$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00669f3c-35a2-3127-b56d-625927b8e26f.roa File: 00669f3c-35a2-3127-b56d-625927b8e26f.roa (raw, json) Hash identifier: CxyxXR43u/MCZMoqUG6ifgLkVC2spwKaRFtf8rw/oVg= Subject key identifier: 24:80:F6:50:33:15:03:09:4E:E2:ED:B2:9F:1B:07:43:51:F0:FD:3F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BB2F7A15A74E6F300F4520A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00669f3c-35a2-3127-b56d-625927b8e26f.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 396982 IP address blocks: 34.158.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a1:5a:74:e6:f3:00:f4:52:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a9761370-00ed-4d2a-9ae3-969f9ed4e61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b6:e4:35:82:59:01:8e:98:9e:57:bc:3d:94: ef:16:66:d1:f0:8d:b4:60:cb:a7:a4:96:fb:04:fb: 34:6e:41:1c:0e:be:5e:f3:c6:c3:fb:16:c7:23:91: 2f:5f:20:82:bd:5c:33:cd:fb:8d:e6:99:e8:99:29: f8:81:df:d8:b9:9e:7d:e2:53:36:e8:cf:f8:7e:9f: a3:fb:81:55:e5:4d:c0:48:ed:98:9e:d4:e2:d0:90: 20:48:42:a2:92:50:88:99:3f:e4:43:81:21:e7:c9: c1:c9:3f:03:ba:76:a7:d2:b9:99:74:fb:df:db:a1: 74:9b:d8:00:45:98:7d:6d:a6:72:45:2b:31:aa:b7: 61:75:69:57:81:d5:3b:a8:43:40:8d:29:b1:d9:a4: 9a:6f:c0:44:a1:8e:4c:72:ae:1a:3f:64:e1:ae:e1: 82:d5:94:69:23:69:1e:a6:eb:fd:70:af:4b:4c:c8: 5a:3c:0a:92:90:ec:af:ff:2e:3a:70:99:ec:fb:68: bf:20:52:a1:92:a6:aa:da:b5:03:ce:4c:b6:9d:38: 37:3e:85:77:66:6a:cf:54:56:43:07:ac:42:60:8f: 17:3a:2d:64:64:c1:08:ba:06:a6:7a:de:c4:9a:d4: 04:2a:c6:d2:6d:ec:1b:22:8f:7a:b1:50:5f:c8:3a: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:80:F6:50:33:15:03:09:4E:E2:ED:B2:9F:1B:07:43:51:F0:FD:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00669f3c-35a2-3127-b56d-625927b8e26f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.158.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:04:63:64:e4:f7:f2:29:38:30:13:ce:7b:16:53:13:3e:3e: a6:7b:ec:5f:09:c8:32:c6:e2:94:7e:bd:c7:84:6a:9f:8b:23: b5:dc:2b:b1:18:f4:55:54:cc:e7:24:75:c3:27:ee:8d:19:d7: c5:0a:32:16:a7:b6:07:8e:69:66:6f:2d:b6:cf:1d:79:17:d2: dd:1b:c4:47:11:55:15:d5:e0:09:ee:b9:7c:38:d2:d1:e4:04: 4c:19:4f:d3:42:05:bf:86:78:4c:82:9a:7a:a3:85:d6:47:d0: 48:d0:32:a1:f7:89:51:83:12:a9:f5:e7:bb:0f:c5:a0:1a:0d: ba:3f:1b:0f:66:ba:5b:4e:9c:0d:96:75:f7:0a:f1:35:5e:2d: 70:3e:2d:4b:00:38:dd:ae:61:0f:02:de:03:cd:80:e9:5e:89: f6:1d:22:b7:99:2c:00:49:99:a2:ee:e8:ea:89:50:b3:69:c5: ac:25:fa:7c:6c:49:0a:98:31:a3:1a:32:1a:e7:f1:dd:73:dd: 8e:50:c3:65:c7:68:61:c1:b6:9c:a8:a6:cd:eb:ec:b8:05:88: 3f:ca:46:ce:08:02:10:b2:f7:b4:36:8c:8e:d3:36:2b:75:3e: 43:1c:8b:c4:b3:0e:11:d1:a6:34:82:d8:3f:5d:d4:bf:bd:2a: 02:e5:ef:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96FadObzAPRSCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTk3NjEzNzAtMDBlZC00ZDJhLTlhZTMtOTY5ZjllZDRlNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7bkNYJZAY6Ynle8PZTvFmbR8I20YMunpJb7 BPs0bkEcDr5e88bD+xbHI5EvXyCCvVwzzfuN5pnomSn4gd/YuZ594lM26M/4fp+j +4FV5U3ASO2YntTi0JAgSEKiklCImT/kQ4Eh58nByT8Dunan0rmZdPvf26F0m9gA RZh9baZyRSsxqrdhdWlXgdU7qENAjSmx2aSab8BEoY5Mcq4aP2ThruGC1ZRpI2ke puv9cK9LTMhaPAqSkOyv/y46cJns+2i/IFKhkqaq2rUDzky2nTg3PoV3ZmrPVFZD B6xCYI8XOi1kZMEIugamet7EmtQEKsbSbewbIo96sVBfyDpwBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSA9lAzFQMJTuLtsp8bB0NR8P0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDA2NjlmM2MtMzVhMi0z MTI3LWI1NmQtNjI1OTI3YjhlMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIp6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMEY2Tk9/IpODATznsWUxM+PqZ77F8JyDLG4pR+vceEap+LI7XcK7EY 9FVUzOckdcMn7o0Z18UKMhantgeOaWZvLbbPHXkX0t0bxEcRVRXV4AnuuXw40tHk BEwZT9NCBb+GeEyCmnqjhdZH0EjQMqH3iVGDEqn157sPxaAaDbo/Gw9multOnA2W dfcK8TVeLXA+LUsAON2uYQ8C3gPNgOleifYdIreZLABJmaLu6OqJULNpxawl+nxs SQqYMaMaMhrn8d1z3Y5Qw2XHaGHBtpyops3r7LgFiD/KRs4IAhCy97Q2jI7TNit1 PkMci8SzDhHRpjSC2D9d1L+9KgLl7+U= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:14 2025 by rpki-client