$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b960135-6ec0-3bbd-839d-97cd00921b1e.roa File: 2b960135-6ec0-3bbd-839d-97cd00921b1e.roa (raw, json) Hash identifier: 0owm6+VneZHFrv2aNRhYsb2j/bYhZePOZXL85yWR0vc= Subject key identifier: 23:3C:94:C3:F0:F8:42:95:92:F9:2A:28:CB:44:87:6E:DA:84:B3:EF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976F35C75B9A0A8183A400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b960135-6ec0-3bbd-839d-97cd00921b1e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.246.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6f:35:c7:5b:9a:0a:81:83:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f9bd9ae7-8ff3-4243-8104-ab537373e447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:f6:1e:3b:dd:82:98:39:a2:cd:2b:e4:a0: f6:ba:51:8a:ab:92:84:2e:de:26:98:58:41:97:48: 4d:43:9e:a2:6c:98:4d:ac:0d:7b:e3:67:35:0c:e4: 43:63:07:d6:73:b4:54:1e:87:f0:54:09:c5:c2:57: 28:56:8b:23:6a:41:02:78:71:f6:3a:eb:be:14:d6: 03:00:09:67:b0:8f:9f:bf:02:e3:f5:50:63:a9:41: ed:86:b6:97:dd:66:4e:f4:4e:66:4d:95:2e:63:48: c4:4a:96:03:d2:f9:ed:2a:3e:e9:d5:c5:ce:75:c2: b1:62:ee:c2:22:ac:0c:14:d0:c0:46:53:5d:9c:e8: 96:2e:ca:cf:ed:38:b6:7f:b8:7d:bf:05:e4:39:78: 95:e8:24:7e:cb:9f:e0:d6:f8:b7:b0:ac:d8:c6:4f: 2f:59:cd:bf:c8:28:fb:52:32:b5:8a:ee:ae:6f:d8: 3e:f3:c2:e5:d5:0f:59:9d:55:6e:e1:7b:1f:00:d5: 5e:e8:cd:68:71:4d:9a:6e:b3:48:12:15:e8:3d:84: b4:d8:d0:ca:93:d4:2d:80:84:65:d8:34:ec:69:f0: dd:ac:07:73:1e:3f:80:df:f3:15:d6:f3:f4:5e:39: 6b:0b:3a:1f:a0:fc:5c:e1:5a:a7:b7:0b:67:e2:28: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3C:94:C3:F0:F8:42:95:92:F9:2A:28:CB:44:87:6E:DA:84:B3:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b960135-6ec0-3bbd-839d-97cd00921b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:08:d0:03:7d:a1:db:c1:62:44:e1:ab:74:47:d7:ad:48:0d: 64:e5:0d:ea:a1:65:01:11:21:7a:2f:9c:1b:6f:0f:97:6c:49: 83:88:c2:0a:76:f4:ea:8a:88:d3:04:d0:77:92:f2:4a:1d:31: dc:ac:a0:2e:94:f6:6e:0b:13:a3:b0:6c:64:be:3c:2f:af:86: e9:58:b8:c6:1d:10:dc:b6:25:f1:8e:56:74:65:4e:a6:62:81: 24:7f:4d:0a:5f:45:35:3a:27:67:11:47:f7:b3:21:65:a3:2b: 11:8f:5e:d5:29:f5:ac:3e:ed:ab:57:3b:98:0f:96:59:f6:f8: 62:0f:1e:50:62:11:35:44:22:4e:ae:41:db:0b:3e:9e:8f:90: 2c:14:f2:8b:6c:aa:73:05:0a:41:96:06:bb:a6:a2:0b:6e:9b: 89:2e:c8:41:9a:e1:79:d5:ff:e8:0c:54:6c:4a:5a:80:03:62: 17:25:18:53:c6:e8:d8:26:09:2a:2f:0b:b1:a1:ab:62:82:a2: ca:ff:c7:17:a4:ad:27:57:93:2f:7c:40:0d:3f:6a:1b:8c:af: 8a:47:9e:f9:37:f5:0a:ef:3e:2a:da:c7:85:2a:4c:60:6d:cb: 3c:88:f8:8a:bb:02:e3:1c:02:3e:4d:f1:53:dd:8a:57:c5:09: fb:97:52:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl281x1uaCoGDpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjliZDlhZTctOGZmMy00MjQzLTgxMDQtYWI1MzczNzNlNDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQf2Hjvdgpg5os0r5KD2ulGKq5KELt4mmFhB l0hNQ56ibJhNrA1742c1DORDYwfWc7RUHofwVAnFwlcoVosjakECeHH2Ouu+FNYD AAlnsI+fvwLj9VBjqUHthraX3WZO9E5mTZUuY0jESpYD0vntKj7p1cXOdcKxYu7C IqwMFNDARlNdnOiWLsrP7Ti2f7h9vwXkOXiV6CR+y5/g1vi3sKzYxk8vWc2/yCj7 UjK1iu6ub9g+88Ll1Q9ZnVVu4XsfANVe6M1ocU2abrNIEhXoPYS02NDKk9QtgIRl 2DTsafDdrAdzHj+A3/MV1vP0XjlrCzofoPxc4Vqntwtn4ig2jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM8lMPw+EKVkvkqKMtEh27ahLPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI5NjAxMzUtNmVjMC0z YmJkLTgzOWQtOTdjZDAwOTIxYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/awMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcI0AN9odvBYkThq3RH161IDWTlDeqhZQERIXovnBtvD5dsSYOIwgp2 9OqKiNME0HeS8kodMdysoC6U9m4LE6OwbGS+PC+vhulYuMYdENy2JfGOVnRlTqZi gSR/TQpfRTU6J2cRR/ezIWWjKxGPXtUp9aw+7atXO5gPlln2+GIPHlBiETVEIk6u QdsLPp6PkCwU8otsqnMFCkGWBrumogtum4kuyEGa4XnV/+gMVGxKWoADYhclGFPG 6NgmCSovC7Ghq2KCosr/xxekrSdXky98QA0/ahuMr4pHnvk39QrvPirax4UqTGBt yzyI+Iq7AuMcAj5N8VPdilfFCfuXUhM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:16:44 2025 by rpki-client