$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2398c708-2979-35ba-8043-e39b190d97dd.roa File: 2398c708-2979-35ba-8043-e39b190d97dd.roa (raw, json) Hash identifier: kRkm2xH0LkmZCRImTnvWjRuniKjF179KQcfc4k/Amw8= Subject key identifier: 1D:DA:46:E5:8C:18:D8:30:05:9C:1F:7D:BB:42:75:10:50:75:85:3A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C5E4B4FB20CA07FA4380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2398c708-2979-35ba-8043-e39b190d97dd.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.189.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c5:e4:b4:fb:20:ca:07:fa:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=553db25e-3067-4b18-86ec-20b4e945ed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:16:06:c0:62:4c:9f:a2:2a:94:42:26:d2: 5f:f6:d7:43:18:53:e9:18:48:be:7f:39:9f:f2:c7: 10:c7:2c:1f:a1:52:00:45:39:4e:d7:e5:12:c8:7c: a9:fd:39:31:e2:ee:24:49:d8:54:94:c0:79:06:6f: b7:90:e6:08:98:0a:39:91:f8:78:1f:54:3b:31:c2: 15:dc:28:91:75:ab:66:61:ea:b4:97:cf:68:7d:eb: a5:a2:34:eb:49:1b:cf:fb:6f:1f:19:c6:3d:56:22: 71:a9:86:68:60:65:7e:ef:74:99:84:84:e1:8d:31: 4c:98:52:f9:99:7b:7b:04:f2:e4:93:d1:6e:dd:30: 98:28:0f:8c:5e:80:1e:fd:47:18:83:7b:9d:39:8f: a9:85:97:95:99:46:c5:bb:26:91:36:e6:3e:fb:9a: ca:00:26:8f:6f:a5:a4:5c:96:2e:e2:f4:0d:d3:4c: dc:12:b1:af:df:c6:1f:c3:97:28:32:62:14:df:54: 4f:76:67:34:f3:27:60:db:26:3d:6a:95:e8:da:d1: 01:e5:e7:a8:54:83:1f:b1:b7:1d:95:47:b8:cc:4d: 63:9b:93:70:52:68:fd:91:0e:1c:dd:e7:41:13:21: 0a:68:56:a5:b0:fd:6a:00:b5:8c:66:da:36:1f:b6: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DA:46:E5:8C:18:D8:30:05:9C:1F:7D:BB:42:75:10:50:75:85:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2398c708-2979-35ba-8043-e39b190d97dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1d:45:84:7e:d6:57:36:7a:2c:7c:c1:91:16:f8:78:1f:de: 77:1f:03:08:53:15:ea:77:13:1a:86:a3:e3:5a:68:f0:fd:66: 01:ab:98:69:c0:c9:04:38:86:62:36:7a:2d:5b:d1:71:b6:e4: 95:5f:cf:68:5b:72:c0:d7:3e:7d:e5:b1:b5:6c:94:83:31:e7: ef:6c:f5:7b:9c:92:b6:4a:b4:78:f4:88:35:a9:18:2b:67:c6: 19:27:65:21:c0:dd:c3:29:a1:1a:ff:e5:c7:35:c8:ce:e9:7b: 69:35:5d:a6:97:f0:fd:0e:08:67:de:d2:e4:37:38:a8:fb:be: 25:97:af:12:ee:fd:a4:46:13:21:b0:51:ca:4c:4c:11:a8:54: a8:32:1b:6b:16:65:db:40:aa:e0:db:33:ca:d0:e1:88:10:ac: 37:8e:a8:26:27:c1:11:88:1c:5d:fb:a2:4d:dc:e7:d2:de:0a: 54:1b:d1:7c:9c:a9:52:72:14:f5:8e:c5:49:36:e4:9c:8c:b8: 2c:68:95:fc:76:df:7a:2d:11:3d:37:87:7d:64:dd:18:7b:51: 01:ab:80:74:92:80:31:a3:1e:95:20:75:89:04:6a:c8:94:b5: 4c:24:8c:0c:fa:0b:20:83:dd:55:27:0a:8a:59:83:0a:d3:11: e7:28:80:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8XktPsgygf6Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTUzZGIyNWUtMzA2Ny00YjE4LTg2ZWMtMjBiNGU5NDVlZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwwWBsBiTJ+iKpRCJtJf9tdDGFPpGEi+fzmf 8scQxywfoVIARTlO1+USyHyp/Tkx4u4kSdhUlMB5Bm+3kOYImAo5kfh4H1Q7McIV 3CiRdatmYeq0l89ofeulojTrSRvP+28fGcY9ViJxqYZoYGV+73SZhIThjTFMmFL5 mXt7BPLkk9Fu3TCYKA+MXoAe/UcYg3udOY+phZeVmUbFuyaRNuY++5rKACaPb6Wk XJYu4vQN00zcErGv38Yfw5coMmIU31RPdmc08ydg2yY9apXo2tEB5eeoVIMfsbcd lUe4zE1jm5NwUmj9kQ4c3edBEyEKaFalsP1qALWMZto2H7ZikwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3aRuWMGNgwBZwffbtCdRBQdYU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM5OGM3MDgtMjk3OS0z NWJhLTgwNDMtZTM5YjE5MGQ5N2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI73wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMdRYR+1lc2eix8wZEW+Hgf3ncfAwhTFep3ExqGo+NaaPD9ZgGrmGnA yQQ4hmI2ei1b0XG25JVfz2hbcsDXPn3lsbVslIMx5+9s9XuckrZKtHj0iDWpGCtn xhknZSHA3cMpoRr/5cc1yM7pe2k1XaaX8P0OCGfe0uQ3OKj7viWXrxLu/aRGEyGw UcpMTBGoVKgyG2sWZdtAquDbM8rQ4YgQrDeOqCYnwRGIHF37ok3c59LeClQb0Xyc qVJyFPWOxUk25JyMuCxolfx233otET03h31k3Rh7UQGrgHSSgDGjHpUgdYkEasiU tUwkjAz6CyCD3VUnCopZgwrTEecogI4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:51:00 2025 by rpki-client