$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd2460b4-cfaa-3616-9883-7e59acfb8311.roa File: dd2460b4-cfaa-3616-9883-7e59acfb8311.roa (raw, json) Hash identifier: uVaGd3rTpgxBYd2rqSygSZ6YY2wadGAUXv4y3UgKHIA= Subject key identifier: B9:CB:D5:8B:83:10:5C:A8:ED:CB:81:67:67:ED:7E:72:25:09:66:3F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B28C6E944CD45E70E4BBC5780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd2460b4-cfaa-3616-9883-7e59acfb8311.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 19527 IP address blocks: 34.1.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e9:44:cd:45:e7:0e:4b:bc:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=2bc93f7c-1a3c-4b80-91c3-8f8ff18d9998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b8:32:f6:f5:d5:01:26:53:36:3b:5f:ed:22: 88:51:73:22:62:1a:5e:1b:90:ac:72:fc:70:1a:88: 6f:4d:10:a7:37:fd:7b:65:f6:90:97:1e:74:91:ec: ec:63:fc:4f:6b:5a:81:33:c7:5c:fa:5a:b3:ef:4d: 53:f9:0e:e8:ff:4b:c6:de:10:fa:6e:08:1c:90:fe: af:a3:7e:8f:3e:75:2e:ce:96:21:fc:0a:69:fe:81: 3d:e7:62:55:8a:4d:5d:df:33:9d:d7:e9:47:3d:ad: 10:28:df:89:51:c7:7b:d7:a4:c5:28:65:e2:d9:74: a8:56:8e:be:5b:c5:29:86:52:31:67:2d:a5:e6:61: 9b:b9:e6:66:04:55:5d:b9:95:10:e0:55:04:b0:07: 57:9c:f1:51:5f:3c:5a:a2:fd:25:b9:be:6e:2e:00: e2:1e:79:17:75:0a:03:7b:6c:7a:bb:05:ea:38:af: 9b:df:1f:a3:3b:35:96:7b:e2:1e:2f:b1:8b:94:59: c8:81:4b:c1:3e:b4:83:48:43:72:84:d5:13:4f:ef: 48:33:88:26:f0:92:c5:65:67:53:ae:3c:85:bf:c4: e4:2f:e1:5f:3d:a4:18:0d:1a:80:47:85:68:5e:bb: 07:b5:47:bf:41:b0:4d:6f:fc:ec:a0:13:d7:9a:30: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CB:D5:8B:83:10:5C:A8:ED:CB:81:67:67:ED:7E:72:25:09:66:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd2460b4-cfaa-3616-9883-7e59acfb8311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:93:f3:68:99:68:52:3d:c1:38:3d:65:4f:1f:6b:eb:ac:af: c0:a5:64:0f:df:66:56:20:0e:58:7b:bd:9e:11:65:bf:da:a4: f5:ca:35:ce:56:c1:6c:fb:4e:c2:fd:1d:c6:62:61:b9:9e:bc: ae:c0:ab:c1:d1:5e:3f:80:6f:50:e7:54:e9:8f:25:6a:69:38: 1c:e9:1a:d8:cf:1a:57:1b:2e:f6:8b:84:2b:1e:9b:d9:a1:6e: 9d:11:8b:dc:e0:9d:a4:b6:8d:00:4c:99:98:bf:84:80:40:95: 21:86:37:4f:71:1f:c9:7c:9e:4d:8f:f8:24:aa:2f:3a:59:eb: 4e:61:62:84:91:b0:d5:96:f1:89:2f:f0:03:cd:28:dc:1d:69: 08:23:77:6a:19:7f:2d:fe:35:44:70:57:ce:64:85:5e:44:8b: 38:90:95:64:d0:ac:3b:06:2d:97:8b:45:85:5b:4c:24:9f:33: 40:16:43:b3:e4:65:0a:4e:ba:eb:8f:08:6c:39:13:1c:98:d9: 6d:84:5b:2d:7e:89:5b:af:96:06:c1:f2:32:3c:4c:38:e4:80: a9:28:9a:11:a4:12:cf:2f:1e:b0:4c:25:1b:b3:2b:69:ff:f0: e1:a8:75:b3:a3:1f:1a:83:6a:a5:b3:48:64:bc:24:a4:69:4b: 16:80:fb:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxulEzUXnDku8V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk MmJjOTNmN2MtMWEzYy00YjgwLTkxYzMtOGY4ZmYxOGQ5OTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7gy9vXVASZTNjtf7SKIUXMiYhpeG5Cscvxw GohvTRCnN/17ZfaQlx50kezsY/xPa1qBM8dc+lqz701T+Q7o/0vG3hD6bggckP6v o36PPnUuzpYh/App/oE952JVik1d3zOd1+lHPa0QKN+JUcd716TFKGXi2XSoVo6+ W8UphlIxZy2l5mGbueZmBFVduZUQ4FUEsAdXnPFRXzxaov0lub5uLgDiHnkXdQoD e2x6uwXqOK+b3x+jOzWWe+IeL7GLlFnIgUvBPrSDSENyhNUTT+9IM4gm8JLFZWdT rjyFv8TkL+FfPaQYDRqAR4VoXrsHtUe/QbBNb/zsoBPXmjDtYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnL1YuDEFyo7cuBZ2ftfnIlCWY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQyNDYwYjQtY2ZhYS0z NjE2LTk4ODMtN2U1OWFjZmI4MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyT82iZaFI9wTg9ZU8fa+usr8ClZA/fZlYgDlh7vZ4RZb/apPXKNc5W wWz7TsL9HcZiYbmevK7Aq8HRXj+Ab1DnVOmPJWppOBzpGtjPGlcbLvaLhCsem9mh bp0Ri9zgnaS2jQBMmZi/hIBAlSGGN09xH8l8nk2P+CSqLzpZ605hYoSRsNWW8Ykv 8APNKNwdaQgjd2oZfy3+NURwV85khV5EiziQlWTQrDsGLZeLRYVbTCSfM0AWQ7Pk ZQpOuuuPCGw5ExyY2W2EWy1+iVuvlgbB8jI8TDjkgKkomhGkEs8vHrBMJRuzK2n/ 8OGodbOjHxqDaqWzSGS8JKRpSxaA+24= -----END CERTIFICATE-----Generated at Wed Nov 5 01:26:20 2025 by rpki-client