$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa File: 0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa (raw, json) Hash identifier: rH9EYvRDjNAk5WG4BlBl5d+/XVnIINSgiFa4fYNbVZg= Subject key identifier: 1C:37:5F:6E:6F:2D:36:26:62:67:76:12:B8:1C:89:BA:15:8D:83:0B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D0869AB7C7A414367180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.228.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d0:86:9a:b7:c7:a4:14:36:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a04c7b79-cad5-4107-b371-600046081eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:75:ca:ca:6a:fb:f6:12:bf:b6:15:d3:8e:6e: 16:d3:3a:cf:ae:60:58:3b:e1:a0:84:52:8a:54:49: 79:06:97:88:85:86:2e:16:40:b4:3f:47:57:1f:f3: 37:92:f2:4c:84:8f:a8:43:7e:59:68:4c:08:17:ef: 8b:a1:3c:f4:c2:95:35:f7:e5:89:13:af:8d:71:59: 39:21:ea:81:6c:13:8a:83:e0:23:45:1a:ae:92:b8: 7f:31:ec:eb:90:b7:03:da:cd:a5:58:71:15:f1:d4: 41:14:21:41:e9:d8:a7:e2:86:9d:62:bd:61:0f:64: 4b:85:c7:bc:f7:79:b5:ed:28:b4:c8:94:1b:a9:f7: 09:5a:8c:c1:90:57:06:bf:83:02:e0:8c:b2:f8:f9: d3:f6:18:30:1f:d9:4b:44:87:7d:07:3e:31:1f:f0: d1:17:10:54:13:19:9e:65:67:5f:f7:6a:a6:42:64: 36:e6:c1:74:d1:29:5b:bf:18:5c:39:b6:bd:f4:9d: 7c:8e:55:64:73:6d:d4:0e:9d:4f:77:09:7f:be:94: c9:a4:66:19:28:65:a7:f0:12:e4:ee:b6:28:fa:ab: d4:36:1b:4d:77:dc:6c:11:27:ea:e9:a1:e3:85:59: 55:f3:63:2b:85:36:7f:ce:3f:f2:87:b5:a7:8c:37: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:37:5F:6E:6F:2D:36:26:62:67:76:12:B8:1C:89:BA:15:8D:83:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cd:7e:b2:28:84:ab:05:31:ba:50:43:04:df:47:71:0e:86: 5c:3e:d7:e8:1e:f9:f2:26:8a:87:2d:d8:33:a1:e1:6b:f9:9b: db:7f:c8:cf:0d:f2:60:06:5c:7c:c8:56:d1:4c:f6:c7:8e:82: 32:e0:56:fe:b3:98:88:e5:c9:08:e4:9e:9f:34:80:9d:ba:6f: 46:27:92:9e:d4:bb:ca:78:f5:b5:66:1d:e3:b0:3b:f7:85:22: 5d:c2:c3:1f:2b:97:dc:e3:8a:16:6b:27:f5:da:f5:79:6b:2b: 8b:94:30:06:9d:28:82:f7:20:26:48:59:e8:4a:bc:d9:fd:a6: 00:be:fc:c7:bc:f7:82:c8:3e:5f:68:33:6f:3d:1e:ef:75:1e: e2:65:34:77:0c:83:fc:36:e9:e4:d0:6d:1b:a4:90:4e:1d:84: 76:65:bf:41:3c:b7:e7:48:22:6f:3a:8a:2e:ed:1f:b1:ca:46: 43:fc:aa:fd:4a:b8:b5:5e:e2:93:76:a1:11:f4:b9:3a:ff:7a: 9b:bc:f7:42:d0:73:c0:1e:e7:5f:0c:aa:d9:91:a6:4f:9f:86: ac:a3:2e:1e:18:bb:fe:08:0f:89:58:72:29:67:e3:47:85:77: b5:7f:c9:9a:95:91:b0:48:5c:56:3c:09:38:f4:ff:e5:03:aa: b8:04:cb:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9CGmrfHpBQ2cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTA0YzdiNzktY2FkNS00MTA3LWIzNzEtNjAwMDQ2MDgxZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XXKymr79hK/thXTjm4W0zrPrmBYO+GghFKK VEl5BpeIhYYuFkC0P0dXH/M3kvJMhI+oQ35ZaEwIF++LoTz0wpU19+WJE6+NcVk5 IeqBbBOKg+AjRRqukrh/MezrkLcD2s2lWHEV8dRBFCFB6din4oadYr1hD2RLhce8 93m17Si0yJQbqfcJWozBkFcGv4MC4Iyy+PnT9hgwH9lLRId9Bz4xH/DRFxBUExme ZWdf92qmQmQ25sF00SlbvxhcOba99J18jlVkc23UDp1Pdwl/vpTJpGYZKGWn8BLk 7rYo+qvUNhtNd9xsESfq6aHjhVlV82MrhTZ/zj/yh7WnjDcLzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw3X25vLTYmYmd2ErgciboVjYMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGRhZDViOGUtMmI2Yi0z MWZiLThkODEtNjI4NzVhYzVhOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+RgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHNfrIohKsFMbpQQwTfR3EOhlw+1+ge+fImioct2DOh4Wv5m9t/yM8N 8mAGXHzIVtFM9seOgjLgVv6zmIjlyQjknp80gJ26b0Ynkp7Uu8p49bVmHeOwO/eF Il3Cwx8rl9zjihZrJ/Xa9XlrK4uUMAadKIL3ICZIWehKvNn9pgC+/Me894LIPl9o M289Hu91HuJlNHcMg/w26eTQbRukkE4dhHZlv0E8t+dIIm86ii7tH7HKRkP8qv1K uLVe4pN2oRH0uTr/epu890LQc8Ae518MqtmRpk+fhqyjLh4Yu/4ID4lYciln40eF d7V/yZqVkbBIXFY8CTj0/+UDqrgEy60= -----END CERTIFICATE-----Generated at Mon Oct 20 02:15:07 2025 by rpki-client