$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/047b4ce5-821a-3341-a4cf-e032e2d4d899.roa File: 047b4ce5-821a-3341-a4cf-e032e2d4d899.roa (raw, json) Hash identifier: aoRP52fdtMHImRs4VC/5v2kr1upOEWISRJEb65qk2iY= Subject key identifier: FA:65:8E:35:0C:AB:67:61:BB:7C:3A:59:5F:0A:E1:4F:FF:68:52:F2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976B8602FB3F7794D1BE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/047b4ce5-821a-3341-a4cf-e032e2d4d899.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.236.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6b:86:02:fb:3f:77:94:d1:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=460501cf-63f6-48bc-92e0-d040bcbaa8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f8:62:0d:8d:99:b0:67:a2:6b:81:5f:25:75: 0c:cd:fd:ba:7f:ac:99:03:3a:0e:41:9e:d6:c0:7c: df:e2:f1:98:6a:6b:a3:19:c4:49:31:89:35:c0:72: c6:71:a9:0d:36:dd:f5:24:97:ae:91:1d:90:f4:fe: b2:ed:43:97:ca:ea:29:4d:dd:d1:84:17:13:d7:ce: 50:30:1b:f2:05:e0:04:a9:ce:b5:cc:68:11:e4:dd: 9e:e6:c2:d0:94:55:f5:25:62:08:10:dc:0d:34:74: 0d:0c:fb:6f:72:d1:07:98:c6:53:e7:c2:03:1a:6a: c2:2f:4b:2f:cf:91:30:16:0e:4d:95:c4:f6:cb:eb: 1f:1b:c0:23:6f:c4:77:ed:c0:d8:31:ec:e8:ef:80: 7f:5b:c6:97:9c:26:bb:9a:3a:1a:df:78:8d:61:33: cd:e6:75:df:57:ff:2f:6e:2a:93:ca:68:91:84:f7: eb:f5:64:2d:11:f2:ca:e1:4a:3f:ba:13:c4:bb:f9: ca:7f:02:37:67:08:a9:67:64:1a:26:69:77:66:05: 1e:8b:ef:2d:c0:84:8b:2b:86:76:f7:fa:36:ec:72: 6a:da:17:20:86:1e:20:0b:c9:32:fc:27:79:79:20: 72:ef:19:a8:60:51:10:bb:07:d6:bc:c9:6f:7d:f7: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:65:8E:35:0C:AB:67:61:BB:7C:3A:59:5F:0A:E1:4F:FF:68:52:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/047b4ce5-821a-3341-a4cf-e032e2d4d899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.236.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:23:81:99:12:51:8a:da:a3:be:69:10:e3:d0:6c:4c:a3:59: 76:ae:0a:65:39:46:ae:9c:63:3e:49:48:3c:11:0d:c0:a1:2b: be:d3:9d:75:06:21:5c:b9:6b:2b:18:9e:6f:43:b6:48:b7:6f: 9e:80:c5:70:47:6f:e1:c7:7e:b8:de:28:8a:2d:81:41:5c:df: 63:db:b1:9f:f9:1e:7e:c9:c8:af:52:81:dc:b5:24:c9:d8:bc: 97:28:21:cc:1e:ef:00:96:6c:b1:56:a7:e3:74:24:fb:32:34: 58:f3:9c:57:fd:b6:fe:77:ad:4e:d6:0d:0d:33:c9:7b:6b:ee: 21:33:aa:ee:76:58:4d:75:64:a9:ef:f8:f4:c1:00:cc:81:9d: bf:aa:cf:0a:d8:5a:64:e5:ca:4f:5e:90:85:fe:51:05:1e:ba: 4d:f8:7e:2f:87:d6:26:89:cc:36:7d:57:ab:0a:9a:92:d9:e3: 5d:ea:7e:bf:2f:d6:d6:9b:b8:72:8d:15:85:2d:32:4c:8f:4f: 18:d4:64:0b:68:76:2b:a0:00:0c:17:29:d0:a4:39:a2:f8:36: 3d:b7:ee:08:40:64:de:a5:71:b7:de:47:25:06:fb:49:15:3d: 52:fc:ef:94:49:4c:2f:bd:7d:bd:4a:2e:90:45:70:2a:63:3e: 8c:d6:99:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2uGAvs/d5TRvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDYwNTAxY2YtNjNmNi00OGJjLTkyZTAtZDA0MGJjYmFhOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvhiDY2ZsGeia4FfJXUMzf26f6yZAzoOQZ7W wHzf4vGYamujGcRJMYk1wHLGcakNNt31JJeukR2Q9P6y7UOXyuopTd3RhBcT185Q MBvyBeAEqc61zGgR5N2e5sLQlFX1JWIIENwNNHQNDPtvctEHmMZT58IDGmrCL0sv z5EwFg5NlcT2y+sfG8Ajb8R37cDYMezo74B/W8aXnCa7mjoa33iNYTPN5nXfV/8v biqTymiRhPfr9WQtEfLK4Uo/uhPEu/nKfwI3ZwipZ2QaJml3ZgUei+8twISLK4Z2 9/o27HJq2hcghh4gC8ky/Cd5eSBy7xmoYFEQuwfWvMlvffck6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpljjUMq2dhu3w6WV8K4U//aFLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDQ3YjRjZTUtODIxYS0z MzQxLWE0Y2YtZTAzMmUyZDRkODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8jgZkSUYrao75pEOPQbEyjWXauCmU5Rq6cYz5JSDwRDcChK77TnXUG IVy5aysYnm9Dtki3b56AxXBHb+HHfrjeKIotgUFc32PbsZ/5Hn7JyK9Sgdy1JMnY vJcoIcwe7wCWbLFWp+N0JPsyNFjznFf9tv53rU7WDQ0zyXtr7iEzqu52WE11ZKnv +PTBAMyBnb+qzwrYWmTlyk9ekIX+UQUeuk34fi+H1iaJzDZ9V6sKmpLZ413qfr8v 1tabuHKNFYUtMkyPTxjUZAtodiugAAwXKdCkOaL4Nj237ghAZN6lcbfeRyUG+0kV PVL875RJTC+9fb1KLpBFcCpjPozWmSQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:48 2025 by rpki-client