$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa File: aa7a7287-b1dc-3e23-925f-c1a9de542259.roa (raw, json) Hash identifier: fPqK4Kqscye7Hmxv6X14lJ/fBypJTSpwM5MOBk78rTo= Subject key identifier: 20:95:6F:26:60:EE:0D:F3:04:18:90:B3:0C:33:28:21:75:8C:7D:8D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD70ADC4190ECD7ED1E700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 11344 IP address blocks: 34.104.39.208/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:70:ad:c4:19:0e:cd:7e:d1:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=423ce877-8a70-4879-984a-258c90412cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:43:4d:70:00:0f:2d:1f:2c:72:c3:22:69:27: b4:5e:89:d4:f7:f0:d1:f0:c9:fe:40:92:9e:93:f7: 1c:bf:46:51:a3:ae:96:0b:c0:0c:da:44:14:45:15: aa:e3:7a:e2:7d:b7:22:ad:bb:66:cd:45:fb:d8:7e: e8:7a:fb:e7:53:70:4c:84:cb:ab:b0:a4:16:04:26: 4e:0f:19:f5:e9:91:b5:73:ce:1b:cc:5d:6d:f2:fd: df:f8:78:a6:15:2e:a1:d1:55:eb:0a:2f:a0:f2:62: 0b:1f:c4:d0:2c:0c:22:f5:f0:4b:8f:36:80:55:b9: 45:2b:60:ec:6b:84:2e:89:f9:9a:bd:eb:17:3e:b6: 6c:a4:af:6a:f3:aa:0c:59:0b:c9:84:82:e0:f9:f3: f3:30:82:4c:19:7c:11:1d:c5:fb:13:4c:96:77:a1: 30:df:eb:8e:61:30:e3:9e:9b:3b:8d:03:03:9d:7d: 4e:3c:5f:fc:c7:90:58:5d:59:24:61:b5:1c:f8:e1: 39:81:8b:b6:3e:58:cf:1b:2d:7f:72:65:b2:c7:b6: 1a:df:51:34:fb:94:53:2e:23:e5:71:a7:4e:03:84: 75:a4:3f:3c:d7:37:4d:9a:62:d6:c3:68:1f:b3:f3: 09:76:9b:9a:e8:a7:be:77:ee:ef:e2:2b:b3:54:00: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:95:6F:26:60:EE:0D:F3:04:18:90:B3:0C:33:28:21:75:8C:7D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.39.208/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:35:04:62:0d:6c:39:35:ca:2b:56:cc:96:09:99:92:ba:63: a8:28:fc:21:4b:d7:e4:5f:f3:1e:92:d1:24:2c:eb:22:b4:92: 12:d0:29:ad:5f:57:52:ee:f0:c7:49:3f:65:33:ae:49:9c:26: 02:c3:36:5d:65:b4:8d:12:0f:f0:02:5a:b9:42:d5:dc:0b:ce: d3:ef:65:64:33:6d:f4:7a:ca:b7:13:24:9e:9c:30:61:db:ff: 28:d6:35:2a:73:49:c9:0a:71:e3:67:26:70:b6:2f:a3:ee:d4: ab:ee:46:90:39:ae:ec:55:ff:cf:cb:69:e8:6d:f9:51:77:a2: eb:bf:2a:3b:df:f0:99:a6:7d:eb:60:f0:00:13:28:0e:83:80: 6e:74:71:53:86:05:02:e0:a5:33:2f:25:f0:a3:e6:2f:b4:09: 36:71:38:d5:4a:76:c2:d0:cb:41:65:70:c6:a8:29:e9:ae:c2: 19:57:25:73:8e:a2:5b:12:ee:85:3d:8f:1c:b3:fe:cd:81:a6: 4f:32:cb:aa:33:bc:56:12:2e:20:bb:da:f3:54:e3:65:0c:6e: a8:bb:a5:41:1c:3e:bf:54:3d:4c:47:87:12:fb:04:49:cf:89: c3:25:8d:67:3e:d7:7d:3f:49:d6:08:27:62:ed:0a:30:4e:12: 8b:d5:67:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtkzXCtxBkOzX7R5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDIzY2U4NzctOGE3MC00ODc5LTk4NGEtMjU4YzkwNDEyY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kNNcAAPLR8scsMiaSe0XonU9/DR8Mn+QJKe k/ccv0ZRo66WC8AM2kQURRWq43rifbcirbtmzUX72H7oevvnU3BMhMursKQWBCZO Dxn16ZG1c84bzF1t8v3f+HimFS6h0VXrCi+g8mILH8TQLAwi9fBLjzaAVblFK2Ds a4QuifmavesXPrZspK9q86oMWQvJhILg+fPzMIJMGXwRHcX7E0yWd6Ew3+uOYTDj nps7jQMDnX1OPF/8x5BYXVkkYbUc+OE5gYu2PljPGy1/cmWyx7Ya31E0+5RTLiPl cadOA4R1pD881zdNmmLWw2gfs/MJdpua6Ke+d+7v4iuzVADmEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCCVbyZg7g3zBBiQswwzKCF1jH2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE3YTcyODctYjFkYy0z ZTIzLTkyNWYtYzFhOWRlNTQyMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEImgn0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMNQRiDWw5NcorVsyWCZmSumOoKPwhS9fkX/MektEkLOsitJIS0Cmt X1dS7vDHST9lM65JnCYCwzZdZbSNEg/wAlq5QtXcC87T72VkM230esq3EySenDBh 2/8o1jUqc0nJCnHjZyZwti+j7tSr7kaQOa7sVf/Py2nobflRd6Lrvyo73/CZpn3r YPAAEygOg4BudHFThgUC4KUzLyXwo+YvtAk2cTjVSnbC0MtBZXDGqCnprsIZVyVz jqJbEu6FPY8cs/7NgaZPMsuqM7xWEi4gu9rzVONlDG6ou6VBHD6/VD1MR4cS+wRJ z4nDJY1nPtd9P0nWCCdi7QowThKL1WcX -----END CERTIFICATE-----Generated at Mon Oct 20 06:37:02 2025 by rpki-client