$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e1412b5-e031-3cf7-8447-c5fc0cee25a1.roa File: 0e1412b5-e031-3cf7-8447-c5fc0cee25a1.roa (raw, json) Hash identifier: sauG2NiwWUE81IExpNSJtVL98qhm8SHA4Mp6ryI2ZSw= Subject key identifier: 48:8C:E8:25:07:9A:71:8E:A9:27:67:2C:EB:D5:60:21:BB:0D:07:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C271A3780DCC87F7C800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e1412b5-e031-3cf7-8447-c5fc0cee25a1.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.238.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c2:71:a3:78:0d:cc:87:f7:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=89ce610e-6fc3-4c50-859b-cee156158992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:5d:b6:24:46:14:8f:54:d1:29:1b:be:4b: d0:46:2c:f7:ee:b6:32:81:0b:aa:55:46:de:57:a8: 54:5d:5f:83:95:d2:97:58:68:7b:54:54:fa:fd:81: 1d:12:6b:ac:b2:ef:b3:2c:df:fd:da:a2:97:b3:60: 3d:26:dc:b5:11:dd:ab:21:05:f0:ca:dc:a7:e7:0d: 1b:32:b8:76:90:16:30:0f:0a:12:48:98:e8:14:b4: 39:62:95:7c:2d:00:39:b5:00:98:6f:f5:73:b2:b1: e5:36:4b:76:49:47:8e:a5:41:1c:e1:41:2b:19:2a: 05:06:a6:c4:d3:a8:49:a0:c2:c5:57:71:b5:15:88: 8f:51:27:c9:c1:6b:69:5d:7b:2d:de:ff:a6:38:09: 5c:8f:04:cd:9d:53:28:da:8b:e8:91:03:2f:1a:f3: e8:79:bc:02:96:c5:74:1e:d7:43:64:cf:4e:3d:0e: ce:e6:45:6b:e2:56:12:f5:48:85:05:0e:02:70:6b: 82:d7:c1:b1:60:21:f6:58:17:6c:b5:a0:04:53:1b: aa:ce:85:17:13:27:2c:b4:f6:f1:a7:2a:4d:dc:c9: 0c:da:91:0b:b4:e6:fd:e8:ef:5d:aa:93:97:06:de: 5e:8f:c3:ec:b2:d3:1c:87:4d:6e:1f:bc:37:64:f3: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8C:E8:25:07:9A:71:8E:A9:27:67:2C:EB:D5:60:21:BB:0D:07:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e1412b5-e031-3cf7-8447-c5fc0cee25a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:51:85:8e:cb:da:3d:32:48:12:fe:61:d5:e7:e5:0a:31:64: 51:db:bc:56:74:dc:e2:61:15:8c:3c:28:e4:48:64:23:c5:41: 48:16:d1:7a:ae:7c:93:9a:e9:b6:15:b3:5b:3c:3f:ef:bf:fa: 12:4d:e7:59:db:be:80:22:cc:87:18:50:d1:8b:74:c3:6f:68: 30:a6:85:ba:f2:7b:47:07:3d:0b:17:b5:ce:be:35:92:16:6a: cf:48:24:a5:3a:f0:4f:e0:b0:69:66:42:4c:c1:31:c1:e4:bb: b7:31:bc:00:a8:20:ae:5a:cb:b7:78:07:94:35:98:e6:f8:2f: 61:17:b5:c1:80:1b:c9:81:7d:6a:c6:be:5a:a5:7c:93:39:2f: 59:de:df:8b:7e:60:8e:fb:3b:63:1c:87:88:d8:69:e8:3b:b3: a9:24:9a:a1:82:d6:18:7f:ef:e7:ff:4a:12:4f:6f:8d:25:61: 24:52:f4:c5:ee:02:94:bf:4d:d7:9b:59:f9:7c:80:84:b9:08: 7d:7f:43:3c:c1:ad:bf:a3:d9:3f:a2:09:0b:be:26:d1:f7:55: 54:75:39:c1:62:41:67:12:c7:58:05:ef:6b:fd:e9:99:37:37: e6:a7:cd:fe:82:12:cd:5b:ab:18:8f:21:e7:4f:f0:82:0a:56: fa:e2:fd:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8Jxo3gNzIf3yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODljZTYxMGUtNmZjMy00YzUwLTg1OWItY2VlMTU2MTU4OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMJdtiRGFI9U0SkbvkvQRiz37rYygQuqVUbe V6hUXV+DldKXWGh7VFT6/YEdEmussu+zLN/92qKXs2A9Jty1Ed2rIQXwytyn5w0b Mrh2kBYwDwoSSJjoFLQ5YpV8LQA5tQCYb/VzsrHlNkt2SUeOpUEc4UErGSoFBqbE 06hJoMLFV3G1FYiPUSfJwWtpXXst3v+mOAlcjwTNnVMo2ovokQMvGvPoebwClsV0 HtdDZM9OPQ7O5kVr4lYS9UiFBQ4CcGuC18GxYCH2WBdstaAEUxuqzoUXEycstPbx pypN3MkM2pELtOb96O9dqpOXBt5ej8PsstMch01uH7w3ZPO/VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiM6CUHmnGOqSdnLOvVYCG7DQfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGUxNDEyYjUtZTAzMS0z Y2Y3LTg0NDctYzVmYzBjZWUyNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9RhY7L2j0ySBL+YdXn5QoxZFHbvFZ03OJhFYw8KORIZCPFQUgW0Xqu fJOa6bYVs1s8P++/+hJN51nbvoAizIcYUNGLdMNvaDCmhbrye0cHPQsXtc6+NZIW as9IJKU68E/gsGlmQkzBMcHku7cxvACoIK5ay7d4B5Q1mOb4L2EXtcGAG8mBfWrG vlqlfJM5L1ne34t+YI77O2Mch4jYaeg7s6kkmqGC1hh/7+f/ShJPb40lYSRS9MXu ApS/TdebWfl8gIS5CH1/QzzBrb+j2T+iCQu+JtH3VVR1OcFiQWcSx1gF72v96Zk3 N+anzf6CEs1bqxiPIedP8IIKVvri/XE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:43 2025 by rpki-client