$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5162ca5f-5bbe-39d0-b696-09a25646ba3b.roa File: 5162ca5f-5bbe-39d0-b696-09a25646ba3b.roa (raw, json) Hash identifier: CXh8L4bhxLYR6QVSRWAPEihJqwUV87SP/SCSDZaU9BI= Subject key identifier: 40:AA:1F:5E:B7:61:D9:74:4C:20:EF:3C:38:90:F4:64:18:52:D3:5A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B3AA4C385E7E99155D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5162ca5f-5bbe-39d0-b696-09a25646ba3b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.239.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b3:aa:4c:38:5e:7e:99:15:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=4bf597a5-ef86-4b2d-b80f-d6c7028c19c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:f2:ee:bb:6d:f4:db:82:13:75:7a:00:09: 9e:01:79:5f:47:f7:ae:57:9c:6a:b4:0b:8f:31:4a: cb:71:93:7a:1a:4a:fa:de:f7:5b:b4:1e:98:eb:e0: 65:e9:33:4c:7b:cf:00:45:ec:6d:d8:16:67:a7:fa: 63:32:04:91:ee:54:a1:87:9b:17:14:72:5a:54:c3: a2:7b:1b:23:ec:44:90:e5:8f:71:ed:e2:63:21:e1: 63:15:e7:02:9e:db:27:01:21:83:84:ea:22:bf:48: c9:d8:d7:8d:8a:a6:51:c6:8a:3d:60:5b:5f:51:cd: a5:e2:ea:cc:7d:9d:7e:e5:cf:d3:ed:84:7e:39:dd: 89:f0:0d:9e:d3:08:03:0c:eb:09:80:37:a2:4e:d2: 36:54:1c:8a:e1:46:b3:80:2d:01:5c:3e:0a:14:f6: 6c:a1:db:06:5b:55:8c:ad:b8:8d:e2:f7:f0:f2:d9: ab:a4:ed:7e:17:a3:92:c4:ae:10:6a:08:d4:9f:8b: 9e:db:89:af:5f:e5:ba:de:9e:80:91:dd:2e:01:a2: de:00:e3:5b:df:bd:6a:cb:88:27:a7:16:91:c5:96: 4d:10:6f:08:fb:b1:f7:86:48:4b:aa:62:0a:46:f7: 10:1c:f6:74:4b:e8:26:1e:e4:90:61:3b:45:7b:d1: 7a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AA:1F:5E:B7:61:D9:74:4C:20:EF:3C:38:90:F4:64:18:52:D3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5162ca5f-5bbe-39d0-b696-09a25646ba3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:89:c8:e7:70:41:c1:93:56:1c:b5:7e:07:92:91:2c:ba:e0: 11:3f:ef:44:87:66:ff:f1:f2:dc:b4:d7:b9:b4:d9:32:ce:22: c6:d5:19:69:69:87:78:00:02:e7:19:3d:64:a2:85:1f:28:c7: 1a:e4:56:10:37:3b:e4:30:03:e7:05:fb:4d:34:55:78:3d:57: 06:e4:c6:0a:ad:12:0e:bc:c7:67:60:dc:b4:65:12:b7:55:d0: be:17:9c:73:1e:69:c2:5d:0c:c3:d1:85:0c:b2:e2:71:b1:56: 2a:9d:49:67:63:43:4d:3a:46:9d:4c:60:b9:f3:d8:cc:4a:ef: 7f:7b:56:dc:5d:7e:2a:67:e5:49:c8:55:7a:63:03:0d:24:39: 00:61:e8:2b:02:c7:1c:10:2b:3b:04:d4:c0:fb:4a:a3:9b:45: db:4f:b2:fe:5c:ac:92:1e:79:80:4c:17:b0:12:32:8f:f1:a5: 6c:06:e3:82:3d:a5:12:ea:d1:52:2d:f8:59:0e:94:ac:0c:ce: eb:c0:a0:65:2c:13:79:ce:56:68:8e:07:31:4e:a9:26:df:5c: 81:83:93:8e:67:21:4c:f0:29:c0:8f:e6:48:dd:25:3b:1c:86: 45:82:08:e7:b5:49:fc:37:ae:2c:7b:25:fa:a6:ef:6c:31:0d: 1d:dd:7f:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7OqTDhefpkVXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NGJmNTk3YTUtZWY4Ni00YjJkLWI4MGYtZDZjNzAyOGMxOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgfy7rtt9NuCE3V6AAmeAXlfR/euV5xqtAuP MUrLcZN6Gkr63vdbtB6Y6+Bl6TNMe88ARext2BZnp/pjMgSR7lShh5sXFHJaVMOi exsj7ESQ5Y9x7eJjIeFjFecCntsnASGDhOoiv0jJ2NeNiqZRxoo9YFtfUc2l4urM fZ1+5c/T7YR+Od2J8A2e0wgDDOsJgDeiTtI2VByK4UazgC0BXD4KFPZsodsGW1WM rbiN4vfw8tmrpO1+F6OSxK4QagjUn4ue24mvX+W63p6Akd0uAaLeAONb371qy4gn pxaRxZZNEG8I+7H3hkhLqmIKRvcQHPZ0S+gmHuSQYTtFe9F6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECqH163Ydl0TCDvPDiQ9GQYUtNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTE2MmNhNWYtNWJiZS0z OWQwLWI2OTYtMDlhMjU2NDZiYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+JyOdwQcGTVhy1fgeSkSy64BE/70SHZv/x8ty017m02TLOIsbVGWlp h3gAAucZPWSihR8oxxrkVhA3O+QwA+cF+000VXg9VwbkxgqtEg68x2dg3LRlErdV 0L4XnHMeacJdDMPRhQyy4nGxViqdSWdjQ006Rp1MYLnz2MxK7397Vtxdfipn5UnI VXpjAw0kOQBh6CsCxxwQKzsE1MD7SqObRdtPsv5crJIeeYBMF7ASMo/xpWwG44I9 pRLq0VIt+FkOlKwMzuvAoGUsE3nOVmiOBzFOqSbfXIGDk45nIUzwKcCP5kjdJTsc hkWCCOe1Sfw3rix7Jfqm72wxDR3df9w= -----END CERTIFICATE-----Generated at Mon Oct 20 02:17:33 2025 by rpki-client