$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a42bdde-592d-3cb6-82a1-ad68fa26c40d.roa File: 6a42bdde-592d-3cb6-82a1-ad68fa26c40d.roa (raw, json) Hash identifier: Ycr5dByN6qHqeu982bQWvh+6EDHsEJWh/y5XiBX/hqQ= Subject key identifier: 34:5F:7F:40:40:F8:E2:79:C7:03:E2:3E:4D:AD:50:B1:9F:13:9D:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B9EEE7F7836CB7FAE561F4680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a42bdde-592d-3cb6-82a1-ad68fa26c40d.roa Signing time: Thu 23 Oct 2025 20:45:58 +0000 ROA not before: Thu 23 Oct 2025 20:45:58 +0000 ROA not after: Wed 21 Jan 2026 21:45:58 +0000 asID: 19527 IP address blocks: 34.4.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:ee:7f:78:36:cb:7f:ae:56:1f:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 23 20:45:58 2025 GMT Not After : Jan 21 21:45:58 2026 GMT Subject: CN=2e484f41-b5b6-4530-927d-5ce6d91119a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:cc:17:59:3c:18:0c:c8:07:55:75:74:53: 98:a7:89:fc:30:42:02:f0:51:bd:22:8c:3e:b1:76: c9:9d:40:ec:84:88:1f:6b:4d:53:7c:e1:fd:78:e4: 28:cc:d8:fd:af:86:7a:f1:37:a4:cf:ff:37:dd:ed: 0a:66:ea:30:cd:42:5f:ff:14:cb:5b:e7:cf:29:d3: ac:de:63:81:53:72:e1:82:18:d8:8d:97:bc:bd:f7: be:48:85:6e:e0:2a:34:ae:de:ac:5b:63:71:c6:8f: ed:b9:1f:f9:de:d3:df:31:b1:1e:21:73:f9:54:2d: a2:4b:84:3c:74:c2:00:d4:a6:07:c4:6a:3e:19:8d: b9:2a:87:ef:06:e1:43:77:7d:94:2c:23:f1:a3:5d: ea:e9:01:0c:ad:34:c8:8a:14:13:a9:dd:87:a3:52: de:52:e4:65:e7:7b:25:7f:9a:4e:74:f4:b8:11:b8: 12:2a:29:f2:cb:93:1f:9f:11:f2:0d:b9:b3:6e:4e: 5f:b9:c1:8f:71:34:ec:de:24:c4:3b:b3:07:82:1f: a5:d0:14:6c:ba:63:20:4d:db:bd:b2:77:33:79:a5: dc:9f:83:cb:5b:6d:76:97:43:b0:f8:2c:a5:27:78: e3:6a:70:fa:59:e5:12:a2:6f:9e:a9:a4:e9:24:92: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5F:7F:40:40:F8:E2:79:C7:03:E2:3E:4D:AD:50:B1:9F:13:9D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a42bdde-592d-3cb6-82a1-ad68fa26c40d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a4:49:4f:71:06:d3:0a:08:2d:5b:31:b1:22:52:02:73:27: 0d:a8:7d:23:80:c3:df:62:bd:00:e1:ab:00:b3:85:ff:33:82: c1:58:42:3d:05:99:f9:9d:b5:c9:07:6a:b9:05:b0:8d:d9:d5: 82:bb:9f:ff:7c:54:70:fb:3b:5e:49:f6:62:07:eb:32:f6:3b: 99:3b:1d:d2:f7:a0:71:23:0e:e1:7e:83:af:7f:93:94:c6:5a: af:93:81:4e:79:aa:b3:88:59:a2:49:4e:ff:77:bb:b8:52:ea: d5:1b:10:cf:00:22:97:ea:58:df:03:1f:86:9b:39:25:c4:b0: fa:40:92:3a:2c:87:2f:c9:72:65:46:a8:aa:d3:65:ee:b0:24: 64:cd:04:3f:d8:98:75:3b:07:c1:93:ff:4b:de:fe:39:0d:62: e5:33:9c:06:b6:01:e4:50:90:a0:63:b2:e4:be:e0:89:02:89: e4:5d:17:87:6d:eb:21:d8:52:23:19:1a:92:92:40:32:08:f3: 35:53:10:69:77:9b:3e:57:68:11:2d:4a:fd:3b:f8:e8:f7:88: 1b:11:d0:2c:dd:9f:db:d1:56:16:80:0c:a3:0e:9d:3e:ea:8f: b0:44:e0:7a:56:48:97:e7:0e:08:8a:26:1a:4a:d0:bb:6b:33: 59:66:42:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEue7n94Nst/rlYfRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyMzIwNDU1OFoXDTI2MDEyMTIxNDU1OFowLzEtMCsGA1UEAxMk MmU0ODRmNDEtYjViNi00NTMwLTkyN2QtNWNlNmQ5MTExOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlezMF1k8GAzIB1V1dFOYp4n8MEIC8FG9Iow+ sXbJnUDshIgfa01TfOH9eOQozNj9r4Z68Tekz/833e0KZuowzUJf/xTLW+fPKdOs 3mOBU3LhghjYjZe8vfe+SIVu4Co0rt6sW2Nxxo/tuR/53tPfMbEeIXP5VC2iS4Q8 dMIA1KYHxGo+GY25KofvBuFDd32ULCPxo13q6QEMrTTIihQTqd2Ho1LeUuRl53sl f5pOdPS4EbgSKinyy5MfnxHyDbmzbk5fucGPcTTs3iTEO7MHgh+l0BRsumMgTdu9 snczeaXcn4PLW212l0Ow+CylJ3jjanD6WeUSom+eqaTpJJI4KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRff0BA+OJ5xwPiPk2tULGfE52EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmE0MmJkZGUtNTkyZC0z Y2I2LTgyYTEtYWQ2OGZhMjZjNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIikSU9xBtMKCC1bMbEiUgJzJw2ofSOAw99ivQDhqwCzhf8zgsFYQj0F mfmdtckHarkFsI3Z1YK7n/98VHD7O15J9mIH6zL2O5k7HdL3oHEjDuF+g69/k5TG Wq+TgU55qrOIWaJJTv93u7hS6tUbEM8AIpfqWN8DH4abOSXEsPpAkjoshy/JcmVG qKrTZe6wJGTNBD/YmHU7B8GT/0ve/jkNYuUznAa2AeRQkKBjsuS+4IkCieRdF4dt 6yHYUiMZGpKSQDII8zVTEGl3mz5XaBEtSv07+Oj3iBsR0Czdn9vRVhaADKMOnT7q j7BE4HpWSJfnDgiKJhpK0LtrM1lmQtA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:18:26 2025 by rpki-client