$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa File: aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa (raw, json) Hash identifier: SZCttN0N70yBMeZNFi/b3Q+0Jc2aaaj7qKbhp3EQc0k= Subject key identifier: A6:B1:21:08:A7:31:98:DE:6A:19:2F:27:60:27:AB:A1:76:A4:2A:79 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67977BEDA42A87FDE5E7D900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.66.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:7b:ed:a4:2a:87:fd:e5:e7:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=0954f0c9-4433-4001-933e-3adc3d52ac3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:24:42:90:e8:5f:70:0a:bd:8e:4c:cc:c1:95: f3:71:be:02:1b:38:28:79:2e:d6:95:e2:a3:a2:6a: 51:63:dc:a6:22:08:0d:28:08:e3:a5:09:4f:7b:24: 03:3c:71:80:46:b5:c5:70:a3:83:d6:4e:bd:65:98: f2:26:db:dd:15:c0:b5:8c:45:f4:aa:b5:54:5d:d0: 9f:97:0c:b2:d0:5e:f2:88:26:4e:7a:e6:48:7d:a4: e6:fc:80:58:5e:8a:1d:97:6d:c2:d7:c1:1f:3f:f8: 7a:7b:5d:d1:5e:60:b1:12:63:8a:3f:15:8b:4c:da: dd:07:c5:ef:a7:2b:f1:94:85:df:fe:3f:ea:00:43: f3:fc:89:d1:e3:ab:1f:12:90:28:dc:62:2e:be:ce: 73:49:e3:e9:1f:43:58:39:27:1b:f9:94:5e:ea:28: c3:54:19:df:11:16:18:96:78:dd:a5:84:d9:a5:d7: dc:aa:6c:c8:22:1c:99:65:80:f0:22:cd:74:c4:ce: b3:9e:ea:1b:84:81:b0:50:bf:d4:33:f0:32:61:62: 5f:06:fe:c3:18:64:67:58:9d:0a:72:ad:55:2e:07: f2:b7:e7:0c:ee:d1:13:08:1d:ae:8a:94:ef:8f:9b: 53:97:ae:58:92:3c:c6:e5:1b:f9:e8:18:cf:0d:7c: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B1:21:08:A7:31:98:DE:6A:19:2F:27:60:27:AB:A1:76:A4:2A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:9d:9f:8a:9e:ed:0a:cb:03:ea:31:7d:8f:d0:0a:a1:38:25: 8d:d4:c9:2a:3b:c1:2c:14:f1:69:5b:e9:f0:10:db:13:f5:5b: 89:e0:03:d4:83:62:c7:3b:42:b3:23:ae:d2:2b:fc:7d:e9:ab: 73:b2:be:2c:74:ee:0f:e8:91:10:93:0c:54:9c:41:4a:51:01: b7:6c:35:e8:89:38:01:8b:79:17:3f:74:a8:db:56:f2:64:f6: ab:3b:d4:00:ca:b7:a1:bd:05:3f:e7:9f:44:ab:80:dd:46:81: 7d:f4:2c:d1:95:a7:4a:29:87:d1:50:4f:b4:3d:7c:bf:3a:42: c5:62:09:ad:d2:f7:fb:80:89:eb:50:17:f2:bb:ca:c6:89:5c: 79:9b:bb:b5:d7:c7:4b:2b:40:13:60:81:73:9f:c2:ad:d4:8b: f6:80:d1:7c:3e:da:4f:6b:3a:76:3f:c8:2b:36:ac:ab:4b:77: af:49:4c:98:41:2f:fe:0e:bf:be:45:db:79:1d:74:87:60:e3: fb:7c:11:a6:e9:e6:19:80:e1:b1:fd:a0:78:37:9b:cf:88:7d: be:7b:94:e4:f5:ba:49:07:71:2a:7f:a9:f4:4e:0a:3e:52:ee: 47:15:6c:16:e2:58:bd:53:16:10:37:c5:bc:a4:4e:84:b5:43: 7f:c0:47:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3vtpCqH/eXn2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MDk1NGYwYzktNDQzMy00MDAxLTkzM2UtM2FkYzNkNTJhYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yRCkOhfcAq9jkzMwZXzcb4CGzgoeS7WleKj ompRY9ymIggNKAjjpQlPeyQDPHGARrXFcKOD1k69ZZjyJtvdFcC1jEX0qrVUXdCf lwyy0F7yiCZOeuZIfaTm/IBYXoodl23C18EfP/h6e13RXmCxEmOKPxWLTNrdB8Xv pyvxlIXf/j/qAEPz/InR46sfEpAo3GIuvs5zSePpH0NYOScb+ZRe6ijDVBnfERYY lnjdpYTZpdfcqmzIIhyZZYDwIs10xM6znuobhIGwUL/UM/AyYWJfBv7DGGRnWJ0K cq1VLgfyt+cM7tETCB2uipTvj5tTl65YkjzG5Rv56BjPDXwySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaxIQinMZjeahkvJ2Anq6F2pCp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEzZjcyOGMtMmI1Zi0z M2NjLWE3ODYtZjVhOTMzM2FjYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6dn4qe7QrLA+oxfY/QCqE4JY3UySo7wSwU8Wlb6fAQ2xP1W4ngA9SD Ysc7QrMjrtIr/H3pq3Oyvix07g/okRCTDFScQUpRAbdsNeiJOAGLeRc/dKjbVvJk 9qs71ADKt6G9BT/nn0SrgN1GgX30LNGVp0oph9FQT7Q9fL86QsViCa3S9/uAietQ F/K7ysaJXHmbu7XXx0srQBNggXOfwq3Ui/aA0Xw+2k9rOnY/yCs2rKtLd69JTJhB L/4Ov75F23kddIdg4/t8Eabp5hmA4bH9oHg3m8+Ifb57lOT1ukkHcSp/qfROCj5S 7kcVbBbiWL1TFhA3xbykToS1Q3/AR8I= -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:21 2025 by rpki-client