:de:2e:0c:52:c9:cb:db:f3:4e:15:13:ca:d1:7e: 9c:46:5a:25:42:80:26:0e:4a:15:63:5c:61:81:de: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F5:FB:6E:D1:09:A7:5F:BD:95:F0:31:3B:4F:DD:27:BC:F2:37:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db237405-112f-32f5-914a-855f7fddaaa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c7:b2:34:6b:9f:ce:1c:1a:2f:e2:e2:71:6a:2d:58:a2:e2: 26:81:82:c9:a0:8f:20:8e:58:03:de:17:31:2e:c0:13:fb:f2: bc:65:cb:ad:08:68:17:ec:3f:3e:e9:ca:83:17:a2:f3:a9:d2: bc:fa:95:84:a8:dd:af:59:2e:56:3d:33:d4:39:f1:e2:97:11: a6:2c:8b:33:5e:84:4c:da:91:58:8d:36:a0:33:0e:c2:40:a7: cd:dc:55:21:59:f8:d4:ab:11:c7:43:6f:53:2a:ac:a5:f0:c0: 76:af:e4:97:be:47:06:df:0d:72:84:04:f8:af:1f:f6:1f:ba: c2:4e:69:78:6e:cf:0c:81:cb:00:d8:42:ab:db:70:34:5b:73: b1:81:1d:e4:4f:b2:09:3a:bf:ba:e0:9c:ff:00:4f:cd:47:8e: 06:8e:ba:c8:e4:fd:fc:18:c7:b7:7e:80:26:9e:49:09:10:0c: c9:6e:3b:22:11:b0:24:0a:3d:83:58:30:ea:10:bf:de:4e:2e: 32:64:11:bb:a4:36:02:fe:38:4a:3d:4c:0f:02:d9:01:87:ff: 77:d2:77:1b:06:99:d5:80:ed:f1:66:e9:0a:31:a0:fd:9b:f8: 0a:d3:94:88:e8:0c:1a:3c:96:65:70:e5:20:91:f0:bc:cb:f5: 88:3b:ab:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUZ2w8DpwIDGrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZTQzYTA3OTAtNjc5NC00OTA5LWI2YjYtMmRiMjhiZTBkMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii/Z0jCugwVPCK8CPfxHxq0Nk5Rc4k2QHvfE pcG7RDbzIuTuYz+0kLm/vwkl33Pa8zkARNZIiNW3VMndGeHxN6aDPF4ChD6rc6iY rj1unCPSInq+PTNnRSgCTylj45WFyWGIfECLe9IkVk8abyNMvpJ/GqvU9+2bCdW2 AroMLQAUuLmatf693TEDcyNQ3B/dmBqnf00ZvEzwjQsN5KL8dKEBsFBLgh03knEx npmidvv7F9Ls1Um5mViIy2TS/FPceFVVd5wna7WcGRyf6+2OpnswRsQTLoeVKuVY f0rGEK5g3i4MUsnL2/NOFRPK0X6cRlolQoAmDkoVY1xhgd64pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr1+27RCadfvZXwMTtP3Se88jfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIyMzc0MDUtMTEyZi0z MmY1LTkxNGEtODU1ZjdmZGRhYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3HsjRrn84cGi/i4nFqLVii4iaBgsmgjyCOWAPeFzEuwBP78rxly60I aBfsPz7pyoMXovOp0rz6lYSo3a9ZLlY9M9Q58eKXEaYsizNehEzakViNNqAzDsJA p83cVSFZ+NSrEcdDb1MqrKXwwHav5Je+RwbfDXKEBPivH/YfusJOaXhuzwyBywDY QqvbcDRbc7GBHeRPsgk6v7rgnP8AT81HjgaOusjk/fwYx7d+gCaeSQkQDMluOyIR sCQKPYNYMOoQv95OLjJkEbukNgL+OEo9TA8C2QGH/3fSdxsGmdWA7fFm6QoxoP2b +ArTlIjoDBo8lmVw5SCR8LzL9Yg7qz4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:49:18 2025 by rpki-client