$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa File: 2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa (raw, json) Hash identifier: NLcBrDc8bAGkiMmLWMH+vrYmURk+1oBvOAX2ZJjq3hA= Subject key identifier: 59:59:F3:2A:EE:94:EF:CF:B4:98:49:BA:89:39:76:56:5D:7C:9C:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976BCBEF67CA40A69D4880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.204.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6b:cb:ef:67:ca:40:a6:9d:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=289b74c8-7a49-49f4-9fda-c5df50424843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:79:a4:c2:aa:4d:ed:99:9c:a0:fc:67:9b: ac:74:00:e6:1a:ad:d5:a3:c5:02:e7:a0:c1:45:ad: f7:87:27:f5:40:c3:6c:63:bd:e4:a2:9e:40:8d:d3: f1:c6:c8:60:61:e2:8f:b5:3d:1c:27:d0:5a:37:b9: 39:83:b2:b8:ca:ff:93:ef:08:26:03:ab:d7:48:03: 16:0e:b2:56:af:ab:2e:6b:0f:1b:0d:2e:06:99:78: 02:88:66:43:07:cc:d8:ef:ea:68:ef:dc:37:23:8c: c2:99:3d:f1:ef:80:6f:14:60:ce:c0:0a:05:37:45: 0b:0f:55:05:8a:13:2a:10:3c:bf:d8:0a:c0:ca:93: ad:5a:32:ba:00:c5:5a:cc:f9:32:65:a7:9f:1b:28: b0:20:f5:88:1e:9a:33:8d:32:39:46:d0:e7:7c:c2: ea:29:2f:fa:98:70:6d:40:bf:e4:83:e9:a4:bc:6a: e3:69:fd:a3:e4:5f:74:9d:29:27:6f:a1:ad:dd:7a: c2:e1:1e:67:83:53:91:e4:1b:1d:bd:77:91:2a:27: 17:e0:6f:be:3a:79:76:57:96:91:e5:9c:35:62:90: 29:6b:1f:ee:5e:19:29:f2:7f:e8:a7:c8:78:05:6e: e8:09:8f:b5:24:da:88:3d:ca:c3:c5:3d:0f:b8:2e: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:59:F3:2A:EE:94:EF:CF:B4:98:49:BA:89:39:76:56:5D:7C:9C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:24:a9:9a:36:24:08:9e:1e:3b:07:97:3d:fc:e2:2c:06:0b: 95:c1:e6:c7:58:73:c1:a7:d6:76:9d:00:66:82:c5:81:4b:e4: 5a:06:b1:54:23:60:70:db:08:72:de:4f:d6:08:8a:4b:48:56: 82:f8:c8:2d:fb:92:4a:de:c1:f1:b7:b9:0c:70:94:7a:29:5f: d3:0b:25:73:3f:71:05:0f:1a:c0:97:a4:b5:ae:64:d7:fa:5a: e0:9d:59:bf:d8:b6:b6:c3:1e:12:1a:f5:ca:98:e3:04:ff:8f: bb:5b:42:a4:45:40:f5:c1:06:ae:43:c8:aa:59:8b:20:f1:94: ae:4a:5b:a1:44:f7:b1:8f:d7:eb:eb:6c:11:12:ec:3c:f0:b8: 80:90:83:e2:da:7c:a1:b0:4c:72:9d:d5:3d:be:4f:58:43:fe: ae:39:dd:4b:45:6d:ed:65:b1:db:fb:12:13:7a:47:20:a6:93: 69:59:0e:f0:fd:3b:c0:23:eb:76:ca:8e:77:52:a3:6f:47:b1: 5d:41:72:2b:58:fa:42:76:09:94:6f:1c:e8:60:14:24:85:2a: df:78:36:b4:0e:de:44:cd:fb:f9:31:54:16:2b:c8:95:7d:a2: 60:d7:56:a7:46:5d:34:8b:7e:ea:34:d8:02:98:22:de:51:c8: cd:e1:3e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2vL72fKQKadSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Mjg5Yjc0YzgtN2E0OS00OWY0LTlmZGEtYzVkZjUwNDI0ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8J5pMKqTe2ZnKD8Z5usdADmGq3Vo8UC56DB Ra33hyf1QMNsY73kop5AjdPxxshgYeKPtT0cJ9BaN7k5g7K4yv+T7wgmA6vXSAMW DrJWr6suaw8bDS4GmXgCiGZDB8zY7+po79w3I4zCmT3x74BvFGDOwAoFN0ULD1UF ihMqEDy/2ArAypOtWjK6AMVazPkyZaefGyiwIPWIHpozjTI5RtDnfMLqKS/6mHBt QL/kg+mkvGrjaf2j5F90nSknb6Gt3XrC4R5ng1OR5BsdvXeRKicX4G++Onl2V5aR 5Zw1YpApax/uXhkp8n/op8h4BW7oCY+1JNqIPcrDxT0PuC7OawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlZ8yrulO/PtJhJuok5dlZdfJw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmMzYjlkMDgtMWYyZi0z NDQ0LTkyZmItYmNjZDFlNzZlMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYkqZo2JAieHjsHlz384iwGC5XB5sdYc8Gn1nadAGaCxYFL5FoGsVQj YHDbCHLeT9YIiktIVoL4yC37kkrewfG3uQxwlHopX9MLJXM/cQUPGsCXpLWuZNf6 WuCdWb/YtrbDHhIa9cqY4wT/j7tbQqRFQPXBBq5DyKpZiyDxlK5KW6FE97GP1+vr bBES7DzwuICQg+LafKGwTHKd1T2+T1hD/q453UtFbe1lsdv7EhN6RyCmk2lZDvD9 O8Aj63bKjndSo29HsV1BcitY+kJ2CZRvHOhgFCSFKt94NrQO3kTN+/kxVBYryJV9 omDXVqdGXTSLfuo02AKYIt5RyM3hPms= -----END CERTIFICATE-----Generated at Mon Oct 20 01:57:07 2025 by rpki-client