$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/863b27b7-2dfb-344e-a9c8-d8cbf2ff4d9d.roa File: 863b27b7-2dfb-344e-a9c8-d8cbf2ff4d9d.roa (raw, json) Hash identifier: 2SOxeJL38ld0ZEsewZrSaI0ImgXPg9GBi+0orXmqMpo= Subject key identifier: 8F:5C:F4:DA:79:F5:42:2B:0C:D7:4F:CD:0B:E3:D8:FA:41:ED:A7:07 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D11049F4A8A5B857EF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/863b27b7-2dfb-344e-a9c8-d8cbf2ff4d9d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.194.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d1:10:49:f4:a8:a5:b8:57:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2cb82ce4-b875-44e7-8cd0-4dab8c37c392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:10:35:80:f5:f9:bd:fe:aa:d7:03:5e:ac:18: e0:8e:5c:31:21:02:fc:3b:56:44:3e:57:ee:44:59: 15:9f:a6:1a:76:3f:78:91:52:11:f5:21:d4:c1:5d: e3:6d:03:d4:7b:82:90:be:6d:ee:33:0f:37:bd:2a: 47:0a:36:41:a5:54:e1:2a:68:cb:df:5b:44:fd:3a: a8:53:9d:1e:e7:a3:34:88:04:01:c8:e1:a9:8f:1b: b4:7c:2a:25:b8:70:03:3f:de:53:6b:10:7b:dc:48: ab:a1:3a:db:66:df:a7:cc:cf:8d:40:bb:4b:6b:76: b3:92:7b:6d:63:ce:87:8e:f3:9b:72:88:45:08:81: ec:2f:c2:bc:8e:6a:11:cf:0f:a0:dd:01:b9:e0:0a: 82:f7:34:3d:4b:f3:08:83:64:78:12:7c:f9:d8:0d: ed:df:64:06:42:e7:5b:72:96:bd:18:54:e2:94:eb: bf:dd:eb:28:46:9e:17:e5:c3:71:2f:58:d7:3b:c4: 67:12:5c:2f:62:91:b5:d2:72:4b:df:dc:30:ac:1b: 5d:ac:1b:f5:97:8e:8b:5d:41:c6:c7:e9:98:04:4a: 2b:19:a0:69:33:3b:49:cf:0c:b7:bd:1a:4a:ea:9d: 28:ec:1f:98:fe:bb:71:04:69:c6:b1:cc:a2:c6:af: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5C:F4:DA:79:F5:42:2B:0C:D7:4F:CD:0B:E3:D8:FA:41:ED:A7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/863b27b7-2dfb-344e-a9c8-d8cbf2ff4d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.194.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:37:99:cf:9d:f0:49:56:cc:b7:35:01:7b:c6:bb:9a:4b:9a: 67:3f:51:50:7e:65:64:7c:a8:3b:2b:4e:e8:53:44:f9:f3:27: 2e:9c:67:dc:20:06:9f:5f:98:4b:8e:47:9b:c2:17:24:b2:e5: ad:0f:0a:2e:98:d4:81:34:8e:06:f9:e5:75:51:c0:f7:ee:ff: 1b:8f:a6:9d:24:9a:b6:e1:5b:29:fc:85:33:e1:18:32:02:e2: 02:c0:6c:1e:59:fc:1f:00:d0:ae:95:92:9c:95:93:7d:c6:8f: 58:e1:67:d0:00:5e:32:2e:e7:db:22:f2:c2:31:ac:1c:a9:b5: 49:13:a9:93:cd:73:a7:86:7c:1c:69:73:b7:fa:7d:b6:c5:66: 57:4d:08:4e:cf:20:d2:4f:2f:a7:d7:df:95:3d:c1:51:f2:de: fc:7b:25:ba:fe:0f:bb:dd:bc:d9:46:1c:30:01:22:b4:32:de: 1d:6b:d2:65:70:7b:c7:1a:a4:ef:cd:05:63:d3:45:d3:65:32: 83:ba:be:17:f2:98:36:a3:5d:1a:42:df:8f:1d:1b:ec:66:dd: 29:ab:dc:82:a7:e8:c7:01:3e:2f:01:40:45:f5:22:08:a1:88: 6c:c8:e1:96:d1:6d:1c:2f:44:43:e8:19:47:26:c9:44:12:3e: de:e3:c4:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9EQSfSopbhX7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmNiODJjZTQtYjg3NS00NGU3LThjZDAtNGRhYjhjMzdjMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihA1gPX5vf6q1wNerBjgjlwxIQL8O1ZEPlfu RFkVn6Yadj94kVIR9SHUwV3jbQPUe4KQvm3uMw83vSpHCjZBpVThKmjL31tE/Tqo U50e56M0iAQByOGpjxu0fColuHADP95TaxB73EiroTrbZt+nzM+NQLtLa3azkntt Y86HjvObcohFCIHsL8K8jmoRzw+g3QG54AqC9zQ9S/MIg2R4Enz52A3t32QGQudb cpa9GFTilOu/3esoRp4X5cNxL1jXO8RnElwvYpG10nJL39wwrBtdrBv1l46LXUHG x+mYBEorGaBpMztJzwy3vRpK6p0o7B+Y/rtxBGnGscyixq8hQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9c9Np59UIrDNdPzQvj2PpB7acHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODYzYjI3YjctMmRmYi0z NDRlLWE5YzgtZDhjYmYyZmY0ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8KwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs3mc+d8ElWzLc1AXvGu5pLmmc/UVB+ZWR8qDsrTuhTRPnzJy6cZ9wg Bp9fmEuOR5vCFySy5a0PCi6Y1IE0jgb55XVRwPfu/xuPpp0kmrbhWyn8hTPhGDIC 4gLAbB5Z/B8A0K6VkpyVk33Gj1jhZ9AAXjIu59si8sIxrByptUkTqZPNc6eGfBxp c7f6fbbFZldNCE7PINJPL6fX35U9wVHy3vx7Jbr+D7vdvNlGHDABIrQy3h1r0mVw e8capO/NBWPTRdNlMoO6vhfymDajXRpC348dG+xm3Smr3IKn6McBPi8BQEX1Igih iGzI4ZbRbRwvREPoGUcmyUQSPt7jxNI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:05 2025 by rpki-client