$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa File: 9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa (raw, json) Hash identifier: BdBel7p62MXMABlkMdEW4rwjG9rvfREPpz3OIgwj934= Subject key identifier: 06:16:CA:41:F0:D8:B9:03:B4:DB:C6:89:0C:86:00:96:6A:5E:63:75 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797796DFB6FC6DD173FB780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.66.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:79:6d:fb:6f:c6:dd:17:3f:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=7a4c5d3b-ddfb-4f2e-bf8d-1af8eab09569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9e:e5:f4:5c:b9:a2:31:e0:46:6d:de:ef:79: c7:8c:08:a8:8e:98:e5:26:1b:a0:32:25:13:77:45: a6:48:17:fc:c1:a0:4d:a5:a6:80:7c:ad:03:9b:0c: 2d:fb:bc:f4:07:33:44:66:6c:8e:bd:25:d1:f5:00: a5:30:f8:fe:93:ba:e8:be:82:71:5a:ff:ee:ab:4f: 86:2d:d0:65:50:6d:60:aa:42:5b:4d:32:78:c2:dc: 37:e9:d4:0e:06:24:63:b7:33:80:3c:6b:1c:2e:ec: a7:54:dc:bc:98:d0:74:1f:17:a6:61:e8:52:d3:41: 98:63:68:50:78:de:41:41:6f:db:d4:eb:ca:05:a4: 25:e1:5a:7b:b4:e9:62:e7:f5:38:dc:58:67:d7:74: 5d:4f:fe:5a:35:97:5c:a1:7a:c6:b9:36:5c:1a:88: 38:06:b5:67:a4:71:e5:3b:f1:0e:38:cb:c5:27:9b: b6:0a:e6:2c:c5:c9:43:48:74:4b:02:1d:ed:10:e5: 18:d0:65:5f:6c:c1:f8:23:db:0b:d8:f2:6a:a8:2f: d0:2f:38:c7:ad:f4:44:fd:dd:01:e8:75:82:28:a2: b1:6a:c9:05:61:58:68:8c:86:a3:7d:26:b4:d6:aa: fc:6e:39:05:a2:84:6c:3f:f1:ed:be:1d:6d:42:bf: 1a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:16:CA:41:F0:D8:B9:03:B4:DB:C6:89:0C:86:00:96:6A:5E:63:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c8:19:1c:03:32:7b:4a:e0:9e:48:23:1c:7a:4f:bb:96:f7: 25:01:e4:67:cf:fc:d9:02:5f:d5:aa:af:63:ea:7e:da:df:a9: fa:a9:3d:a4:a9:c3:eb:f5:ed:ec:92:b9:9a:66:2c:5e:40:40: 47:9f:a4:bb:2f:ac:fa:47:9f:c3:a3:d7:b3:43:a5:a1:33:37: 30:dc:8e:dc:8b:26:6f:79:41:21:0e:a8:38:8b:6b:9e:b5:5b: 84:9d:b7:5d:76:dd:47:d3:04:cb:1e:bd:76:c5:c0:c8:2e:6f: a4:26:00:51:d4:5e:4c:28:21:38:71:78:ff:90:23:f6:49:5d: 69:1e:19:53:87:f0:01:de:3a:cb:15:7a:05:81:65:7c:63:3a: 39:5f:b9:78:39:8b:a3:d2:0b:6a:22:60:33:01:6d:39:6e:5b: 57:bd:9b:9c:ca:1e:47:dc:f2:af:85:9d:6c:3e:d3:05:8a:de: 00:1e:6d:7f:ff:0e:cb:37:05:ef:89:22:38:47:34:54:a7:a2: 78:f7:6a:ec:a6:01:d2:e6:31:6e:a7:c8:40:26:fd:4a:f7:b3: b3:9a:8b:27:e7:62:f7:50:11:ce:e8:cf:b0:43:81:22:76:48: e3:94:84:68:2a:e2:dc:59:a8:6f:b3:87:c5:3c:f4:ff:e2:a8: 84:ee:ca:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3lt+2/G3Rc/t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk N2E0YzVkM2ItZGRmYi00ZjJlLWJmOGQtMWFmOGVhYjA5NTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA357l9Fy5ojHgRm3e73nHjAiojpjlJhugMiUT d0WmSBf8waBNpaaAfK0Dmwwt+7z0BzNEZmyOvSXR9QClMPj+k7rovoJxWv/uq0+G LdBlUG1gqkJbTTJ4wtw36dQOBiRjtzOAPGscLuynVNy8mNB0HxemYehS00GYY2hQ eN5BQW/b1OvKBaQl4Vp7tOli5/U43Fhn13RdT/5aNZdcoXrGuTZcGog4BrVnpHHl O/EOOMvFJ5u2CuYsxclDSHRLAh3tEOUY0GVfbMH4I9sL2PJqqC/QLzjHrfRE/d0B 6HWCKKKxaskFYVhojIajfSa01qr8bjkFooRsP/Htvh1tQr8abQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYWykHw2LkDtNvGiQyGAJZqXmN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWUyY2RjY2MtN2YxMS0z NGRhLWJjNjQtMWE0ZDI5NzNlY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLIGRwDMntK4J5IIxx6T7uW9yUB5GfP/NkCX9Wqr2PqftrfqfqpPaSp w+v17eySuZpmLF5AQEefpLsvrPpHn8Oj17NDpaEzNzDcjtyLJm95QSEOqDiLa561 W4Sdt1123UfTBMsevXbFwMgub6QmAFHUXkwoIThxeP+QI/ZJXWkeGVOH8AHeOssV egWBZXxjOjlfuXg5i6PSC2oiYDMBbTluW1e9m5zKHkfc8q+FnWw+0wWK3gAebX// Dss3Be+JIjhHNFSnonj3auymAdLmMW6nyEAm/Ur3s7OaiyfnYvdQEc7oz7BDgSJ2 SOOUhGgq4txZqG+zh8U89P/iqITuylE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:00:18 2025 by rpki-client