$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d36d692-ac5a-30b1-81a0-1742ecc25f27.roa File: 0d36d692-ac5a-30b1-81a0-1742ecc25f27.roa (raw, json) Hash identifier: yTAYGYKNOcSm1fEXxQK58DXkWgXGqFC6FLh9yZAqdyU= Subject key identifier: E5:04:92:F3:53:89:4F:D5:B2:0A:13:CD:26:A1:7E:E6:3F:F9:E8:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797860DFF69595743EE0280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d36d692-ac5a-30b1-81a0-1742ecc25f27.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.166.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:86:0d:ff:69:59:57:43:ee:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1a3f683d-38b4-49a5-a660-5b1018c58e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:92:fe:89:22:3a:be:85:e6:02:2d:2b:be: 1b:80:95:cb:a4:35:2b:0a:51:3a:7b:81:44:a1:21: d9:20:4d:c3:f1:54:63:61:09:c7:8b:33:e3:f5:da: 20:48:86:0d:af:49:9f:29:f0:98:5c:e3:0e:ea:31: fe:e5:8d:8f:58:29:09:81:ea:ed:83:bd:42:06:64: 76:1b:10:28:1e:e2:c4:d9:03:10:1c:e5:7c:99:d8: 9e:b7:9f:76:46:e8:27:7c:2f:4c:5b:1f:ab:be:8f: 4e:7f:e8:22:d2:b6:c1:20:10:25:a7:82:9b:fd:60: 8e:bd:68:e1:d8:ec:69:d7:ae:3d:6c:3f:88:96:c4: e0:64:63:20:98:9c:9f:e7:0a:eb:be:11:18:80:21: 65:6f:30:5f:f1:b5:de:f4:f0:f9:67:20:1c:a4:e2: d7:08:a1:e1:c4:e6:70:b0:58:ce:86:8a:46:21:d9: b0:e1:a7:b8:9a:56:91:c2:6c:fb:af:6e:cc:3f:8d: 2e:ef:da:ee:e5:db:dd:ba:be:b9:72:a1:b0:a7:64: c7:e6:22:2f:1d:87:95:67:f4:8a:6f:84:b5:09:e5: 6d:c2:f4:e0:28:08:ef:a1:64:5c:61:df:7f:2a:b1: b2:5a:ae:fc:5f:1f:cf:71:58:79:5a:4c:79:a2:d6: 1b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:04:92:F3:53:89:4F:D5:B2:0A:13:CD:26:A1:7E:E6:3F:F9:E8:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d36d692-ac5a-30b1-81a0-1742ecc25f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.166.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:4b:1c:22:6a:24:07:65:58:82:3e:cf:6a:c0:7d:06:48:75: b2:f5:e1:8a:48:18:d0:6a:0d:52:1a:c9:f5:87:ce:b3:34:18: 2c:d8:83:d5:7f:2a:a1:c5:7a:08:ce:bb:0b:5f:d9:fe:a1:b9: 3f:ac:85:f4:94:24:94:46:ea:a6:bb:9a:35:45:0b:a7:2a:39: 02:d0:28:37:bb:4c:c2:8a:6a:0a:04:b1:33:12:cf:87:3e:6a: 42:ce:74:a2:4e:89:45:41:04:54:8d:51:c9:5c:e4:4c:65:ec: b8:a0:6a:df:7c:44:50:be:32:ed:f8:7a:7e:7b:3c:1a:b4:57: a7:db:e4:23:08:b5:e0:db:d2:ce:ad:45:20:be:cf:7a:39:1a: 61:22:3a:5a:15:fd:48:d6:ce:05:cd:6d:67:cd:dd:fa:54:f5: ef:c9:9f:f0:a5:1b:7e:13:4f:d1:b9:19:bf:d8:89:59:77:2f: 16:d3:4e:ef:60:df:cf:71:42:20:ca:cc:7f:0f:1e:c8:d1:1f: c1:1c:18:eb:69:43:f4:24:a1:e9:82:44:67:aa:8b:d7:c3:8a: d3:0b:f0:f2:dc:0b:1d:10:1c:ea:e5:c3:5c:38:c2:81:7b:2d: 3b:2b:7a:18:a3:6f:c0:87:f9:b9:75:9d:f8:dc:db:24:2c:fa: 65:45:61:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4YN/2lZV0PuAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWEzZjY4M2QtMzhiNC00OWE1LWE2NjAtNWIxMDE4YzU4ZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF+S/okiOr6F5gItK74bgJXLpDUrClE6e4FE oSHZIE3D8VRjYQnHizPj9dogSIYNr0mfKfCYXOMO6jH+5Y2PWCkJgertg71CBmR2 GxAoHuLE2QMQHOV8mdiet592RugnfC9MWx+rvo9Of+gi0rbBIBAlp4Kb/WCOvWjh 2Oxp1649bD+IlsTgZGMgmJyf5wrrvhEYgCFlbzBf8bXe9PD5ZyAcpOLXCKHhxOZw sFjOhopGIdmw4ae4mlaRwmz7r27MP40u79ru5dvdur65cqGwp2TH5iIvHYeVZ/SK b4S1CeVtwvTgKAjvoWRcYd9/KrGyWq78Xx/PcVh5Wkx5otYbcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUEkvNTiU/VsgoTzSahfuY/+ehVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGQzNmQ2OTItYWM1YS0z MGIxLTgxYTAtMTc0MmVjYzI1ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIqYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpLHCJqJAdlWII+z2rAfQZIdbL14YpIGNBqDVIayfWHzrM0GCzYg9V/ KqHFegjOuwtf2f6huT+shfSUJJRG6qa7mjVFC6cqOQLQKDe7TMKKagoEsTMSz4c+ akLOdKJOiUVBBFSNUclc5Exl7Ligat98RFC+Mu34en57PBq0V6fb5CMIteDb0s6t RSC+z3o5GmEiOloV/UjWzgXNbWfN3fpU9e/Jn/ClG34TT9G5Gb/YiVl3LxbTTu9g 389xQiDKzH8PHsjRH8EcGOtpQ/QkoemCRGeqi9fDitML8PLcCx0QHOrlw1w4woF7 LTsrehijb8CH+bl1nfjc2yQs+mVFYUc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:18 2025 by rpki-client