$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9e0e008-e2da-3ab0-a712-9ab68a0983a3.roa File: e9e0e008-e2da-3ab0-a712-9ab68a0983a3.roa (raw, json) Hash identifier: HwvUR4TyGcbAaZFza0evVjv8ax1rYi8HVXgL1S+YJh4= Subject key identifier: 9E:CA:85:4B:6B:3E:93:34:4E:C4:56:42:84:15:B9:80:FE:11:64:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67978762F3A5B59FE4CD7040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9e0e008-e2da-3ab0-a712-9ab68a0983a3.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.76.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:87:62:f3:a5:b5:9f:e4:cd:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=bb9aa775-aafa-4124-ba7a-821535db57e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c8:58:0c:ca:cc:53:53:6d:04:7b:ff:ad:f4: 5f:a2:b1:44:ab:ba:6d:9d:e6:25:41:6b:c3:5f:d7: 44:f7:db:ba:62:a0:63:c4:cd:38:0d:98:49:d7:64: 3e:68:55:95:86:02:e5:48:bd:2a:f2:f2:99:dc:19: 9d:68:53:86:a2:33:39:07:80:eb:4b:86:24:ea:49: 0f:4b:12:5c:29:4f:d6:df:3f:5b:d4:a7:10:6f:bb: 69:4d:7d:7d:8f:ce:61:74:bc:79:22:f0:2b:83:26: 37:7e:bd:78:70:5f:62:05:a3:4e:71:76:92:59:93: 0a:7b:05:6d:5a:72:27:e8:1f:66:f4:04:3c:db:81: 28:53:65:1b:c3:27:1c:8a:1f:8e:c4:8d:33:a3:5b: 90:b4:77:51:25:7e:11:30:9d:f4:72:d0:9a:12:20: 8b:34:6e:d6:d1:39:00:2f:b6:59:d8:5d:15:19:9b: ab:9b:ca:9f:b4:c3:c4:cb:75:c2:33:0c:bf:c0:50: ef:da:d4:52:b0:8b:42:bd:59:ea:95:66:a3:7a:22: 9e:26:10:4a:7e:dc:c5:d3:7a:b4:02:cc:8a:9a:c1: 23:95:a2:96:02:21:c3:58:9a:21:87:b4:c8:0b:16: ef:95:31:9e:a0:1d:01:18:fb:31:ee:d9:20:c8:aa: 19:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CA:85:4B:6B:3E:93:34:4E:C4:56:42:84:15:B9:80:FE:11:64:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9e0e008-e2da-3ab0-a712-9ab68a0983a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e6:dd:08:cc:e6:31:c4:5e:c2:6d:11:c3:32:2f:ef:18:d5: e6:11:ab:68:15:fa:64:f4:6a:8d:5d:d6:23:f2:e5:7c:30:59: 73:45:9d:f7:25:92:73:24:47:d5:eb:10:73:2b:fb:e8:4c:7d: 11:d0:68:50:ca:48:5c:d9:ef:94:99:35:75:3f:b1:bf:73:c7: 37:0f:fe:b3:78:de:04:db:27:76:65:ec:7a:ad:ba:12:fc:fe: d4:ea:4e:6e:d8:58:1b:21:17:dc:5f:dd:b8:9b:06:38:d0:bd: 8e:2a:0d:96:a6:ae:e8:76:88:6d:93:93:bf:a6:b8:42:db:29: 97:f2:00:f7:99:15:6e:6c:85:18:75:7e:54:bb:f4:92:44:64: ab:81:9e:69:ba:c0:d4:fc:ba:72:52:fc:dd:87:65:d1:7a:70: 49:ee:9e:da:04:4c:0a:1c:ec:d9:6c:e3:d1:49:5e:f4:0e:54: c4:5e:63:94:b3:7d:a7:7e:60:02:69:a0:c0:27:3f:0d:74:f4: 96:5d:07:05:c1:40:8d:e7:07:eb:83:aa:23:0d:19:c9:51:b8: df:70:96:3e:fa:1b:f1:29:52:8f:cd:85:6b:42:08:54:56:b5: 72:c2:18:ae:d6:78:55:d1:aa:22:23:7e:ab:1d:7d:ea:d5:1b: 99:b3:c5:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4di86W1n+TNcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YmI5YWE3NzUtYWFmYS00MTI0LWJhN2EtODIxNTM1ZGI1N2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhchYDMrMU1NtBHv/rfRforFEq7ptneYlQWvD X9dE99u6YqBjxM04DZhJ12Q+aFWVhgLlSL0q8vKZ3BmdaFOGojM5B4DrS4Yk6kkP SxJcKU/W3z9b1KcQb7tpTX19j85hdLx5IvArgyY3fr14cF9iBaNOcXaSWZMKewVt WnIn6B9m9AQ824EoU2Ubwyccih+OxI0zo1uQtHdRJX4RMJ30ctCaEiCLNG7W0TkA L7ZZ2F0VGZurm8qftMPEy3XCMwy/wFDv2tRSsItCvVnqlWajeiKeJhBKftzF03q0 AsyKmsEjlaKWAiHDWJohh7TICxbvlTGeoB0BGPsx7tkgyKoZNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7KhUtrPpM0TsRWQoQVuYD+EWRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTllMGUwMDgtZTJkYS0z YWIwLWE3MTItOWFiNjhhMDk4M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXm3QjM5jHEXsJtEcMyL+8Y1eYRq2gV+mT0ao1d1iPy5XwwWXNFnfcl knMkR9XrEHMr++hMfRHQaFDKSFzZ75SZNXU/sb9zxzcP/rN43gTbJ3Zl7HqtuhL8 /tTqTm7YWBshF9xf3bibBjjQvY4qDZamruh2iG2Tk7+muELbKZfyAPeZFW5shRh1 flS79JJEZKuBnmm6wNT8unJS/N2HZdF6cEnuntoETAoc7Nls49FJXvQOVMReY5Sz fad+YAJpoMAnPw109JZdBwXBQI3nB+uDqiMNGclRuN9wlj76G/EpUo/NhWtCCFRW tXLCGK7WeFXRqiIjfqsdferVG5mzxYQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:21 2025 by rpki-client