$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/964f30b0-33a6-3ea2-8be7-756e7851ea4c.roa File: 964f30b0-33a6-3ea2-8be7-756e7851ea4c.roa (raw, json) Hash identifier: 0nXnZZmtoIDOv8a5YhLOMCMPDC/9ZlKxwO4U65kcGNw= Subject key identifier: 9A:D3:CA:67:1B:63:46:61:57:05:39:88:FE:A2:1D:73:28:89:21:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C7A24F284DE525F5B880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/964f30b0-33a6-3ea2-8be7-756e7851ea4c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.203.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c7:a2:4f:28:4d:e5:25:f5:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f6aeab48-452b-4f0b-b15a-907c26f52177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:08:49:a3:1d:30:54:9f:72:f1:1c:ee:7a: b1:d6:de:d7:a8:ca:85:15:19:19:78:f5:d4:9b:8b: 02:5a:4f:65:20:34:3a:41:c7:5f:35:56:b7:f9:08: 32:99:34:e4:e0:31:11:a5:28:49:f9:60:70:9a:4c: 30:b3:55:12:7a:2e:ec:da:3a:93:d4:9c:bb:bc:53: 3b:68:6e:6d:59:cf:95:28:a5:47:b6:27:70:88:ea: 9a:16:81:42:16:c1:5b:11:9f:ba:dd:c0:f1:b4:03: 64:69:91:d5:8d:a5:45:6b:9e:39:ce:1d:e0:4c:93: 69:c7:13:dc:f5:56:8b:bb:86:06:33:ff:ed:24:53: c3:eb:ba:91:65:11:db:ed:d1:1a:6f:a0:f2:73:fa: cb:3d:c4:0c:fb:a8:8f:af:4e:79:49:bc:e6:c8:16: c5:3e:8e:ef:f8:55:26:d4:45:8a:15:2d:8c:5e:aa: 35:ab:a7:8e:5b:e6:d2:39:04:a1:0f:2c:31:80:09: 62:32:c2:93:a4:5f:35:61:77:76:c0:74:3c:87:fb: e3:1e:a5:24:41:e3:56:ad:d2:f1:92:8b:97:60:df: 20:3c:8b:7f:a1:f7:b2:f9:07:a2:44:9f:eb:17:c2: b5:dd:f4:9a:aa:fa:47:1b:ce:01:3c:84:21:00:28: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D3:CA:67:1B:63:46:61:57:05:39:88:FE:A2:1D:73:28:89:21:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/964f30b0-33a6-3ea2-8be7-756e7851ea4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ea:7c:ec:95:e3:dc:ea:ba:22:68:ea:8e:b1:72:d8:6b:b9: 1f:71:1b:bf:42:58:3f:0e:36:4d:9f:14:c5:55:20:7b:96:b5: 31:14:2a:67:f9:1f:2d:aa:b3:78:0b:ab:3a:5f:21:fc:7a:67: 20:7b:66:ef:10:90:7f:4d:05:f7:1a:e0:87:49:71:18:1b:63: 48:32:cf:e9:da:86:a4:ed:5b:e1:c0:2f:3a:57:7a:a8:2a:d1: fb:ba:7e:0b:77:cf:63:df:8c:82:c0:a4:58:ea:4a:3b:72:a8: 7f:c4:ad:89:7f:ce:c8:53:76:64:60:42:7f:7c:00:73:8b:99: bb:42:41:de:30:73:22:c0:8e:87:a9:6e:01:b5:63:ca:3a:d0: 33:95:b2:30:c3:95:85:a5:8c:8f:1f:86:4a:85:9c:78:02:2d: 78:1b:a6:91:15:4f:5a:9f:7c:f5:5f:64:20:f9:4b:c3:37:9d: af:57:ba:08:7f:25:60:13:cd:e5:c0:65:5b:12:a5:bc:59:f6: 4f:bb:c4:d7:e9:94:12:ba:d9:d9:6f:23:1a:92:2f:59:ba:5a: e2:c0:a2:fd:0b:69:2a:da:93:24:e6:a0:31:d2:2c:06:c8:50: 61:b0:64:73:fc:67:a8:4a:77:b0:b9:37:42:52:d0:31:ec:3c: d6:ad:99:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8eiTyhN5SX1uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjZhZWFiNDgtNDUyYi00ZjBiLWIxNWEtOTA3YzI2ZjUyMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKcISaMdMFSfcvEc7nqx1t7XqMqFFRkZePXU m4sCWk9lIDQ6QcdfNVa3+QgymTTk4DERpShJ+WBwmkwws1USei7s2jqT1Jy7vFM7 aG5tWc+VKKVHtidwiOqaFoFCFsFbEZ+63cDxtANkaZHVjaVFa545zh3gTJNpxxPc 9VaLu4YGM//tJFPD67qRZRHb7dEab6Dyc/rLPcQM+6iPr055SbzmyBbFPo7v+FUm 1EWKFS2MXqo1q6eOW+bSOQShDywxgAliMsKTpF81YXd2wHQ8h/vjHqUkQeNWrdLx kouXYN8gPIt/ofey+QeiRJ/rF8K13fSaqvpHG84BPIQhACgH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrTymcbY0ZhVwU5iP6iHXMoiSEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTY0ZjMwYjAtMzNhNi0z ZWEyLThiZTctNzU2ZTc4NTFlYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbqfOyV49zquiJo6o6xcthruR9xG79CWD8ONk2fFMVVIHuWtTEUKmf5 Hy2qs3gLqzpfIfx6ZyB7Zu8QkH9NBfca4IdJcRgbY0gyz+nahqTtW+HALzpXeqgq 0fu6fgt3z2PfjILApFjqSjtyqH/ErYl/zshTdmRgQn98AHOLmbtCQd4wcyLAjoep bgG1Y8o60DOVsjDDlYWljI8fhkqFnHgCLXgbppEVT1qffPVfZCD5S8M3na9Xugh/ JWATzeXAZVsSpbxZ9k+7xNfplBK62dlvIxqSL1m6WuLAov0LaSrakyTmoDHSLAbI UGGwZHP8Z6hKd7C5N0JS0DHsPNatmao= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:21 2025 by rpki-client