$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f772d7fd-c6dd-3995-bdfb-14b9ffd59150.roa File: f772d7fd-c6dd-3995-bdfb-14b9ffd59150.roa (raw, json) Hash identifier: kCr7jbDrQFh+beU0qsRSeL7pGjcSYNHc1PZDzFI/r/Y= Subject key identifier: DC:77:E9:2C:32:6D:F4:26:5D:79:CB:02:D8:1D:02:A9:20:D9:18:F9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BA0D2703FCBF1D98F4FF88880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f772d7fd-c6dd-3995-bdfb-14b9ffd59150.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 34.186.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:70:3f:cb:f1:d9:8f:4f:f8:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=58173be3-b68d-4251-9804-588850ac1e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:fb:4b:b7:33:da:cb:cb:3b:77:20:4e:05: ce:58:5e:44:94:be:8e:b0:ff:ca:19:98:5c:42:af: d7:5f:1a:8d:d8:10:7b:1a:15:1e:66:15:4e:ab:27: 4c:48:ac:59:99:39:f8:40:9f:fe:37:60:2f:5e:75: 46:ec:17:79:dc:d9:cb:9a:a8:b0:79:9a:e0:60:36: ed:0b:29:00:5c:75:0e:63:a1:1a:98:5a:85:82:1f: ff:b6:ff:9c:25:58:fb:f4:7d:7f:c9:90:37:de:69: 80:c7:a9:68:6d:b4:a2:50:9b:c6:b9:55:91:7f:73: 1c:3a:22:27:72:f9:24:b3:75:1c:e0:47:f0:21:7b: d5:f7:b3:f8:c4:2e:0f:85:c6:be:c2:51:ac:79:3c: d7:5f:3b:4a:6c:11:c8:b4:60:94:67:a5:78:57:14: e1:29:98:ba:7f:59:e0:98:7a:82:d2:74:f3:b1:0c: cd:8b:d8:4b:3e:02:8e:1a:d0:b5:92:3c:bf:55:54: 64:b5:01:13:f6:e9:20:c5:34:f9:72:9f:fd:8c:95: c6:45:b9:9c:28:5b:1d:2b:45:ce:a5:52:8c:cd:5e: 39:ec:81:d9:66:f7:09:75:83:34:8c:ae:84:0e:73: 34:0e:fc:11:a1:4b:47:ca:9f:47:52:6b:98:86:f4: 80:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:77:E9:2C:32:6D:F4:26:5D:79:CB:02:D8:1D:02:A9:20:D9:18:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f772d7fd-c6dd-3995-bdfb-14b9ffd59150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.186.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:05:51:46:57:0e:a3:27:e3:27:c1:4e:dc:a7:cb:97:a9:b3: 0d:3d:a3:1c:50:bb:12:1c:e1:70:2e:11:81:c7:55:38:53:1c: e5:17:44:cd:20:00:d6:47:f9:16:78:db:b6:9a:46:3e:76:b0: 4e:7c:02:4f:23:89:40:01:f1:da:73:b5:40:70:28:a7:55:dd: 8e:ca:a4:42:ce:53:d9:a5:7a:dd:2b:f4:8f:8c:4a:c7:e2:36: 89:dc:df:ee:9b:dd:f2:fe:78:6e:da:ad:3f:3c:40:82:cb:9c: e5:e5:b4:3d:b3:f3:d7:3c:12:30:7c:42:e9:52:71:df:1b:17: 24:2b:bd:3a:67:27:e6:a9:a9:91:fa:1e:59:91:bc:6c:64:9f: cd:01:52:b3:78:b4:5e:25:bd:94:33:de:73:8b:73:69:a5:08: 5b:e5:36:6a:d4:f7:e4:d6:5b:53:c6:8d:9b:89:16:df:f2:93: f7:ff:a7:2a:65:3e:6f:77:c6:20:fd:fb:ce:78:25:66:80:0f: e0:bc:da:0e:8f:dc:93:1d:ff:34:e4:05:ec:b6:02:88:8f:0e: 74:f9:11:65:42:c6:8c:cf:37:b5:69:b3:d5:7a:14:df:a8:37: de:39:68:e6:59:1f:c4:ca:23:b1:bf:58:ca:21:ec:46:42:fd: 4d:82:68:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nA/y/HZj0/4iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NTgxNzNiZTMtYjY4ZC00MjUxLTk4MDQtNTg4ODUwYWMxZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO37S7cz2svLO3cgTgXOWF5ElL6OsP/KGZhc Qq/XXxqN2BB7GhUeZhVOqydMSKxZmTn4QJ/+N2AvXnVG7Bd53NnLmqiweZrgYDbt CykAXHUOY6EamFqFgh//tv+cJVj79H1/yZA33mmAx6lobbSiUJvGuVWRf3McOiIn cvkks3Uc4EfwIXvV97P4xC4Phca+wlGseTzXXztKbBHItGCUZ6V4VxThKZi6f1ng mHqC0nTzsQzNi9hLPgKOGtC1kjy/VVRktQET9ukgxTT5cp/9jJXGRbmcKFsdK0XO pVKMzV457IHZZvcJdYM0jK6EDnM0DvwRoUtHyp9HUmuYhvSA1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNx36SwybfQmXXnLAtgdAqkg2Rj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjc3MmQ3ZmQtYzZkZC0z OTk1LWJkZmItMTRiOWZmZDU5MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIrqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcFUUZXDqMn4yfBTtyny5epsw09oxxQuxIc4XAuEYHHVThTHOUXRM0g ANZH+RZ427aaRj52sE58Ak8jiUAB8dpztUBwKKdV3Y7KpELOU9mlet0r9I+MSsfi Nonc3+6b3fL+eG7arT88QILLnOXltD2z89c8EjB8QulScd8bFyQrvTpnJ+apqZH6 HlmRvGxkn80BUrN4tF4lvZQz3nOLc2mlCFvlNmrU9+TWW1PGjZuJFt/yk/f/pypl Pm93xiD9+854JWaAD+C82g6P3JMd/zTkBey2AoiPDnT5EWVCxozPN7Vps9V6FN+o N945aOZZH8TKI7G/WMoh7EZC/U2CaCc= -----END CERTIFICATE-----Generated at Tue Nov 4 18:51:09 2025 by rpki-client