$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323e8458-838a-3426-aaa9-3ba60b74fe5e.roa File: 323e8458-838a-3426-aaa9-3ba60b74fe5e.roa (raw, json) Hash identifier: /9Lj6j0m++hKcji5ieIRHRYVKqioXst6td0RtgueD04= Subject key identifier: DB:31:F0:B9:E7:8B:84:7B:F2:2C:38:BF:75:97:B3:AA:AC:8F:9D:2A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B2273C3F6EEFF6AF5B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323e8458-838a-3426-aaa9-3ba60b74fe5e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.247.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b2:27:3c:3f:6e:ef:f6:af:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3032a242-a810-4080-894a-f5c05013c0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:bb:34:de:56:f0:ff:4e:5e:86:2c:b5:aa: cc:af:8b:42:dd:f4:b2:6e:df:bd:9a:6d:50:1e:56: be:90:e6:33:c9:70:90:43:c2:7f:54:eb:32:00:97: 52:61:ec:fd:f8:03:9d:f6:43:69:04:73:b4:36:2e: 0a:df:7c:e8:52:c9:e1:5d:47:d5:5d:75:54:1b:32: 09:65:62:7e:92:78:64:23:92:f1:8d:e9:83:32:f5: c7:24:ad:6e:aa:55:d1:7d:a2:2d:c6:f6:75:0b:1d: c4:c7:4f:5d:eb:28:a1:7f:ab:ee:42:3d:60:62:b2: b5:70:71:7d:6b:b3:60:98:34:f9:23:1e:e2:db:be: 05:83:f0:df:d7:17:2a:30:bb:9f:e8:11:54:bf:df: c7:90:ff:33:e3:d1:06:ef:f5:c2:01:0c:9e:d3:21: 7e:4f:c5:d1:ea:21:8a:c6:c3:fb:8b:70:1a:7f:3f: 98:30:b0:19:97:d3:50:73:f9:29:12:16:75:92:24: c8:2b:5b:06:2a:74:5b:23:69:97:47:17:df:6f:cc: 73:36:45:cd:30:2a:30:bc:81:00:32:3c:8c:96:0d: b7:8b:b4:8f:b7:03:11:a1:cf:4e:f5:28:79:84:dd: 46:7f:31:27:51:91:1e:c7:ba:f7:f7:bb:04:af:b2: 04:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:31:F0:B9:E7:8B:84:7B:F2:2C:38:BF:75:97:B3:AA:AC:8F:9D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323e8458-838a-3426-aaa9-3ba60b74fe5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.247.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8f:fc:f4:ed:e7:62:93:80:94:a3:ff:69:51:53:21:0f:f5: f4:5d:7e:f0:3b:37:98:ed:cb:5f:16:35:1a:82:a6:f4:11:9c: 85:da:5e:f1:a3:ee:24:4e:cf:cc:a7:25:46:e1:b6:17:bc:ea: 77:0a:ba:61:2f:9e:dd:51:24:8d:ab:cf:79:a6:c4:22:1d:46: f8:6c:4e:80:f1:71:e4:37:a3:5d:b5:43:5c:17:e6:e4:52:dd: 06:34:d0:85:06:f4:c2:80:2e:01:33:39:a7:db:3f:0e:49:a7: 1d:4b:0d:c1:e5:cd:02:fe:72:52:32:2d:ca:6b:ec:85:cf:8c: a9:d1:75:cd:e1:d9:fc:43:7f:d9:23:ef:0f:89:ef:f0:53:b2: b7:72:56:b2:ec:1a:04:4b:c5:a6:c1:e8:f2:b1:bb:3c:b9:52: c0:85:63:35:8f:b4:02:02:40:61:58:71:b5:c2:29:a0:67:12: f7:8b:3e:29:7e:68:1c:1d:bc:57:d8:52:f2:66:2e:d3:e1:2b: 05:3c:81:0b:e6:02:10:d2:86:a8:51:6b:41:dd:27:72:65:b2: 24:eb:cc:64:cd:35:cb:81:93:53:18:76:97:f2:28:a9:fd:80: 31:5f:50:b4:64:61:62:53:12:92:8d:a9:3e:a5:23:5c:dd:d0: cc:00:02:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7InPD9u7/avWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MzAzMmEyNDItYTgxMC00MDgwLTg5NGEtZjVjMDUwMTNjMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzW7NN5W8P9OXoYstarMr4tC3fSybt+9mm1Q Hla+kOYzyXCQQ8J/VOsyAJdSYez9+AOd9kNpBHO0Ni4K33zoUsnhXUfVXXVUGzIJ ZWJ+knhkI5LxjemDMvXHJK1uqlXRfaItxvZ1Cx3Ex09d6yihf6vuQj1gYrK1cHF9 a7NgmDT5Ix7i274Fg/Df1xcqMLuf6BFUv9/HkP8z49EG7/XCAQye0yF+T8XR6iGK xsP7i3Aafz+YMLAZl9NQc/kpEhZ1kiTIK1sGKnRbI2mXRxffb8xzNkXNMCowvIEA MjyMlg23i7SPtwMRoc9O9Sh5hN1GfzEnUZEex7r397sEr7IEmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsx8Lnni4R78iw4v3WXs6qsj50qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzIzZTg0NTgtODM4YS0z NDI2LWFhYTktM2JhNjBiNzRmZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/egMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGP/PTt52KTgJSj/2lRUyEP9fRdfvA7N5jty18WNRqCpvQRnIXaXvGj 7iROz8ynJUbhthe86ncKumEvnt1RJI2rz3mmxCIdRvhsToDxceQ3o121Q1wX5uRS 3QY00IUG9MKALgEzOafbPw5Jpx1LDcHlzQL+clIyLcpr7IXPjKnRdc3h2fxDf9kj 7w+J7/BTsrdyVrLsGgRLxabB6PKxuzy5UsCFYzWPtAICQGFYcbXCKaBnEveLPil+ aBwdvFfYUvJmLtPhKwU8gQvmAhDShqhRa0HdJ3JlsiTrzGTNNcuBk1MYdpfyKKn9 gDFfULRkYWJTEpKNqT6lI1zd0MwAAjw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:23 2025 by rpki-client