$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/786bc886-9a83-3e3a-8967-58da0062de34.roa File: 786bc886-9a83-3e3a-8967-58da0062de34.roa (raw, json) Hash identifier: YZ4qH2LBUkuwbRZqRpXqPaeBHsalMIXH/NVDC+c5hVg= Subject key identifier: 5B:90:3F:E6:4E:58:20:35:4F:A8:24:70:FE:27:A5:9A:5C:C8:E4:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A99076E65AFAEA679C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/786bc886-9a83-3e3a-8967-58da0062de34.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.222.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a9:90:76:e6:5a:fa:ea:67:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=e8e80e83-b0d2-4028-8dcc-a6094f0e49d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:14:26:b9:26:01:dc:79:2d:6a:79:af:68: b2:c1:43:13:6f:0c:f5:79:bc:b3:ae:78:ee:40:1f: 50:b1:fe:10:4b:0d:60:ed:5d:fe:d2:6a:a6:b6:cc: 00:6d:bf:cf:d5:4a:7a:32:74:89:92:5c:c6:d6:4f: 68:d3:ca:e8:c7:7d:bd:ef:60:91:0c:08:82:ed:76: 84:46:61:9b:84:84:0d:15:73:73:ab:ef:28:7d:98: b0:91:10:1f:9f:f4:45:32:e5:b9:67:a3:41:f5:3f: 49:9a:3b:63:88:5d:01:a0:64:70:04:cf:2a:bb:b5: 4e:81:0c:3d:ca:50:78:36:f9:ec:d4:c5:8f:f9:2a: 12:36:77:8c:77:81:d1:20:35:38:4d:f0:09:bc:56: 16:33:26:f5:95:58:62:d7:da:90:bb:f5:9e:81:22: 7c:c6:3a:3e:c9:3d:af:2c:f9:13:3b:19:30:32:ef: ac:f8:c3:f0:8b:ed:ea:e4:45:2f:9b:8b:20:7a:35: 17:a6:81:01:34:cc:ec:c6:ba:62:df:a8:e0:f7:18: 40:f1:ae:97:b7:61:f3:5b:90:9b:d8:18:6c:b8:d8: 6a:13:7f:b0:29:64:d0:62:87:fb:56:cd:2d:4f:a5: 76:66:55:f7:e6:31:99:04:d5:f8:16:f8:0e:95:55: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:90:3F:E6:4E:58:20:35:4F:A8:24:70:FE:27:A5:9A:5C:C8:E4:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/786bc886-9a83-3e3a-8967-58da0062de34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8e:66:41:bc:80:36:1c:79:3a:ba:a8:64:00:36:68:c7:f6: 08:c6:13:d6:41:bc:d4:6b:06:43:ca:b8:b2:56:ab:88:b3:8e: 88:11:e8:cc:00:15:43:5e:cb:27:bd:76:76:f8:f3:f8:5f:6c: 6b:2f:aa:f5:65:6d:ce:11:f5:45:97:b9:04:87:39:23:ce:55: 45:01:44:ce:35:39:b4:b7:9a:a2:bf:18:df:a8:6c:41:62:33: 84:1f:09:93:01:8d:a6:ba:4f:fa:e6:8e:ed:19:4e:49:be:42: f6:b3:d8:89:03:ab:0f:f4:97:cd:bc:57:f7:b6:01:f1:90:0c: b4:c0:80:d1:e3:ec:c2:f1:d7:a2:63:48:be:cb:34:bd:2a:1a: 4f:1e:46:8f:31:dd:e9:24:a7:56:e3:70:7d:d0:18:d0:4a:1d: 90:21:73:2c:2e:ee:92:a7:8f:25:58:fc:3f:19:c4:87:1d:c6: 8e:49:71:f1:53:e6:25:2f:1b:86:e4:d6:c2:5c:b8:55:a7:ab: 9d:6f:d2:63:f2:76:ab:63:4c:7b:8a:c6:6e:f7:c7:29:2c:1e: 75:dd:36:23:47:a6:2b:a2:44:4b:0c:30:f5:74:5f:8d:f6:f6: 31:0c:08:e1:35:b6:bf:7f:64:84:a8:a7:fa:1e:36:63:95:e7: 32:ba:a7:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6mQduZa+upnnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZThlODBlODMtYjBkMi00MDI4LThkY2MtYTYwOTRmMGU0OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUcUJrkmAdx5LWp5r2iywUMTbwz1ebyzrnju QB9Qsf4QSw1g7V3+0mqmtswAbb/P1Up6MnSJklzG1k9o08rox32972CRDAiC7XaE RmGbhIQNFXNzq+8ofZiwkRAfn/RFMuW5Z6NB9T9JmjtjiF0BoGRwBM8qu7VOgQw9 ylB4Nvns1MWP+SoSNneMd4HRIDU4TfAJvFYWMyb1lVhi19qQu/WegSJ8xjo+yT2v LPkTOxkwMu+s+MPwi+3q5EUvm4sgejUXpoEBNMzsxrpi36jg9xhA8a6Xt2HzW5Cb 2BhsuNhqE3+wKWTQYof7Vs0tT6V2ZlX35jGZBNX4FvgOlVXD6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuQP+ZOWCA1T6gkcP4npZpcyOQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzg2YmM4ODYtOWE4My0z ZTNhLTg5NjctNThkYTAwNjJkZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI974MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuOZkG8gDYceTq6qGQANmjH9gjGE9ZBvNRrBkPKuLJWq4izjogR6MwA FUNeyye9dnb48/hfbGsvqvVlbc4R9UWXuQSHOSPOVUUBRM41ObS3mqK/GN+obEFi M4QfCZMBjaa6T/rmju0ZTkm+Qvaz2IkDqw/0l828V/e2AfGQDLTAgNHj7MLx16Jj SL7LNL0qGk8eRo8x3ekkp1bjcH3QGNBKHZAhcywu7pKnjyVY/D8ZxIcdxo5JcfFT 5iUvG4bk1sJcuFWnq51v0mPydqtjTHuKxm73xyksHnXdNiNHpiuiREsMMPV0X432 9jEMCOE1tr9/ZISop/oeNmOV5zK6pxQ= -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:35 2025 by rpki-client