$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa File: 3fba3afa-94b4-32ab-a016-746169353e51.roa (raw, json) Hash identifier: LKQbNdiAa4hSkfxWgLlayuB4PLcJXs1U9+ZT/5dGc4Y= Subject key identifier: 6F:A2:35:F1:09:B8:CD:6F:6C:46:87:75:57:2F:C5:C8:A7:C2:28:40 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679779B4778BC7E022E7E600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.222.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:79:b4:77:8b:c7:e0:22:e7:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=ebb8002e-df27-46aa-80dd-3cced7558efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5a:c3:d7:7c:7d:8f:93:01:c0:90:0e:62:04: 5f:21:b1:14:bd:25:f1:9f:54:02:fb:fc:87:db:24: 52:02:cb:ef:4f:2f:53:e5:04:a8:d6:84:9d:c6:fe: c2:86:2a:01:1e:0d:71:04:4c:a6:99:a1:ec:c8:b0: 2d:74:e2:4d:52:99:3f:08:d8:c7:e2:33:f3:fd:48: ee:1a:21:ff:7e:4a:e9:8d:c4:c4:a1:09:37:ba:c8: 8b:82:69:ae:ef:ae:b4:1e:eb:e9:6b:de:e2:98:62: d8:46:5c:ab:29:74:24:23:19:5d:e7:90:72:49:75: f3:71:98:01:42:ff:0b:db:d5:be:75:1d:d7:d5:f0: 4b:cd:94:70:a1:3c:f1:38:83:7d:95:2f:18:9e:bd: 51:e2:6e:18:2c:36:24:34:f5:fa:ae:4c:16:f9:da: 8a:c0:bf:4e:5e:24:5c:ca:f1:be:48:fc:37:28:3e: 40:a7:5c:b3:e3:a6:a5:35:14:b5:3e:96:5d:d4:c2: 73:b3:e5:58:9f:9c:6e:cd:55:ef:39:51:33:8d:ab: 2f:de:1a:f3:e1:49:a2:e6:37:b4:78:b7:e6:71:c3: 62:74:13:0a:f5:6b:ac:0b:d5:9d:76:e9:df:ea:44: 1e:4b:e8:cc:2e:cc:8b:b1:bb:be:5c:9e:42:aa:d8: 53:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A2:35:F1:09:B8:CD:6F:6C:46:87:75:57:2F:C5:C8:A7:C2:28:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c8:6b:21:e5:70:fe:6d:4d:48:e0:08:b7:b2:ee:5a:a2:85: ce:5c:19:fe:65:54:cd:65:ba:00:b6:7d:62:29:e7:8a:b7:dc: 87:1e:14:47:e3:6c:fb:11:fb:70:c7:f4:53:69:42:9a:02:c8: 44:e9:7b:ac:75:27:fd:f5:10:d0:3c:03:0d:33:a6:8b:15:22: 44:7d:ed:0f:4d:14:17:67:21:50:66:00:43:bb:54:45:ef:2e: 50:37:d2:91:2b:28:e3:1a:92:fa:17:fc:b6:70:47:b0:c4:28: 7d:1a:73:4f:54:b9:f2:54:be:74:32:7a:f5:59:ab:bd:b8:0b: 98:1c:e1:59:30:ab:2f:f1:6b:6a:3f:1c:59:19:c7:c1:1f:c2: 3d:9b:3f:a9:f2:98:4f:b5:79:37:d8:90:dc:74:c5:9a:38:58: d5:fc:9d:6d:99:a3:11:8f:e2:c5:9d:f8:07:12:f3:bd:d3:fd: c9:8d:9f:f6:de:7f:e2:22:d9:b1:ee:44:f0:60:ce:80:33:15: 65:2a:56:2c:48:d6:39:1d:24:0a:09:f7:18:9a:1e:a8:75:a0: ac:c0:f6:30:cc:db:a5:97:1b:07:80:58:b2:22:86:7c:2b:88: 3f:7b:28:fb:be:a9:f8:ad:63:f0:6f:2f:e6:b9:b5:40:5e:a2: ca:8a:2e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3m0d4vH4CLn5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWJiODAwMmUtZGYyNy00NmFhLTgwZGQtM2NjZWQ3NTU4ZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlrD13x9j5MBwJAOYgRfIbEUvSXxn1QC+/yH 2yRSAsvvTy9T5QSo1oSdxv7ChioBHg1xBEymmaHsyLAtdOJNUpk/CNjH4jPz/Uju GiH/fkrpjcTEoQk3usiLgmmu7660Huvpa97imGLYRlyrKXQkIxld55BySXXzcZgB Qv8L29W+dR3X1fBLzZRwoTzxOIN9lS8Ynr1R4m4YLDYkNPX6rkwW+dqKwL9OXiRc yvG+SPw3KD5Ap1yz46alNRS1PpZd1MJzs+VYn5xuzVXvOVEzjasv3hrz4Umi5je0 eLfmccNidBMK9WusC9Wddunf6kQeS+jMLsyLsbu+XJ5CqthTfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+iNfEJuM1vbEaHdVcvxcinwihAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZiYTNhZmEtOTRiNC0z MmFiLWEwMTYtNzQ2MTY5MzUzZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzIayHlcP5tTUjgCLey7lqihc5cGf5lVM1lugC2fWIp54q33IceFEfj bPsR+3DH9FNpQpoCyETpe6x1J/31ENA8Aw0zposVIkR97Q9NFBdnIVBmAEO7VEXv LlA30pErKOMakvoX/LZwR7DEKH0ac09UufJUvnQyevVZq724C5gc4Vkwqy/xa2o/ HFkZx8Efwj2bP6nymE+1eTfYkNx0xZo4WNX8nW2ZoxGP4sWd+AcS873T/cmNn/be f+Ii2bHuRPBgzoAzFWUqVixI1jkdJAoJ9xiaHqh1oKzA9jDM26WXGweAWLIihnwr iD97KPu+qfitY/BvL+a5tUBeosqKLt0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:48:14 2025 by rpki-client