$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86a4b374-0395-3152-b2fb-5d7b00ad2865.roa File: 86a4b374-0395-3152-b2fb-5d7b00ad2865.roa (raw, json) Hash identifier: bwjoqwrwbGKkIvMAdjuBxldRzt9QC4kSz2OxehN4t7g= Subject key identifier: EB:2F:55:B1:ED:15:60:0E:90:55:2F:0F:E2:F5:92:75:27:A2:FF:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C7355B1D45A5B00E8200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86a4b374-0395-3152-b2fb-5d7b00ad2865.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.225.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c7:35:5b:1d:45:a5:b0:0e:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=e4944215-f3e3-4066-ac76-ff1c8592421e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:10:3c:f6:3d:6c:60:04:1f:d3:23:33:26:80: 36:cf:67:2c:3c:92:72:d9:ac:d1:67:6a:76:5d:69: 24:b2:e9:2c:66:aa:22:14:aa:e9:95:18:59:eb:e5: 9f:ac:56:f5:01:78:3b:3c:ae:14:a0:93:5d:c1:ea: 37:a4:62:1f:36:bb:bf:de:63:d7:da:da:0d:6c:6e: 8b:1f:ff:1a:e4:07:d7:70:ef:d2:8f:92:7e:f8:38: 0e:b5:8b:07:30:be:94:21:c6:19:c3:33:61:cf:4e: a2:84:6f:f5:1c:80:0c:92:db:03:11:d9:3e:21:3d: f5:7b:00:b3:a5:5d:0e:e4:1d:7a:4c:e9:e3:62:8d: 0a:ac:07:de:04:48:39:f2:57:dc:3e:82:8a:7c:98: f2:03:64:14:91:85:56:a6:35:69:65:ab:68:a7:5c: bb:4a:59:3d:92:b1:cd:b9:80:22:7e:ef:bb:64:6f: 07:70:d6:06:eb:7d:dc:fa:62:9a:96:25:0c:1c:83: a3:2f:68:5d:a8:97:b9:59:00:9e:09:9f:fd:f0:86: c0:e8:01:89:32:27:61:c5:77:e6:eb:1b:c4:28:62: 87:24:14:e4:f2:fc:35:a3:4c:42:8b:8e:b2:a2:9e: a8:02:13:46:12:72:7e:7d:6c:3a:0d:31:01:5a:3c: 03:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2F:55:B1:ED:15:60:0E:90:55:2F:0F:E2:F5:92:75:27:A2:FF:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86a4b374-0395-3152-b2fb-5d7b00ad2865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c4:c0:be:be:6c:16:32:c6:81:ab:8e:a6:ae:35:94:77:dc: bb:fa:c6:20:fd:bb:71:95:aa:40:1e:77:0c:4b:30:70:82:ba: 6b:f1:51:d8:21:30:75:7f:7e:cc:67:22:6a:67:8f:7d:39:75: 2c:e7:bc:4c:b7:6d:cd:22:e9:eb:76:58:8d:62:76:5f:f4:05: 66:a9:0c:81:85:a2:ad:f2:98:89:ae:e6:3e:bd:f2:03:76:45: ce:88:ee:ec:f2:f7:d4:39:05:46:11:ae:41:01:9d:2c:bb:e2: a3:41:51:d5:6e:11:df:f3:90:f9:fe:24:d1:25:0c:0c:7f:4a: 85:6d:51:c5:d1:c3:38:e1:19:2d:f8:f1:95:cd:46:73:01:ac: 28:bc:42:24:91:76:24:c9:fe:32:86:fe:76:a1:36:a3:58:ca: de:18:4d:09:94:cc:19:13:55:86:c9:01:7d:4a:15:b5:e2:23: 31:db:46:b0:18:07:f1:2d:83:82:fb:5d:00:75:ec:d6:d0:27: e6:6f:4e:d4:ca:67:69:ff:18:d3:e2:0f:d4:d9:5e:99:0b:80: 12:88:cd:5a:2b:24:77:58:5a:41:03:96:42:83:30:73:e0:eb: e6:26:b5:b0:3e:7f:78:4c:b1:8e:b5:46:bc:7d:ea:29:75:47: 51:18:d9:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8c1Wx1FpbAOggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTQ5NDQyMTUtZjNlMy00MDY2LWFjNzYtZmYxYzg1OTI0MjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBA89j1sYAQf0yMzJoA2z2csPJJy2azRZ2p2 XWkksuksZqoiFKrplRhZ6+WfrFb1AXg7PK4UoJNdweo3pGIfNru/3mPX2toNbG6L H/8a5AfXcO/Sj5J++DgOtYsHML6UIcYZwzNhz06ihG/1HIAMktsDEdk+IT31ewCz pV0O5B16TOnjYo0KrAfeBEg58lfcPoKKfJjyA2QUkYVWpjVpZatop1y7Slk9krHN uYAifu+7ZG8HcNYG633c+mKaliUMHIOjL2hdqJe5WQCeCZ/98IbA6AGJMidhxXfm 6xvEKGKHJBTk8vw1o0xCi46yop6oAhNGEnJ+fWw6DTEBWjwD1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsvVbHtFWAOkFUvD+L1knUnov9hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZhNGIzNzQtMDM5NS0z MTUyLWIyZmItNWQ3YjAwYWQyODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvEwL6+bBYyxoGrjqauNZR33Lv6xiD9u3GVqkAedwxLMHCCumvxUdgh MHV/fsxnImpnj305dSznvEy3bc0i6et2WI1idl/0BWapDIGFoq3ymImu5j698gN2 Rc6I7uzy99Q5BUYRrkEBnSy74qNBUdVuEd/zkPn+JNElDAx/SoVtUcXRwzjhGS34 8ZXNRnMBrCi8QiSRdiTJ/jKG/nahNqNYyt4YTQmUzBkTVYbJAX1KFbXiIzHbRrAY B/Etg4L7XQB17NbQJ+ZvTtTKZ2n/GNPiD9TZXpkLgBKIzVorJHdYWkEDlkKDMHPg 6+YmtbA+f3hMsY61Rrx96il1R1EY2RQ= -----END CERTIFICATE-----Generated at Mon Oct 20 05:24:59 2025 by rpki-client