$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dbdf946-971e-3770-901b-b9c1ec23e042.roa File: 8dbdf946-971e-3770-901b-b9c1ec23e042.roa (raw, json) Hash identifier: wHrmg01B5fDD4u/+WNNDiUM1OF0sRx0a4BoyR2GkuiU= Subject key identifier: BD:D8:68:B8:3D:AF:76:B1:32:B6:8F:14:31:CD:6D:35:9F:4A:85:5E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797CA19D40B48794B3F5D98 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dbdf946-971e-3770-901b-b9c1ec23e042.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.200.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ca:19:d4:0b:48:79:4b:3f:5d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=4ada15cc-c268-4e9d-a417-37a84a2fcb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fb:ea:0d:3e:3a:fd:b1:07:17:e4:17:5e:45: f9:04:54:c3:27:8f:41:6a:91:17:e7:0e:7c:67:c0: f1:c1:89:30:52:43:11:09:d5:d6:89:c1:95:35:9a: 10:09:cb:92:68:dd:2e:cf:da:01:cd:e8:f4:87:c4: 40:ae:fd:3b:1d:38:b6:9c:20:90:52:75:79:20:4f: 8d:b2:48:a5:cd:bb:80:00:63:2a:f0:bd:b4:26:5c: 5c:a7:da:c4:e9:16:ae:bd:0f:95:ae:16:f8:42:0d: ef:da:59:6a:dc:1f:22:83:59:60:74:ce:7d:4b:67: 0d:ba:a1:64:7c:c0:ec:23:f5:f7:86:33:8f:01:67: fd:90:d8:58:fe:91:8b:c9:ae:23:97:aa:a5:95:17: 05:f0:f3:ce:d8:df:18:71:4d:79:b3:d4:a4:b1:95: d6:ad:96:6f:97:36:61:83:46:80:1e:83:58:4e:42: bc:e2:17:05:59:9a:62:02:87:cc:7c:02:30:d1:d0: f0:ca:d2:00:3a:21:6f:f7:75:31:8d:4d:a7:11:27: c1:f6:4f:32:ca:dd:37:9e:89:91:b4:2a:76:b1:70: ba:1d:89:2b:85:e8:5b:30:18:1a:56:07:d1:dd:54: f4:f0:f8:ae:f5:fc:9c:e2:2a:a2:06:94:c8:86:76: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D8:68:B8:3D:AF:76:B1:32:B6:8F:14:31:CD:6D:35:9F:4A:85:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dbdf946-971e-3770-901b-b9c1ec23e042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a7:7d:73:c0:9a:86:d3:51:2e:f7:15:81:22:ac:73:b0:bc: d5:20:6e:ee:a7:f7:55:d1:aa:76:a6:b0:1a:64:63:46:41:cd: 1b:e0:ba:30:98:81:4d:1e:cc:6f:6c:71:7d:fb:ca:70:59:bc: f6:9b:9e:f8:fe:30:a0:e2:b6:cc:42:2d:5a:a4:d0:0a:39:d9: 7b:c8:18:a4:42:25:58:e1:48:df:fe:78:29:fd:95:44:ef:8c: c9:74:08:df:07:bb:2b:9a:1e:d7:21:d2:30:b3:5e:6c:4b:4e: c1:8f:81:88:5e:34:c4:82:73:e4:cc:9c:5d:f0:84:94:a0:f8: 17:4f:39:b1:b0:02:25:67:2c:1d:db:29:f2:e6:4e:6a:2e:51: 60:ab:c9:17:a2:c4:80:89:ab:78:06:68:a4:39:96:c6:f4:d3: eb:2f:d9:22:6b:f5:4e:75:73:de:54:3e:53:77:42:29:d2:72: f6:18:e2:ef:5e:d7:56:92:98:e4:3e:1b:dc:21:8d:d8:00:52: e8:fc:13:b7:97:5e:11:fd:df:1a:2d:95:48:4f:4b:6e:17:3a: 77:8c:06:75:fe:04:ec:0d:7b:47:eb:d9:3a:35:93:7c:e4:bb: 1f:5c:e8:ac:b8:33:95:fa:42:27:1f:db:2c:7f:92:79:e2:32: 3f:74:e7:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8oZ1AtIeUs/XZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NGFkYTE1Y2MtYzI2OC00ZTlkLWE0MTctMzdhODRhMmZjYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPvqDT46/bEHF+QXXkX5BFTDJ49BapEX5w58 Z8DxwYkwUkMRCdXWicGVNZoQCcuSaN0uz9oBzej0h8RArv07HTi2nCCQUnV5IE+N skilzbuAAGMq8L20Jlxcp9rE6RauvQ+Vrhb4Qg3v2llq3B8ig1lgdM59S2cNuqFk fMDsI/X3hjOPAWf9kNhY/pGLya4jl6qllRcF8PPO2N8YcU15s9SksZXWrZZvlzZh g0aAHoNYTkK84hcFWZpiAofMfAIw0dDwytIAOiFv93UxjU2nESfB9k8yyt03nomR tCp2sXC6HYkrhehbMBgaVgfR3VT08Piu9fyc4iqiBpTIhnbfTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3YaLg9r3axMraPFDHNbTWfSoVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGRiZGY5NDYtOTcxZS0z NzcwLTkwMWItYjljMWVjMjNlMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCnfXPAmobTUS73FYEirHOwvNUgbu6n91XRqnamsBpkY0ZBzRvgujCY gU0ezG9scX37ynBZvPabnvj+MKDitsxCLVqk0Ao52XvIGKRCJVjhSN/+eCn9lUTv jMl0CN8HuyuaHtch0jCzXmxLTsGPgYheNMSCc+TMnF3whJSg+BdPObGwAiVnLB3b KfLmTmouUWCryReixICJq3gGaKQ5lsb00+sv2SJr9U51c95UPlN3QinScvYY4u9e 11aSmOQ+G9whjdgAUuj8E7eXXhH93xotlUhPS24XOneMBnX+BOwNe0fr2To1k3zk ux9c6Ky4M5X6Qicf2yx/knniMj9052Y= -----END CERTIFICATE-----Generated at Mon Oct 20 17:43:19 2025 by rpki-client