$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa File: 250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa (raw, json) Hash identifier: uFI3lfFyvYHLkkhz8JazCKwo8O08AxbMg4pMowX47KQ= Subject key identifier: A9:9E:FF:4D:85:6C:94:0E:58:A6:37:F5:93:B9:69:59:DB:8D:D6:78 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797DBA0CEF5CA67DD515DA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.205.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:db:a0:ce:f5:ca:67:dd:51:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=6d408ae1-66fc-48ae-babe-c4b2220ef9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:54:f3:bc:65:1b:94:1e:b3:d4:87:0b:61:91: 41:ff:d3:ed:8c:9e:de:08:30:c7:6d:ed:d5:63:00: b1:ab:c2:89:d5:72:f8:eb:33:8f:ce:f7:39:27:23: 58:e4:96:27:78:ad:ae:f7:70:1b:81:e6:f4:7e:1b: 8c:10:22:12:f5:04:ba:40:f0:1d:00:96:98:13:42: e0:c4:fd:fe:fc:d8:e5:80:43:d1:c0:f1:d3:20:fe: 71:5d:50:6a:f8:86:c8:90:b8:11:09:9a:93:f5:8d: b0:1f:e7:d5:8f:a5:0d:04:94:d9:12:c1:83:73:60: 95:97:5e:c1:2f:1f:8a:c3:d1:9b:a5:26:6f:1c:a9: 52:bc:ae:23:db:e9:68:75:b1:cf:50:49:6b:68:3e: f3:4d:2f:f9:34:8d:0f:5a:25:83:d8:46:f1:80:69: aa:c2:04:59:bf:5f:b3:8c:96:c0:66:74:9b:ff:d4: 3f:f1:ec:e5:e4:28:b4:2f:fc:1e:0a:68:69:5a:8f: 00:f9:43:1b:7f:f5:25:08:25:76:7b:46:10:75:18: 6e:68:d5:5a:4f:ee:bd:c7:2e:cb:39:10:e2:1a:e5: 1b:2b:76:a4:ea:3e:4f:0c:94:a5:ad:a4:0c:39:fe: 4b:25:31:35:8c:e2:b0:cc:98:71:8e:58:b9:88:e5: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9E:FF:4D:85:6C:94:0E:58:A6:37:F5:93:B9:69:59:DB:8D:D6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.205.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:63:21:c4:64:5b:62:16:7f:c9:fb:17:9b:c4:a3:2f:a4:af: ea:8e:4a:7d:aa:27:bb:5f:97:63:75:7a:fe:9a:3e:b2:f3:81: d2:73:fb:f2:a7:23:2c:e1:5c:34:a0:3c:b7:8d:1a:2b:0a:ca: 41:c4:92:3e:ed:25:a5:62:32:45:7e:51:b8:54:b1:fe:7a:4b: b6:80:89:c3:4e:ee:37:17:c1:b2:bb:3f:04:34:29:ce:ab:e8: a8:fa:68:47:92:d5:af:ee:a6:79:d3:60:ef:f6:fc:4a:8a:f9: 24:04:79:ac:7a:b1:32:d6:3a:2e:3c:78:0a:ac:f0:7c:55:0e: 13:a9:4e:8f:c6:bb:85:17:21:11:d7:36:ee:2f:c4:10:26:fc: 20:b3:e8:2d:31:99:e9:7e:10:23:95:3b:3d:6b:f6:2d:05:1c: 35:0a:a4:e7:bc:67:dd:33:5c:19:70:81:ac:aa:3b:3a:65:b2: fb:2f:21:b6:1b:19:7b:89:f6:c8:83:55:83:e1:4b:f4:46:86: 04:fb:28:17:23:dd:82:38:fc:c0:1d:24:43:27:df:cb:7b:bc: ae:d4:1e:10:50:1a:87:af:f9:7a:83:0a:a1:f1:77:e1:7b:e8: 47:1a:94:da:b2:5f:c5:3f:ca:f1:99:04:bc:d3:85:59:88:a4: c7:9d:67:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9ugzvXKZ91RXaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NmQ0MDhhZTEtNjZmYy00OGFlLWJhYmUtYzRiMjIyMGVmOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVTzvGUblB6z1IcLYZFB/9PtjJ7eCDDHbe3V YwCxq8KJ1XL46zOPzvc5JyNY5JYneK2u93Abgeb0fhuMECIS9QS6QPAdAJaYE0Lg xP3+/NjlgEPRwPHTIP5xXVBq+IbIkLgRCZqT9Y2wH+fVj6UNBJTZEsGDc2CVl17B Lx+Kw9GbpSZvHKlSvK4j2+lodbHPUElraD7zTS/5NI0PWiWD2EbxgGmqwgRZv1+z jJbAZnSb/9Q/8ezl5Ci0L/weCmhpWo8A+UMbf/UlCCV2e0YQdRhuaNVaT+69xy7L ORDiGuUbK3ak6j5PDJSlraQMOf5LJTE1jOKwzJhxjli5iOVoxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKme/02FbJQOWKY39ZO5aVnbjdZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjUwZTJjZmQtYzU2OC0z ZmY5LTlmYTktOGU1ZWQwMmU0NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI83gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRjIcRkW2IWf8n7F5vEoy+kr+qOSn2qJ7tfl2N1ev6aPrLzgdJz+/Kn IyzhXDSgPLeNGisKykHEkj7tJaViMkV+UbhUsf56S7aAicNO7jcXwbK7PwQ0Kc6r 6Kj6aEeS1a/upnnTYO/2/EqK+SQEeax6sTLWOi48eAqs8HxVDhOpTo/Gu4UXIRHX Nu4vxBAm/CCz6C0xmel+ECOVOz1r9i0FHDUKpOe8Z90zXBlwgayqOzplsvsvIbYb GXuJ9siDVYPhS/RGhgT7KBcj3YI4/MAdJEMn38t7vK7UHhBQGoev+XqDCqHxd+F7 6EcalNqyX8U/yvGZBLzThVmIpMedZys= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:52 2025 by rpki-client