$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa File: e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa (raw, json) Hash identifier: pniFRf3X7ZxmZRbPupejEBX34XZ8PLSHeZWn4zBlAgo= Subject key identifier: 5D:A3:96:61:9A:DC:5D:E2:9B:04:4F:8B:98:03:D3:6F:DE:93:70:80 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A09710E1155818DBC480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.66.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a0:97:10:e1:15:58:18:db:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d1058ff2-396b-4db3-9002-bc1f9c94d91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:c2:30:21:49:3c:d7:7b:7c:be:9f:b1:ef: a1:3c:fc:61:e0:42:43:5d:2f:df:71:aa:50:fc:4b: 37:93:04:39:7d:16:f4:45:43:4e:eb:c4:a8:61:61: c4:e8:6c:1e:e9:ef:20:8b:07:4f:8b:cf:62:c9:e6: b4:a8:2f:ff:87:aa:9f:26:4d:00:48:1b:62:56:63: 8c:64:bd:7f:98:86:92:53:5a:05:6d:d3:5f:1b:d5: 5f:a2:b2:fe:fe:e9:e1:a0:e9:3a:87:01:48:b1:5f: 71:4e:e7:5b:d3:48:a3:7f:db:98:8c:28:3c:6c:23: e6:ad:15:d0:84:ef:87:e3:84:9f:89:b6:22:5d:0d: d1:ac:4c:2c:82:57:d5:32:c6:5f:8c:9c:93:51:47: 40:d1:45:47:39:e7:84:16:c4:d3:6b:b9:de:9a:eb: 8b:f6:d4:44:c5:d2:4e:d2:a3:94:6c:04:1e:f7:00: fc:c9:44:49:6d:31:d3:ed:ef:61:ad:ac:37:a2:74: c1:b8:61:4e:7a:99:a5:67:b7:76:e1:ed:68:7c:9b: df:a8:61:85:6b:d8:6a:7a:1a:f4:d8:71:f3:47:d9: c0:08:cf:bd:62:7d:a9:c2:52:d9:c9:c9:4e:23:7e: 0c:ae:8b:d1:2b:c1:ee:42:d0:02:d0:78:c4:81:36: 9a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A3:96:61:9A:DC:5D:E2:9B:04:4F:8B:98:03:D3:6F:DE:93:70:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8a:e7:02:ac:b9:75:d1:0c:74:19:42:df:5a:42:cf:85:d2: f5:12:8f:a4:81:61:7d:ee:fc:57:2f:dd:d7:61:e1:84:b1:0f: 86:8e:b4:5b:bd:28:d7:e4:fb:8e:ec:21:20:e0:eb:ee:ca:4e: f4:92:31:ef:fa:2d:9f:72:a7:12:d9:4e:28:0a:96:b4:7a:2d: 61:1a:9c:2f:d6:22:93:c6:6e:a2:d3:04:83:ed:44:60:d8:f1: ed:0f:df:36:49:54:29:c7:69:61:3c:3c:04:69:b5:52:23:b9: bc:61:c3:bc:ae:0e:e7:c4:cf:cb:21:be:33:0a:59:6b:2b:44: 11:20:cf:be:4f:b2:60:8f:c9:22:ba:dc:11:ce:3d:e9:2d:d0: bd:a4:0e:62:17:fc:51:6d:b7:f1:0a:73:3b:5b:f0:52:3a:05: 0c:12:3f:65:ce:5c:d5:8d:db:f8:49:af:27:4f:cb:fe:2a:ce: 88:e2:86:df:42:05:2b:87:2c:c8:64:a2:c5:ea:21:07:8c:8c: 76:f2:7e:32:99:ca:b5:ef:7b:77:a0:d5:d1:4c:0c:a7:bb:72: b5:77:d2:10:ce:8f:49:5f:81:33:75:15:b2:32:36:8c:6e:f7: 50:53:a8:81:5f:94:f2:00:af:71:07:cd:d9:8d:9a:03:9b:cc: 24:7e:69:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6CXEOEVWBjbxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDEwNThmZjItMzk2Yi00ZGIzLTkwMDItYmMxZjljOTRkOTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5bCMCFJPNd7fL6fse+hPPxh4EJDXS/fcapQ /Es3kwQ5fRb0RUNO68SoYWHE6Gwe6e8giwdPi89iyea0qC//h6qfJk0ASBtiVmOM ZL1/mIaSU1oFbdNfG9VforL+/unhoOk6hwFIsV9xTudb00ijf9uYjCg8bCPmrRXQ hO+H44SfibYiXQ3RrEwsglfVMsZfjJyTUUdA0UVHOeeEFsTTa7nemuuL9tRExdJO 0qOUbAQe9wD8yURJbTHT7e9hraw3onTBuGFOepmlZ7d24e1ofJvfqGGFa9hqehr0 2HHzR9nACM+9Yn2pwlLZyclOI34MrovRK8HuQtAC0HjEgTaaIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2jlmGa3F3imwRPi5gD02/ek3CAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTFiYWY4MTAtYzFlMC0z YzMzLWE4YzgtNDExYjM4MjFlMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOK5wKsuXXRDHQZQt9aQs+F0vUSj6SBYX3u/Fcv3ddh4YSxD4aOtFu9 KNfk+47sISDg6+7KTvSSMe/6LZ9ypxLZTigKlrR6LWEanC/WIpPGbqLTBIPtRGDY 8e0P3zZJVCnHaWE8PARptVIjubxhw7yuDufEz8shvjMKWWsrRBEgz75PsmCPySK6 3BHOPekt0L2kDmIX/FFtt/EKcztb8FI6BQwSP2XOXNWN2/hJrydPy/4qzojiht9C BSuHLMhkosXqIQeMjHbyfjKZyrXve3eg1dFMDKe7crV30hDOj0lfgTN1FbIyNoxu 91BTqIFflPIAr3EHzdmNmgObzCR+afg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:04 2025 by rpki-client