$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa File: 491d92ac-1ea7-36bc-9147-49134bad70d4.roa (raw, json) Hash identifier: K4kiSUdEzM8F/16oRAP5wlYhL7FKCH8bETfoPkoETNk= Subject key identifier: AE:1D:1E:9A:74:73:83:A7:37:8F:26:FC:00:DE:CD:CA:67:F5:BA:52 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679765E8E1C9213613BE48C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.238.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:65:e8:e1:c9:21:36:13:be:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=7fb1a011-7e8f-407b-90ad-2c4d14114739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:f6:13:50:6e:8c:2b:1d:e8:c5:28:ac:cf: 4b:35:f4:7d:fe:bf:23:7f:0d:c3:a8:fa:7b:fc:e5: 2d:e6:94:2e:1c:db:19:c7:22:21:3f:e5:18:4d:5f: 0b:5f:6c:1a:d9:b5:0a:3c:b9:ff:8c:dc:07:ac:fe: 34:8f:5b:2f:2c:03:de:82:1c:a4:fa:60:8e:ab:f5: 1c:22:54:b7:30:ed:06:7f:67:e9:ac:fe:ff:02:46: 25:79:e9:cd:b7:0d:42:1d:6a:c1:ac:cf:63:7c:01: 5b:0e:50:cc:07:93:51:e9:f7:ca:a3:3b:f2:f3:11: b5:49:08:b5:ed:1e:3d:0f:09:de:3b:4d:1f:d5:2e: 68:f4:24:40:f0:33:c0:cd:1e:80:fc:e1:21:f8:cb: 06:96:8f:65:eb:5b:45:2d:b3:76:7a:1a:94:ef:df: 7a:32:c1:e3:8c:2f:e4:ea:9b:8d:b3:96:56:57:21: 69:85:18:25:ba:99:46:ce:45:30:66:78:b1:a2:3b: 12:a0:62:05:ad:39:69:5e:9f:cd:a9:60:71:18:c2: ce:04:6b:be:d5:28:11:c1:2a:17:a0:6d:08:8a:2f: de:f1:dd:52:3f:8b:b2:34:35:3d:db:e0:a1:ec:94: 58:fe:57:cb:69:c1:42:29:9b:d8:53:db:e2:fe:e1: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1D:1E:9A:74:73:83:A7:37:8F:26:FC:00:DE:CD:CA:67:F5:BA:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7e:8b:87:e0:cd:a1:1b:87:37:18:3d:30:0d:2f:43:10:d9: 44:11:78:2c:b9:7f:68:16:d0:87:08:6a:c9:4f:eb:df:4a:b9: e9:93:cc:2c:dd:a7:29:2c:b6:7c:5b:03:f9:ee:e4:64:82:48: 83:60:53:16:56:1d:93:5d:de:ae:22:a3:6c:b7:4f:d0:d6:5c: c1:af:52:37:c7:c0:9d:56:b4:96:c7:fc:f5:31:f9:bb:48:a3: 67:a0:b5:1b:a9:04:21:32:55:4f:ea:6c:9d:a0:4c:29:a9:39: 87:d5:4c:69:e9:4d:1a:47:62:f7:3c:dd:76:69:3c:17:d2:92: 3c:c1:4f:d2:7d:cb:7d:76:1a:4c:94:6a:b9:13:e7:f1:6e:8b: d6:d7:89:be:9c:6e:35:51:5d:ff:54:d2:79:ed:7b:ec:75:20: f2:54:6f:b3:9b:f2:c5:49:80:41:1d:53:c3:e8:e5:42:be:d0: 91:bf:9d:39:c6:f0:9a:92:2a:1f:03:24:f8:9e:e1:29:27:54: 9d:83:8b:6b:61:ad:26:db:39:da:96:99:ec:e2:40:55:17:c0: a7:a8:81:c0:25:14:a3:40:a9:ac:65:b2:42:96:3b:4f:a1:db: 0c:a9:32:4b:4c:a1:c8:a4:74:89:be:9a:0c:a4:0e:99:70:24: f1:7e:20:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2Xo4ckhNhO+SMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk N2ZiMWEwMTEtN2U4Zi00MDdiLTkwYWQtMmM0ZDE0MTE0NzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkL2E1BujCsd6MUorM9LNfR9/r8jfw3DqPp7 /OUt5pQuHNsZxyIhP+UYTV8LX2wa2bUKPLn/jNwHrP40j1svLAPeghyk+mCOq/Uc IlS3MO0Gf2fprP7/AkYleenNtw1CHWrBrM9jfAFbDlDMB5NR6ffKozvy8xG1SQi1 7R49DwneO00f1S5o9CRA8DPAzR6A/OEh+MsGlo9l61tFLbN2ehqU7996MsHjjC/k 6puNs5ZWVyFphRgluplGzkUwZnixojsSoGIFrTlpXp/NqWBxGMLOBGu+1SgRwSoX oG0Iii/e8d1SP4uyNDU92+Ch7JRY/lfLacFCKZvYU9vi/uF2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4dHpp0c4OnN48m/ADezcpn9bpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDkxZDkyYWMtMWVhNy0z NmJjLTkxNDctNDkxMzRiYWQ3MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd+i4fgzaEbhzcYPTANL0MQ2UQReCy5f2gW0IcIaslP699KuemTzCzd pykstnxbA/nu5GSCSINgUxZWHZNd3q4io2y3T9DWXMGvUjfHwJ1WtJbH/PUx+btI o2egtRupBCEyVU/qbJ2gTCmpOYfVTGnpTRpHYvc83XZpPBfSkjzBT9J9y312GkyU arkT5/Fui9bXib6cbjVRXf9U0nnte+x1IPJUb7Ob8sVJgEEdU8Po5UK+0JG/nTnG 8JqSKh8DJPie4SknVJ2Di2thrSbbOdqWmeziQFUXwKeogcAlFKNAqaxlskKWO0+h 2wypMktMocikdIm+mgykDplwJPF+IEk= -----END CERTIFICATE-----Generated at Mon Oct 20 16:15:33 2025 by rpki-client