$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f5f4f1b-e9fb-3a4b-b9b8-90e93c75974b.roa File: 1f5f4f1b-e9fb-3a4b-b9b8-90e93c75974b.roa (raw, json) Hash identifier: i+LUGnJ4ctIr+HkQcwbMqRkBgnE2sQDbmLyQXbZRnVk= Subject key identifier: C3:67:E4:A1:9D:36:01:E4:1D:65:2D:91:3D:48:BE:7A:63:E6:23:BA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C3E8C1B3E93052328180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f5f4f1b-e9fb-3a4b-b9b8-90e93c75974b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.201.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c3:e8:c1:b3:e9:30:52:32:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=413d9d47-dfb0-4f95-8d09-cdb24d464e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:66:a7:19:2d:59:ca:6c:ea:b0:4d:6a:ca: 40:a4:cd:b4:0d:bc:7b:fb:c2:8b:63:8a:35:14:62: 21:79:5c:86:1e:69:09:b5:89:a2:35:d0:ec:ae:ad: 66:38:9f:b2:51:a8:e0:36:9c:de:af:15:97:49:2f: 74:44:71:1b:bb:cb:c6:f3:bc:98:a6:ae:36:1f:89: 13:19:ef:69:8d:82:72:3e:70:8f:e0:ff:57:9e:62: ea:a7:5c:a6:1f:13:b6:72:58:70:e4:f0:70:e7:c1: c1:f1:3a:49:08:0b:38:ba:84:a0:d4:16:b2:95:dc: 1c:9e:bb:88:97:6c:f8:24:9f:7d:12:46:b1:fd:9f: e1:bb:df:1b:fb:86:cc:ef:ca:0a:12:f7:f7:5b:7d: ca:d8:84:33:25:dd:c7:b6:cb:63:03:5d:c0:ca:ef: 63:dd:61:df:2d:54:75:83:47:d9:57:1d:61:56:f7: 54:09:a0:96:90:0f:e4:6f:de:ba:1f:f3:7a:88:1e: 39:a7:9c:d3:b0:24:54:d7:72:50:2d:ff:95:42:fe: 7b:2c:13:db:32:fb:55:e3:b5:b1:77:fd:cc:af:a0: 01:fa:22:4f:9f:74:04:01:be:a5:59:bf:86:03:9e: 08:44:bf:f2:c7:9b:b6:0b:95:75:c8:dc:21:ed:0e: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:67:E4:A1:9D:36:01:E4:1D:65:2D:91:3D:48:BE:7A:63:E6:23:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f5f4f1b-e9fb-3a4b-b9b8-90e93c75974b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f5:60:f5:66:54:26:ee:fa:a6:9e:af:6d:bb:6a:78:10:c7: 32:cf:94:7e:09:8d:25:49:88:f9:b8:88:ab:86:a5:3f:67:15: d8:92:4e:cd:ad:28:09:47:d6:85:3d:b9:0c:e4:19:89:c4:ce: 59:14:03:d5:02:4d:94:b8:c3:56:6f:56:97:3f:9c:54:67:db: 44:5c:1a:00:f0:82:6e:93:93:00:53:b1:0b:17:44:fa:3f:ae: a5:7a:32:0f:f6:fe:df:04:d2:00:e4:58:38:94:0a:26:9c:41: ab:a8:34:b3:a8:78:3a:64:86:eb:23:46:06:4d:46:86:9e:59: 21:e8:db:2c:77:81:5e:da:ea:65:bf:9f:38:31:c6:c5:51:ee: 98:f8:e1:bf:4c:c7:1a:fe:ac:cb:ac:ce:1e:69:47:3a:f1:e3: 2b:9c:4c:27:8d:79:ee:c3:7f:f0:cc:7e:cf:42:a1:44:f8:03: 42:88:4e:13:7f:c0:99:51:85:b5:49:a0:2f:83:6a:ad:64:01: 18:0f:a0:d6:2c:c2:46:21:bf:97:48:74:cd:df:aa:8a:ed:d1: 2c:4a:08:aa:c7:59:0c:61:29:61:12:32:bb:68:38:36:17:7d: d0:30:19:f9:d1:e9:b2:ac:61:78:db:90:ad:31:fe:5b:4f:a2: 4a:7a:9a:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8PowbPpMFIygYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDEzZDlkNDctZGZiMC00Zjk1LThkMDktY2RiMjRkNDY0ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyatmpxktWcps6rBNaspApM20Dbx7+8KLY4o1 FGIheVyGHmkJtYmiNdDsrq1mOJ+yUajgNpzerxWXSS90RHEbu8vG87yYpq42H4kT Ge9pjYJyPnCP4P9XnmLqp1ymHxO2clhw5PBw58HB8TpJCAs4uoSg1BayldwcnruI l2z4JJ99Ekax/Z/hu98b+4bM78oKEvf3W33K2IQzJd3HtstjA13Ayu9j3WHfLVR1 g0fZVx1hVvdUCaCWkA/kb966H/N6iB45p5zTsCRU13JQLf+VQv57LBPbMvtV47Wx d/3Mr6AB+iJPn3QEAb6lWb+GA54IRL/yx5u2C5V1yNwh7Q4g1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNn5KGdNgHkHWUtkT1Ivnpj5iO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWY1ZjRmMWItZTlmYi0z YTRiLWI5YjgtOTBlOTNjNzU5NzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8kqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD1YPVmVCbu+qaer227angQxzLPlH4JjSVJiPm4iKuGpT9nFdiSTs2t KAlH1oU9uQzkGYnEzlkUA9UCTZS4w1ZvVpc/nFRn20RcGgDwgm6TkwBTsQsXRPo/ rqV6Mg/2/t8E0gDkWDiUCiacQauoNLOoeDpkhusjRgZNRoaeWSHo2yx3gV7a6mW/ nzgxxsVR7pj44b9Mxxr+rMuszh5pRzrx4yucTCeNee7Df/DMfs9CoUT4A0KIThN/ wJlRhbVJoC+Daq1kARgPoNYswkYhv5dIdM3fqort0SxKCKrHWQxhKWESMrtoODYX fdAwGfnR6bKsYXjbkK0x/ltPokp6mqU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:55:24 2025 by rpki-client