$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa File: 672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa (raw, json) Hash identifier: zHRZR/VAFBzk40Nl7DDmTptzDR/YJ/FgH0oekidmQx4= Subject key identifier: E0:F3:99:2F:7C:9A:8A:2F:32:F4:A1:FB:B5:6C:5A:99:06:F0:47:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679794E3F17167CE97442200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 35.190.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:94:e3:f1:71:67:ce:97:44:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=65e7ecc8-0b48-40b4-b012-7544361897ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:fe:ff:82:2a:3d:d8:17:b8:a4:18:8a:4b: 39:e5:be:bf:2c:52:a3:e7:ae:43:ae:81:63:03:d4: 49:c0:64:14:d7:9c:f0:aa:c9:d6:8b:62:79:02:ab: 0a:39:eb:39:a3:5c:21:f9:31:2f:3d:62:8b:2c:b9: e8:37:37:4d:48:c2:6e:0c:fc:83:b9:d6:51:e7:7a: 0d:86:61:14:79:a8:2c:b5:27:4b:08:81:8f:81:b7: bd:da:36:c4:43:40:c4:0c:10:a8:fb:77:6b:e2:9c: 49:1d:cb:fe:d7:61:fa:d8:f6:cd:ce:59:74:9f:3e: 73:bf:ce:ca:80:19:30:11:20:1b:3c:7c:93:c4:5a: 4d:c4:7b:36:56:53:0a:3a:15:8e:3b:b6:94:18:77: cc:83:94:e0:ec:20:81:d0:f8:e7:de:a2:ce:8e:25: 37:82:81:e2:0a:11:63:45:72:8f:77:ad:b6:ed:f5: 58:df:b1:b4:e3:02:41:51:4e:6d:2f:7f:aa:0c:28: ec:0f:01:42:1d:72:0c:99:21:f3:75:a7:0d:d0:be: 8a:2f:12:65:74:b3:15:cd:d7:c8:11:ae:a3:22:4d: 0a:c9:28:fb:7b:27:c4:4a:87:dc:ec:15:46:67:aa: 5c:d8:7e:41:dd:62:96:6a:2a:31:07:fe:0c:c6:20: 1c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F3:99:2F:7C:9A:8A:2F:32:F4:A1:FB:B5:6C:5A:99:06:F0:47:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.190.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b1:66:cd:9f:85:18:e0:04:e1:6e:58:1a:52:25:04:4a:8f: 72:1d:90:5e:cb:48:ee:b7:be:c1:64:da:c9:27:20:06:53:6e: b4:1b:ce:12:56:8c:c6:5a:4e:cb:d3:46:e9:15:87:23:07:98: f3:e0:ae:b0:19:95:04:ba:75:49:66:95:e1:77:bf:8b:30:49: 2c:c0:c3:d9:00:f9:90:7f:0e:c2:af:85:3f:72:00:2f:d7:74: ad:7b:03:00:7a:99:c5:ac:a8:65:61:50:71:d7:ce:bf:ac:79: 83:2a:b9:3e:3f:91:0f:fb:2d:fe:2d:f1:95:5a:3e:15:65:c7: 6c:47:b0:b9:42:5d:8a:07:6f:04:0b:f1:da:d9:3f:9f:e1:90: f6:0e:6b:28:e9:25:2c:42:df:fe:2a:30:94:c1:2d:8b:35:82: d4:62:38:8a:ac:00:9c:79:ab:6e:c0:0d:38:0e:dc:99:28:30: da:90:fb:c7:3e:f3:89:f7:48:44:da:11:2d:e6:d2:7d:47:e5: f6:a2:f5:f0:ae:6b:3d:ee:d0:64:f1:25:6e:5d:14:bd:eb:f8: e8:a1:69:e2:6a:5b:65:49:80:09:42:59:4e:d4:c5:ce:44:96: 61:a3:1b:06:58:67:f5:c2:54:d7:de:89:9d:50:f3:f1:02:58: 80:b2:2d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5Tj8XFnzpdEIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjVlN2VjYzgtMGI0OC00MGI0LWIwMTItNzU0NDM2MTg5N2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWn+/4IqPdgXuKQYiks55b6/LFKj565DroFj A9RJwGQU15zwqsnWi2J5AqsKOes5o1wh+TEvPWKLLLnoNzdNSMJuDPyDudZR53oN hmEUeagstSdLCIGPgbe92jbEQ0DEDBCo+3dr4pxJHcv+12H62PbNzll0nz5zv87K gBkwESAbPHyTxFpNxHs2VlMKOhWOO7aUGHfMg5Tg7CCB0Pjn3qLOjiU3goHiChFj RXKPd6227fVY37G04wJBUU5tL3+qDCjsDwFCHXIMmSHzdacN0L6KLxJldLMVzdfI Ea6jIk0KySj7eyfESofc7BVGZ6pc2H5B3WKWaioxB/4MxiAcTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODzmS98moovMvSh+7VsWpkG8EdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjcyZjc4NDEtM2FhOS0z NWNkLWI1NTYtNWVkMWJjOWJlM2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI77AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGxZs2fhRjgBOFuWBpSJQRKj3IdkF7LSO63vsFk2sknIAZTbrQbzhJW jMZaTsvTRukVhyMHmPPgrrAZlQS6dUlmleF3v4swSSzAw9kA+ZB/DsKvhT9yAC/X dK17AwB6mcWsqGVhUHHXzr+seYMquT4/kQ/7Lf4t8ZVaPhVlx2xHsLlCXYoHbwQL 8drZP5/hkPYOayjpJSxC3/4qMJTBLYs1gtRiOIqsAJx5q27ADTgO3JkoMNqQ+8c+ 84n3SETaES3m0n1H5fai9fCuaz3u0GTxJW5dFL3r+OihaeJqW2VJgAlCWU7Uxc5E lmGjGwZYZ/XCVNfeiZ1Q8/ECWICyLZI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:34 2025 by rpki-client