$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa File: 5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa (raw, json) Hash identifier: B3GnAHIU+xTBJNYzTkqiBaZmQrnhsZoKEzlfF/wa2L8= Subject key identifier: 0B:68:BF:23:59:14:C8:E5:1B:FC:1D:C3:42:04:9F:15:29:BA:6A:E5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797891E6A36FE1000980800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.202.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:89:1e:6a:36:fe:10:00:98:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9a907aac-02a8-4794-9ad4-a6cbb116b610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:71:3b:db:0f:12:25:65:5e:21:94:8f:5d: a0:2e:9e:ce:83:d2:84:ca:bb:f6:1b:c9:3b:bd:90: e7:6b:98:b7:da:bc:06:62:95:23:55:99:58:e1:da: 0a:1a:cc:46:3b:10:ce:46:3e:12:5c:2a:c4:76:ae: 2c:cd:ee:24:7b:23:e4:26:7d:77:f1:b9:ae:e7:84: d2:30:b7:7f:0a:77:ce:c4:0c:fb:bb:d8:84:ce:0a: 16:6b:47:dc:47:64:b4:57:9f:78:02:2b:e0:18:c4: 66:82:df:e5:f1:a9:10:3b:5f:7c:3f:e4:4d:02:5b: da:7b:54:18:92:8b:70:5f:4c:d9:c8:88:31:bb:7d: da:33:06:25:1b:a7:75:e5:f2:80:f7:3f:f6:aa:de: 75:9c:a4:e4:e7:4f:f5:46:a7:a5:98:14:45:aa:d1: 98:16:d3:f1:ae:a6:84:27:9d:3d:84:43:c3:03:5b: 91:7a:56:90:b9:4e:d0:36:32:a1:95:8a:55:d5:50: 7f:56:f4:a8:e2:26:40:82:ee:01:1d:a3:be:24:dc: fe:f5:ee:65:85:ee:c2:5f:ee:d9:be:28:d1:68:07: 5c:95:03:9d:c0:59:a8:ec:7b:80:41:91:b3:32:c6: 4f:23:28:bc:7d:f4:f6:ed:92:47:b6:d2:a7:46:50: c0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:68:BF:23:59:14:C8:E5:1B:FC:1D:C3:42:04:9F:15:29:BA:6A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ff:07:22:e0:ed:4b:e0:c4:2b:7f:10:a4:3c:4f:d9:e7:7d: 3e:9b:06:dc:ca:fa:66:a4:b2:84:ef:5b:fe:fe:c6:d8:c2:97: 2f:82:98:56:1a:5b:a0:08:fd:01:ea:13:f3:5a:f3:c9:ef:9f: 3e:7e:3a:10:25:18:6e:89:32:ee:ad:1a:28:fb:21:fe:05:63: 0e:d1:e8:80:cc:7c:a8:46:6b:b1:5f:7f:18:43:cb:97:c8:6b: c0:15:b4:d1:dd:19:5e:58:8f:3c:91:a0:95:29:42:69:f8:45: 02:a4:d3:aa:b5:0c:fe:e6:b3:f0:0c:4b:8c:ef:34:b1:e9:73: c7:e0:16:6d:2d:aa:c2:bb:e0:ad:d4:55:5b:a1:70:41:38:dd: e9:43:bf:e5:90:34:9d:56:6d:66:e4:d3:be:c2:4e:73:1f:30: 84:a9:8e:dd:9f:10:2a:ec:14:30:75:e8:42:0b:6b:14:05:78: 15:c4:c4:b6:6b:ff:cf:cc:f0:e1:e5:53:c9:2e:65:fe:57:3b: 77:8f:7e:f9:ee:13:df:b4:13:61:84:24:7e:cf:f3:a0:c7:13: f5:d1:b6:27:33:f9:6d:e9:38:b4:cd:ca:46:9b:47:30:0e:07: ad:33:65:fb:74:40:5d:88:7c:48:df:c6:71:71:e8:d5:4e:67: ef:a7:ec:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4keajb+EACYCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWE5MDdhYWMtMDJhOC00Nzk0LTlhZDQtYTZjYmIxMTZiNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZFxO9sPEiVlXiGUj12gLp7Og9KEyrv2G8k7 vZDna5i32rwGYpUjVZlY4doKGsxGOxDORj4SXCrEdq4sze4keyPkJn138bmu54TS MLd/CnfOxAz7u9iEzgoWa0fcR2S0V594AivgGMRmgt/l8akQO198P+RNAlvae1QY kotwX0zZyIgxu33aMwYlG6d15fKA9z/2qt51nKTk50/1RqelmBRFqtGYFtPxrqaE J509hEPDA1uRelaQuU7QNjKhlYpV1VB/VvSo4iZAgu4BHaO+JNz+9e5lhe7CX+7Z vijRaAdclQOdwFmo7HuAQZGzMsZPIyi8ffT27ZJHttKnRlDAQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtovyNZFMjlG/wdw0IEnxUpumrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWFmYTFlZTQtNGI4ZS0z ZTdkLWFlODQtNWMzMWEyNDE4MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8oAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz/ByLg7UvgxCt/EKQ8T9nnfT6bBtzK+maksoTvW/7+xtjCly+CmFYa W6AI/QHqE/Na88nvnz5+OhAlGG6JMu6tGij7If4FYw7R6IDMfKhGa7FffxhDy5fI a8AVtNHdGV5YjzyRoJUpQmn4RQKk06q1DP7ms/AMS4zvNLHpc8fgFm0tqsK74K3U VVuhcEE43elDv+WQNJ1WbWbk077CTnMfMISpjt2fECrsFDB16EILaxQFeBXExLZr /8/M8OHlU8kuZf5XO3ePfvnuE9+0E2GEJH7P86DHE/XRticz+W3pOLTNykabRzAO B60zZft0QF2IfEjfxnFx6NVOZ++n7OI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:05:43 2025 by rpki-client