$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/389a04cc-ce57-377a-b7f0-dc0931509188.roa File: 389a04cc-ce57-377a-b7f0-dc0931509188.roa (raw, json) Hash identifier: VZ3qlefdsJHAS7XbCwGouQZ8RPMIQ5pKgBZ1vPRSNaY= Subject key identifier: B9:F8:7A:AE:CB:C7:19:BA:22:A9:CB:69:2B:E1:CF:CF:F3:4E:11:57 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B796463E7FC85A7ED900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/389a04cc-ce57-377a-b7f0-dc0931509188.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.246.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b7:96:46:3e:7f:c8:5a:7e:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a8506a9a-e2e7-45a0-a84a-6464caf7c26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:ae:9e:e3:36:05:b2:26:ca:6c:06:f2:85: 55:f2:b1:eb:54:b7:e0:93:3d:6c:3d:53:e8:73:d3: ba:cf:c7:28:5c:bc:6a:2c:e6:eb:7e:8e:fa:d3:01: 99:20:1f:43:6b:f5:65:c5:79:82:1c:f0:48:51:45: 48:35:48:a5:fb:46:ec:fc:22:c5:61:d0:60:88:cb: 2f:7a:74:ad:c0:34:60:77:00:79:e2:12:21:42:3a: 4b:a0:ab:87:35:75:21:f7:f8:12:a7:4b:d8:db:a2: 07:39:e5:c9:10:0a:87:ba:11:2e:e3:c4:ec:5b:62: c1:9a:be:11:db:cb:28:dc:0b:48:e1:6a:b6:10:ea: 65:eb:3d:9f:14:9a:df:62:3b:af:37:c8:6b:0f:5c: a9:40:16:4c:2a:3e:55:6f:cf:fb:5f:92:53:0a:2a: c0:10:83:25:20:c1:55:18:e4:d5:b8:09:ff:60:55: 31:5b:e6:31:16:41:cc:c4:e1:91:bf:af:f1:f0:03: 87:a7:53:5f:01:ef:ef:d4:1a:c3:91:2e:2e:8a:a3: f4:53:cf:29:fb:08:21:ec:a2:df:0a:c3:fc:1b:0e: 10:47:8b:79:93:ec:31:9a:7f:0b:1c:62:50:a7:13: 7a:b1:c3:d3:7d:34:4c:9e:ca:a0:a9:0a:14:b7:06: da:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F8:7A:AE:CB:C7:19:BA:22:A9:CB:69:2B:E1:CF:CF:F3:4E:11:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/389a04cc-ce57-377a-b7f0-dc0931509188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:57:f0:88:31:b2:70:db:71:13:b5:c6:fc:79:ff:b9:3f:43: eb:90:1b:63:07:a7:62:83:78:bf:e3:79:99:cc:ad:a0:42:59: fc:a4:59:0d:4c:8c:62:13:4d:52:dc:3e:2d:09:08:15:4f:80: 16:36:40:5a:d8:b9:de:fe:86:77:1b:8f:7b:1b:fb:4b:c1:0d: 65:74:8e:44:16:95:a6:ce:17:17:3b:65:98:40:a9:8d:79:80: cb:6b:18:40:ed:d1:62:ee:f0:51:7c:14:84:67:d5:81:33:86: 9b:d4:41:30:40:2d:08:95:8c:52:76:da:5d:50:15:be:b8:6c: 87:31:45:64:d0:be:93:6d:f3:41:ab:73:8b:86:34:74:21:7b: 9d:7f:31:63:89:5e:24:28:7a:1f:2a:53:8d:ca:31:40:32:02: 89:a4:fa:67:03:99:98:08:30:09:5b:ee:d8:53:25:71:03:8f: 93:9c:bb:61:6f:01:9b:4f:52:72:3f:f2:be:e4:12:4c:9e:f6: 58:24:69:1e:d4:0c:57:a1:86:2e:ca:86:3a:5d:01:6d:00:da: 88:ce:38:ba:1e:33:4f:e3:f5:a2:25:e5:dc:48:df:30:3a:79: 2d:80:66:45:10:10:e5:d9:bc:22:56:98:e9:f5:b0:be:c2:00: 76:43:f0:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7eWRj5/yFp+2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTg1MDZhOWEtZTJlNy00NWEwLWE4NGEtNjQ2NGNhZjdjMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLCunuM2BbImymwG8oVV8rHrVLfgkz1sPVPo c9O6z8coXLxqLObrfo760wGZIB9Da/VlxXmCHPBIUUVINUil+0bs/CLFYdBgiMsv enStwDRgdwB54hIhQjpLoKuHNXUh9/gSp0vY26IHOeXJEAqHuhEu48TsW2LBmr4R 28so3AtI4Wq2EOpl6z2fFJrfYjuvN8hrD1ypQBZMKj5Vb8/7X5JTCirAEIMlIMFV GOTVuAn/YFUxW+YxFkHMxOGRv6/x8AOHp1NfAe/v1BrDkS4uiqP0U88p+wgh7KLf CsP8Gw4QR4t5k+wxmn8LHGJQpxN6scPTfTRMnsqgqQoUtwbaawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLn4eq7Lxxm6IqnLaSvhz8/zThFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzg5YTA0Y2MtY2U1Ny0z NzdhLWI3ZjAtZGMwOTMxNTA5MTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/YwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlX8IgxsnDbcRO1xvx5/7k/Q+uQG2MHp2KDeL/jeZnMraBCWfykWQ1M jGITTVLcPi0JCBVPgBY2QFrYud7+hncbj3sb+0vBDWV0jkQWlabOFxc7ZZhAqY15 gMtrGEDt0WLu8FF8FIRn1YEzhpvUQTBALQiVjFJ22l1QFb64bIcxRWTQvpNt80Gr c4uGNHQhe51/MWOJXiQoeh8qU43KMUAyAomk+mcDmZgIMAlb7thTJXEDj5Ocu2Fv AZtPUnI/8r7kEkye9lgkaR7UDFehhi7KhjpdAW0A2ojOOLoeM0/j9aIl5dxI3zA6 eS2AZkUQEOXZvCJWmOn1sL7CAHZD8EY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:38 2025 by rpki-client