$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5aed7b40-c545-3782-b870-971b4f8dbd28.roa File: 5aed7b40-c545-3782-b870-971b4f8dbd28.roa (raw, json) Hash identifier: 4PHHT190JhuJoMlGgzcUmXmu5KvbxzN7WNNzytUD//I= Subject key identifier: 27:1A:02:1F:69:7F:D5:C4:82:78:63:A0:50:B8:C8:56:A0:97:C9:56 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797E24C77F19EFF6C9E2800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5aed7b40-c545-3782-b870-971b4f8dbd28.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.176.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e2:4c:77:f1:9e:ff:6c:9e:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=17fb2efb-3aa6-455c-9d8c-f98b8d24fe74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:00:4e:9a:97:71:dd:c7:9c:db:99:48:66: d7:7d:80:45:ef:6a:20:8f:dc:12:d2:f3:75:38:0e: e6:91:58:45:46:7f:2c:4a:2a:d8:2e:df:cd:0e:5b: c5:45:ae:fd:7d:e1:a6:a8:6f:b4:07:d9:bb:1e:9f: 26:d3:1b:40:59:04:c8:07:7a:01:a2:1a:b1:9a:4d: 3d:40:7c:a0:e1:29:a1:56:d8:f7:ed:11:00:3e:72: 69:c8:8f:2e:e4:ac:e6:bc:97:a3:1c:a5:15:da:a5: 5e:37:2e:5d:18:f8:5e:ff:52:c4:fd:ab:ac:d3:9b: fa:f9:ab:12:7c:8b:db:7d:69:1c:e4:eb:2a:30:d8: 48:47:e5:d4:01:0d:04:f5:a5:ec:96:b9:f3:a4:9c: 17:8d:f6:43:52:9f:b6:50:4d:c4:ce:49:8e:dd:c4: 61:6f:98:71:3b:92:59:66:25:5c:a7:d4:c2:5f:f8: ac:2d:a7:a3:e0:04:c6:4c:47:4f:12:a1:77:4d:28: a1:b5:46:32:05:6b:94:6c:6c:bb:d2:1a:a7:67:60: ef:0a:9d:43:c7:c5:99:de:12:63:de:f0:0b:4d:f8: 25:13:a3:6b:0b:f6:0a:6b:c2:1d:ed:ed:79:d6:97: 2e:37:e4:cb:35:0b:56:de:15:7a:b8:d6:89:76:e8: 50:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1A:02:1F:69:7F:D5:C4:82:78:63:A0:50:B8:C8:56:A0:97:C9:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5aed7b40-c545-3782-b870-971b4f8dbd28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f3:ea:07:c2:a8:13:5d:53:ad:80:3e:6c:85:6e:8b:b5:f0: d3:9b:50:25:48:07:6e:3e:b0:58:f0:be:81:dc:13:ab:f7:83: c5:b6:17:9b:25:b2:0d:61:a8:96:70:c1:9a:d6:cb:c9:82:b5: c3:54:93:66:18:9a:7d:73:c8:78:39:fe:3a:a1:4f:c5:00:ee: 9c:a1:62:ff:63:28:35:cf:8f:8e:66:d0:ba:16:2c:f1:2b:ed: fd:39:bc:c5:76:05:64:56:db:ca:a5:f9:de:24:86:ca:7d:88: 4d:3c:66:91:70:24:f4:ad:a2:99:e3:08:44:68:97:c1:5e:42: d1:5b:67:c2:94:5c:5e:59:6d:9e:8a:3a:f7:b0:63:61:68:65: be:15:d0:e3:ba:5d:ad:8a:cf:6f:f1:19:ee:6f:51:12:e7:ca: e6:5e:3e:18:0f:c0:12:3d:64:b4:8a:c7:a4:38:3b:11:5b:69: ab:dd:8e:3a:ba:52:3a:ed:10:4a:e3:4d:48:86:4e:0d:c4:69: a5:6d:3a:c6:ac:7a:c2:7f:9d:38:f1:1c:d2:b7:92:a2:af:a3: 1b:40:c1:9f:f6:ba:d9:43:f8:78:8a:8f:f3:11:c7:bb:78:61: 82:f9:1b:cb:c1:ff:11:e7:72:a0:9b:25:1f:17:78:20:e7:39: 00:7a:5c:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+JMd/Ge/2yeKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTdmYjJlZmItM2FhNi00NTVjLTlkOGMtZjk4YjhkMjRmZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr4ATpqXcd3HnNuZSGbXfYBF72ogj9wS0vN1 OA7mkVhFRn8sSirYLt/NDlvFRa79feGmqG+0B9m7Hp8m0xtAWQTIB3oBohqxmk09 QHyg4SmhVtj37REAPnJpyI8u5KzmvJejHKUV2qVeNy5dGPhe/1LE/aus05v6+asS fIvbfWkc5OsqMNhIR+XUAQ0E9aXslrnzpJwXjfZDUp+2UE3EzkmO3cRhb5hxO5JZ ZiVcp9TCX/isLaej4ATGTEdPEqF3TSihtUYyBWuUbGy70hqnZ2DvCp1Dx8WZ3hJj 3vALTfglE6NrC/YKa8Id7e151pcuN+TLNQtW3hV6uNaJduhQ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcaAh9pf9XEgnhjoFC4yFagl8lWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWFlZDdiNDAtYzU0NS0z NzgyLWI4NzAtOTcxYjRmOGRiZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzz6gfCqBNdU62APmyFbou18NObUCVIB24+sFjwvoHcE6v3g8W2F5sl sg1hqJZwwZrWy8mCtcNUk2YYmn1zyHg5/jqhT8UA7pyhYv9jKDXPj45m0LoWLPEr 7f05vMV2BWRW28ql+d4khsp9iE08ZpFwJPStopnjCERol8FeQtFbZ8KUXF5ZbZ6K OvewY2FoZb4V0OO6Xa2Kz2/xGe5vURLnyuZePhgPwBI9ZLSKx6Q4OxFbaavdjjq6 UjrtEErjTUiGTg3EaaVtOsasesJ/nTjxHNK3kqKvoxtAwZ/2utlD+HiKj/MRx7t4 YYL5G8vB/xHncqCbJR8XeCDnOQB6XO8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:52:33 2025 by rpki-client