$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87adb934-2468-3be7-af65-7d03ef63c5bb.roa File: 87adb934-2468-3be7-af65-7d03ef63c5bb.roa (raw, json) Hash identifier: YSvJHM/oSSTJX2ZiF/yY/eyBLEthJzHoNR5VipA0ZNw= Subject key identifier: 8F:C1:14:4A:CA:9A:13:AA:1E:0B:29:1B:05:68:43:CC:8E:36:C1:49 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797CE2AB4913FB1E8295B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87adb934-2468-3be7-af65-7d03ef63c5bb.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.190.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ce:2a:b4:91:3f:b1:e8:29:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a8d9f790-499b-4ae7-8eef-0b21dc94dda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:77:c2:26:a7:1d:a4:fb:d9:35:2e:b4:ab: 31:6d:15:d9:f7:04:1f:e1:0f:dd:09:2d:75:07:99: 3e:70:bf:5d:42:70:ab:b2:fe:4a:2b:e2:05:0b:db: 36:49:99:be:4b:e8:3f:69:0d:48:1d:7d:7c:5a:19: be:d3:cf:85:1f:db:1d:f4:04:7d:22:b2:6f:ef:bc: b1:6a:fa:8f:3e:46:17:6b:1f:87:82:b3:5b:04:b1: f3:c1:98:32:7f:2a:8d:e0:b2:48:37:3d:f8:db:da: 82:51:0f:8a:d9:61:77:d0:ad:bb:da:5c:17:7d:ca: 8a:89:04:87:54:4c:72:a9:8f:45:e7:35:25:cb:17: ec:bb:a6:e0:cc:c8:30:05:ba:9c:05:75:99:6a:9a: 57:68:eb:d0:0b:f7:c9:58:76:47:56:89:32:2e:9f: b1:6f:de:16:c6:3b:39:c2:6a:c9:96:53:94:60:fb: 88:29:bf:64:db:fa:85:55:64:0f:7d:b9:ff:51:c7: b5:58:30:a2:a4:14:4c:61:ab:f1:01:33:18:1e:3d: 57:00:c0:10:60:78:fd:84:9c:70:dd:11:af:25:cf: 34:61:83:b3:fb:a2:63:a9:37:9a:25:4f:65:2c:d4: fb:93:1e:cf:80:ed:cb:46:99:cc:6b:7c:23:45:2a: f9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C1:14:4A:CA:9A:13:AA:1E:0B:29:1B:05:68:43:CC:8E:36:C1:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87adb934-2468-3be7-af65-7d03ef63c5bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.190.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5d:06:cf:36:0d:99:90:59:e4:ba:15:ca:75:1e:6f:eb:04: c0:1f:87:84:22:62:46:8e:6a:3e:5e:52:b4:84:69:5e:cc:7a: 73:0f:81:3d:f3:b3:aa:7d:da:2d:32:7a:81:e0:7d:4b:3c:13: 4f:bf:9e:68:d3:8a:34:7a:af:2f:e6:af:83:d6:59:e7:dc:89: fa:37:ac:7c:2e:a3:6a:26:36:36:04:a3:61:db:52:ed:48:1a: c9:2a:a3:14:1c:5f:51:a2:a2:76:5e:c5:d5:d4:9b:c9:cb:bc: fb:70:2c:db:9a:f6:a2:07:b5:6a:c5:94:55:53:19:37:94:f3: 59:43:38:c3:bd:b6:1d:44:f4:23:77:e4:90:53:a1:ed:26:53: 3a:0a:09:6c:f8:27:2c:b4:87:d5:32:f7:cb:cf:47:c4:85:8c: 7b:02:2e:78:97:c5:ef:77:fe:f4:22:a6:ec:df:29:04:d9:d5: b9:90:63:b0:f1:68:2b:61:a9:55:79:9e:53:74:5b:a1:2f:ac: 82:4f:50:6c:23:70:e4:0c:18:75:74:8b:a2:11:13:aa:f6:ef: c4:60:b6:b6:73:db:2c:17:5f:35:f2:c6:8e:0b:df:23:15:f1: b2:6d:d6:4d:7d:db:03:d3:36:6c:89:97:f4:65:9e:d5:82:64: 14:33:4e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl84qtJE/segpWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YThkOWY3OTAtNDk5Yi00YWU3LThlZWYtMGIyMWRjOTRkZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMl3wianHaT72TUutKsxbRXZ9wQf4Q/dCS11 B5k+cL9dQnCrsv5KK+IFC9s2SZm+S+g/aQ1IHX18Whm+08+FH9sd9AR9IrJv77yx avqPPkYXax+HgrNbBLHzwZgyfyqN4LJINz3429qCUQ+K2WF30K272lwXfcqKiQSH VExyqY9F5zUlyxfsu6bgzMgwBbqcBXWZappXaOvQC/fJWHZHVokyLp+xb94Wxjs5 wmrJllOUYPuIKb9k2/qFVWQPfbn/Uce1WDCipBRMYavxATMYHj1XAMAQYHj9hJxw 3RGvJc80YYOz+6JjqTeaJU9lLNT7kx7PgO3LRpnMa3wjRSr5SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/BFErKmhOqHgspGwVoQ8yONsFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODdhZGI5MzQtMjQ2OC0z YmU3LWFmNjUtN2QwM2VmNjNjNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI76AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFddBs82DZmQWeS6Fcp1Hm/rBMAfh4QiYkaOaj5eUrSEaV7MenMPgT3z s6p92i0yeoHgfUs8E0+/nmjTijR6ry/mr4PWWefcifo3rHwuo2omNjYEo2HbUu1I GskqoxQcX1GionZexdXUm8nLvPtwLNua9qIHtWrFlFVTGTeU81lDOMO9th1E9CN3 5JBToe0mUzoKCWz4Jyy0h9Uy98vPR8SFjHsCLniXxe93/vQipuzfKQTZ1bmQY7Dx aCthqVV5nlN0W6EvrIJPUGwjcOQMGHV0i6IRE6r278RgtrZz2ywXXzXyxo4L3yMV 8bJt1k192wPTNmyJl/RlntWCZBQzTks= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:39 2025 by rpki-client