$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa File: aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa (raw, json) Hash identifier: qfEUCjqiwRDdOLHnioWW+/pPOnw6oyWNA5SPARbMUSc= Subject key identifier: 1B:A4:BA:3B:74:13:49:DE:B1:E6:21:1B:85:C0:28:63:4A:88:52:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679765700310FAE32C748480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.19.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:65:70:03:10:fa:e3:2c:74:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2b102bd8-3d20-4903-9b24-f3ca4e376dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:1d:ef:0b:5d:01:b0:8e:08:c7:35:cb:d7: fb:4d:1d:91:df:3b:46:b0:cd:68:ac:b6:ac:f2:27: 42:69:d1:a8:03:43:01:ac:60:46:50:1d:7d:6a:14: 9c:c8:14:2e:14:68:ba:86:88:4e:a7:bc:a6:66:23: ac:20:a7:0e:e1:9b:ed:bf:71:86:2e:fb:58:9a:53: 69:59:a4:7e:7c:95:42:cf:65:8a:3a:01:08:39:21: 45:d1:64:c5:14:4a:bb:5d:f4:6e:b7:6c:a2:43:97: a4:16:94:88:d5:a4:f3:4d:2d:45:96:4b:15:49:88: bc:d0:1a:ba:d5:9c:5a:2e:8f:66:1e:18:51:67:bf: 7f:aa:92:85:25:5b:d5:6d:8b:eb:f9:5a:13:f9:38: bf:4b:61:4e:c4:47:c5:b4:a0:9e:ba:40:18:4a:01: 20:ac:4f:a2:67:07:0c:76:fd:72:fc:e0:2f:5c:65: 70:b4:f5:33:cc:75:8f:68:fc:11:83:7e:db:ec:c3: b0:20:76:af:13:10:48:98:d6:6a:80:4b:7e:03:dc: bd:55:2c:93:ec:9e:1e:33:38:0a:99:2b:2a:b5:ef: e3:f2:a3:a0:f3:ec:ef:e2:17:5c:c5:4b:db:4d:28: 9d:c0:ee:b0:66:1a:b2:f1:e5:f7:21:b8:d4:d6:db: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A4:BA:3B:74:13:49:DE:B1:E6:21:1B:85:C0:28:63:4A:88:52:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.19.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a7:0b:c9:36:44:7d:bf:88:6b:16:12:db:bc:9c:39:4a:a8: 70:a7:66:22:25:ae:41:d1:72:85:7d:10:a4:08:53:be:55:cf: 4a:90:5f:20:34:dc:f1:6e:01:04:fb:05:92:55:34:52:53:f1: db:60:88:5c:41:93:79:1c:75:0b:58:b9:a7:63:33:41:85:f9: 3e:0a:a7:11:88:ed:49:26:9f:45:e9:f5:50:a4:b2:6f:35:95: f8:11:77:15:a8:d5:7f:3f:c0:2c:05:00:7b:bb:51:9d:49:9c: 8c:9c:8c:be:2f:fc:b8:b7:05:2f:db:09:e9:b7:3e:5b:73:d1: bd:80:5e:8b:67:98:14:1c:83:37:f1:29:f5:8b:a7:3e:2e:7c: fe:df:86:e2:c5:cc:b7:ac:25:7d:b6:57:37:8c:99:f5:fb:de: 76:fb:d4:46:e6:7b:51:b2:5e:f1:5a:73:d3:ec:15:ef:b8:7d: 2b:21:9c:07:8c:30:7d:8a:6a:e8:7f:0a:55:3c:78:0d:ca:b1: 10:89:6b:7a:5d:31:ce:55:63:52:80:2b:e4:c2:7f:2d:72:fb: 70:5f:8d:0b:29:d8:99:56:84:e8:7b:49:78:28:05:5a:b4:75: 7e:96:cd:d4:ee:b2:6f:19:78:b9:5c:98:78:b7:22:77:08:3e: 3f:a4:3d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2VwAxD64yx0hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmIxMDJiZDgtM2QyMC00OTAzLTliMjQtZjNjYTRlMzc2ZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM4d7wtdAbCOCMc1y9f7TR2R3ztGsM1orLas 8idCadGoA0MBrGBGUB19ahScyBQuFGi6hohOp7ymZiOsIKcO4Zvtv3GGLvtYmlNp WaR+fJVCz2WKOgEIOSFF0WTFFEq7XfRut2yiQ5ekFpSI1aTzTS1FlksVSYi80Bq6 1ZxaLo9mHhhRZ79/qpKFJVvVbYvr+VoT+Ti/S2FOxEfFtKCeukAYSgEgrE+iZwcM dv1y/OAvXGVwtPUzzHWPaPwRg37b7MOwIHavExBImNZqgEt+A9y9VSyT7J4eMzgK mSsqte/j8qOg8+zv4hdcxUvbTSidwO6wZhqy8eX3IbjU1turSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBukujt0E0neseYhG4XAKGNKiFIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEyNTVkYzEtYzMyZC0z NWE4LWI0ZTgtMjdhN2NlOGQ1M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqnC8k2RH2/iGsWEtu8nDlKqHCnZiIlrkHRcoV9EKQIU75Vz0qQXyA0 3PFuAQT7BZJVNFJT8dtgiFxBk3kcdQtYuadjM0GF+T4KpxGI7Ukmn0Xp9VCksm81 lfgRdxWo1X8/wCwFAHu7UZ1JnIycjL4v/Li3BS/bCem3Pltz0b2AXotnmBQcgzfx KfWLpz4ufP7fhuLFzLesJX22VzeMmfX73nb71Ebme1GyXvFac9PsFe+4fSshnAeM MH2Kauh/ClU8eA3KsRCJa3pdMc5VY1KAK+TCfy1y+3BfjQsp2JlWhOh7SXgoBVq0 dX6WzdTusm8ZeLlcmHi3IncIPj+kPUE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:37 2025 by rpki-client