$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c790206-baf3-3f4b-8f97-000c46c3e016.roa File: 7c790206-baf3-3f4b-8f97-000c46c3e016.roa (raw, json) Hash identifier: X2FO/NiMjyZ8FVcl5ODIC10jW/ApKsvxQY7b4Xa0fn8= Subject key identifier: BB:25:BF:80:65:51:9E:74:99:F9:CE:03:72:6B:5F:5B:7B:F7:A2:DD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D3F4C91E8DBCD1C14800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c790206-baf3-3f4b-8f97-000c46c3e016.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.220.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d3:f4:c9:1e:8d:bc:d1:c1:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f029ae9a-3f6e-44be-a4b2-e094eb764abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f3:84:46:be:c3:f8:98:2b:27:bb:10:37:15: 30:3d:e1:83:d4:72:5e:de:a1:54:82:ee:50:4e:d5: 2f:1d:83:64:9f:c7:31:6f:5c:bf:b1:ca:cb:71:50: 8f:c0:71:df:2c:43:48:f8:91:48:41:52:fd:f8:a7: ea:ea:d8:97:bf:bc:4f:72:2b:cd:a1:5c:45:e0:d0: 6b:f5:d2:8a:d1:1e:f3:55:dc:66:3d:07:50:bf:2c: 66:ab:63:7d:d6:89:2f:36:97:b5:92:b2:19:5b:0a: dc:d0:07:a2:91:e8:63:1d:02:7b:1a:03:2f:69:61: 3e:c2:f0:74:9b:c5:70:df:39:36:6f:13:2b:c4:9c: 7c:e8:8e:61:1e:66:d8:dd:8a:ce:9a:36:c1:d4:0a: 7f:f9:88:0e:72:82:4a:1f:de:e2:24:51:48:5f:63: 48:ab:0a:55:3c:ed:ef:29:d1:00:8d:56:f9:2f:99: 36:a0:2e:cc:20:d5:02:24:99:6a:da:bd:d9:cc:65: 88:17:f5:8e:ae:92:8a:a4:30:a2:bf:3b:14:d5:24: 04:fa:31:5a:70:10:d6:6e:f1:00:a4:f6:ee:6b:27: 84:38:a4:00:e0:ad:a1:27:30:86:77:a9:96:b4:01: 96:a7:67:75:4b:69:83:c6:86:e4:bb:e2:88:ab:62: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:25:BF:80:65:51:9E:74:99:F9:CE:03:72:6B:5F:5B:7B:F7:A2:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c790206-baf3-3f4b-8f97-000c46c3e016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.220.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:8f:61:83:72:10:d5:8f:9f:c3:4a:ae:6e:1c:0b:76:6a:76: 23:6f:27:3d:9f:80:28:72:70:76:81:61:2d:3a:a0:de:79:c1: a4:98:57:c7:c0:59:df:2b:ca:67:c9:6e:28:45:57:ba:d5:1c: a8:12:eb:8f:bb:2b:a3:64:54:bd:9c:43:bd:df:66:5b:c6:9d: 8b:7b:a0:33:5d:7d:85:8f:61:ae:fc:69:2e:20:e3:33:c7:25: 96:20:f9:fe:74:1e:50:a9:cf:04:5b:52:ec:f0:cf:08:37:f3: 62:3c:b8:28:57:5f:9e:82:35:ba:1b:73:e3:ee:a6:e9:eb:5c: 31:3f:0b:a0:1d:c7:99:cc:48:5c:c4:a5:eb:d5:2a:f5:9e:e0: 52:42:13:2b:b8:4e:c0:43:04:51:68:f5:19:24:fd:5f:51:a6: c0:d8:75:5a:a6:b4:65:f8:63:12:db:e2:5e:61:5c:15:cc:af: 2e:b8:b3:19:5c:43:2d:ae:d5:0a:1a:39:38:11:88:e6:c7:6c: ed:fa:3e:d5:99:b5:df:07:cd:19:89:46:12:0b:6c:90:2d:cc: e2:ab:62:ba:1c:15:fe:16:1b:51:ac:2b:ed:3f:9c:8f:ab:f8: f2:fc:9b:b2:6c:a5:0f:b3:f0:49:fa:c7:b8:dd:a3:51:00:f5: e2:c9:a3:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9P0yR6NvNHBSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjAyOWFlOWEtM2Y2ZS00NGJlLWE0YjItZTA5NGViNzY0YWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPOERr7D+JgrJ7sQNxUwPeGD1HJe3qFUgu5Q TtUvHYNkn8cxb1y/scrLcVCPwHHfLENI+JFIQVL9+Kfq6tiXv7xPcivNoVxF4NBr 9dKK0R7zVdxmPQdQvyxmq2N91okvNpe1krIZWwrc0AeikehjHQJ7GgMvaWE+wvB0 m8Vw3zk2bxMrxJx86I5hHmbY3YrOmjbB1Ap/+YgOcoJKH97iJFFIX2NIqwpVPO3v KdEAjVb5L5k2oC7MINUCJJlq2r3ZzGWIF/WOrpKKpDCivzsU1SQE+jFacBDWbvEA pPbuayeEOKQA4K2hJzCGd6mWtAGWp2d1S2mDxobku+KIq2LpHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLslv4BlUZ50mfnOA3JrX1t796LdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2M3OTAyMDYtYmFmMy0z ZjRiLThmOTctMDAwYzQ2YzNlMDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGPYYNyENWPn8NKrm4cC3ZqdiNvJz2fgChycHaBYS06oN55waSYV8fA Wd8rymfJbihFV7rVHKgS64+7K6NkVL2cQ73fZlvGnYt7oDNdfYWPYa78aS4g4zPH JZYg+f50HlCpzwRbUuzwzwg382I8uChXX56CNbobc+PupunrXDE/C6Adx5nMSFzE pevVKvWe4FJCEyu4TsBDBFFo9Rkk/V9RpsDYdVqmtGX4YxLb4l5hXBXMry64sxlc Qy2u1QoaOTgRiObHbO36PtWZtd8HzRmJRhILbJAtzOKrYrocFf4WG1GsK+0/nI+r +PL8m7JspQ+z8En6x7jdo1EA9eLJo+k= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:58 2025 by rpki-client