$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b548a6a1-7d1a-3891-845b-408572a16882.roa File: b548a6a1-7d1a-3891-845b-408572a16882.roa (raw, json) Hash identifier: TSQbxzizR4UxsnJ3+SpYpyGwTgBH7d1IKbgephA6VbE= Subject key identifier: D4:57:54:C4:FD:1C:2A:50:8A:9F:48:0B:A6:A9:29:FE:2B:53:9D:C8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976E954F2607AC3C0AE3A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b548a6a1-7d1a-3891-845b-408572a16882.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.99.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6e:95:4f:26:07:ac:3c:0a:e3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d163fdcb-6cb8-4f2c-91e0-43d3f7bda1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:0f:ae:4f:b1:e1:7f:f5:50:0f:fb:85:85: 30:5a:6f:de:3d:bd:38:e0:a5:f4:7b:83:4e:c4:cc: ad:e1:44:e0:3f:11:51:76:16:18:51:8b:99:47:70: 3f:e8:f0:29:96:50:25:29:c8:23:f0:51:e0:7d:49: 91:46:13:73:31:48:e4:46:88:8c:da:33:2e:e5:bd: 58:ea:b7:b5:df:32:91:5c:10:41:64:1d:09:d3:67: a8:63:e8:7c:87:83:b5:09:f9:ee:4d:49:0c:ca:98: 32:44:df:cb:36:8e:12:4c:79:55:5a:cf:1b:7e:a6: d0:49:32:d8:b7:ac:78:c2:ad:c8:ae:34:f0:af:39: b1:b9:46:37:62:1c:97:84:f5:8f:47:48:36:19:67: 20:d5:42:5c:11:11:32:0b:3d:87:46:eb:c1:61:b5: ba:e2:76:7d:5a:bb:49:22:3a:78:49:77:88:a4:72: 19:29:b6:d3:3d:31:42:a4:94:92:dd:d2:ce:59:f3: 07:1e:3f:6a:6b:55:98:77:26:ad:5b:0d:61:0b:bc: 5d:ff:5c:b8:e2:dc:24:15:66:a5:70:6f:a5:a1:91: 68:ca:c1:13:8a:9b:5e:10:7e:ca:25:f7:10:47:fe: 2c:be:47:a9:95:8f:2f:59:76:29:2c:11:43:d9:78: 54:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:57:54:C4:FD:1C:2A:50:8A:9F:48:0B:A6:A9:29:FE:2B:53:9D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b548a6a1-7d1a-3891-845b-408572a16882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0f:f2:aa:64:5e:c4:30:26:94:c1:b4:fa:4d:d3:c3:c2:dd: 7b:52:d4:bd:6c:5d:df:12:c1:50:f8:6e:e9:3e:c9:fe:b2:43: 2d:28:19:96:d9:cc:81:ac:bd:57:f0:14:e5:54:4f:b6:3b:13: 35:30:b7:a2:e1:2d:2b:fd:d8:37:7b:dd:e1:94:c1:de:2b:c1: 95:5c:41:49:f4:a3:2a:91:2b:9b:4c:46:38:fa:9c:43:00:0b: 7d:c5:de:c4:25:e7:b6:81:29:33:0f:4b:14:67:fa:17:93:21: 04:88:d5:ca:45:66:e6:14:46:bd:9f:32:29:41:c1:96:cf:ac: 4d:18:45:56:bb:85:91:83:ba:a1:9d:76:0d:c2:16:ab:f8:26: 08:71:59:18:43:e8:ee:d0:16:bb:22:5e:76:9f:7e:b1:fb:8c: 07:2d:22:ee:99:f3:fa:a4:d1:cd:f5:74:87:75:aa:dd:ad:ec: 8d:c1:eb:d4:d9:5c:3a:59:f8:d4:a6:76:3d:2b:f3:74:90:33: 1a:06:7a:66:e4:17:92:50:01:ac:89:bc:af:4a:48:56:38:6b: 78:c8:4f:8e:82:2d:78:f2:1a:30:14:5f:ce:f8:76:e7:32:12: 01:ea:b9:ac:4a:12:cc:f4:59:a5:6c:14:9d:9e:72:2f:81:0e: 6b:38:f2:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl26VTyYHrDwK46AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDE2M2ZkY2ItNmNiOC00ZjJjLTkxZTAtNDNkM2Y3YmRhMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoUPrk+x4X/1UA/7hYUwWm/ePb044KX0e4NO xMyt4UTgPxFRdhYYUYuZR3A/6PApllAlKcgj8FHgfUmRRhNzMUjkRoiM2jMu5b1Y 6re13zKRXBBBZB0J02eoY+h8h4O1CfnuTUkMypgyRN/LNo4STHlVWs8bfqbQSTLY t6x4wq3IrjTwrzmxuUY3YhyXhPWPR0g2GWcg1UJcEREyCz2HRuvBYbW64nZ9WrtJ Ijp4SXeIpHIZKbbTPTFCpJSS3dLOWfMHHj9qa1WYdyatWw1hC7xd/1y44twkFWal cG+loZFoysETipteEH7KJfcQR/4svkeplY8vWXYpLBFD2XhUKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRXVMT9HCpQip9IC6apKf4rU53IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjU0OGE2YTEtN2QxYS0z ODkxLTg0NWItNDA4NTcyYTE2ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsP8qpkXsQwJpTBtPpN08PC3XtS1L1sXd8SwVD4buk+yf6yQy0oGZbZ zIGsvVfwFOVUT7Y7EzUwt6LhLSv92Dd73eGUwd4rwZVcQUn0oyqRK5tMRjj6nEMA C33F3sQl57aBKTMPSxRn+heTIQSI1cpFZuYURr2fMilBwZbPrE0YRVa7hZGDuqGd dg3CFqv4JghxWRhD6O7QFrsiXnaffrH7jActIu6Z8/qk0c31dId1qt2t7I3B69TZ XDpZ+NSmdj0r83SQMxoGembkF5JQAayJvK9KSFY4a3jIT46CLXjyGjAUX874ducy EgHquaxKEsz0WaVsFJ2eci+BDms48uQ= -----END CERTIFICATE-----Generated at Wed Oct 22 21:25:39 2025 by rpki-client