$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a3dc496-666d-3d18-95b4-18a92642502d.roa File: 9a3dc496-666d-3d18-95b4-18a92642502d.roa (raw, json) Hash identifier: udRSfbr9ajQurVGlQrso3i25GYW9i6p7Hz4BiAGLKUs= Subject key identifier: CB:2F:2D:68:B1:88:C8:5A:FA:6E:FD:C1:E9:EE:3B:92:AF:90:33:1C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C06E13349013D9AF6480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a3dc496-666d-3d18-95b4-18a92642502d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.243.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c0:6e:13:34:90:13:d9:af:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=cb6d3c21-006c-47fa-b63b-07ba0c608f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9e:ef:78:5c:d5:77:0c:0b:58:36:23:af:6c: c1:e1:c5:0d:30:38:8e:2e:8a:d4:d6:1e:d3:df:cd: 29:a6:1b:3e:98:85:3d:8f:de:ea:be:33:36:2a:cc: db:58:97:33:82:72:40:e0:eb:d0:0d:b6:43:63:e8: 9e:9d:56:ef:9f:c6:84:ce:ea:7d:69:ff:3e:39:39: 3e:c8:f5:0f:89:8a:95:69:33:42:c7:02:f0:c1:12: 75:fa:ab:05:cb:fe:39:44:18:f2:7d:0f:63:0f:ff: fd:11:c9:c6:35:23:cc:b3:05:95:72:82:4f:22:30: a8:2e:63:f8:85:74:c9:d8:8a:a1:c1:54:f7:b2:b5: 37:48:12:44:c7:80:61:47:86:4a:15:4d:52:3b:2f: f9:f1:a6:12:57:28:85:71:25:e3:40:2d:3e:b8:1d: 7e:cc:0e:b2:0d:69:d1:07:a3:d4:4d:4c:15:d3:80: c9:5e:92:77:7e:17:2c:f9:31:ec:85:9d:0e:09:88: 40:a4:37:d7:95:37:a9:3b:b6:9e:63:0d:0c:63:a0: 51:02:a3:cd:65:23:0a:83:25:50:15:87:cc:4a:13: 96:d9:7b:5c:bc:71:d0:70:0f:ab:5b:48:7b:00:13: 23:72:b5:2b:a6:19:4e:4c:7b:e3:68:37:e2:67:c7: c5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2F:2D:68:B1:88:C8:5A:FA:6E:FD:C1:E9:EE:3B:92:AF:90:33:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a3dc496-666d-3d18-95b4-18a92642502d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:05:b3:35:f2:3b:f1:b8:d9:22:66:24:b1:4e:5d:05:00:51: b4:e1:f4:24:9b:e0:19:2e:11:71:10:9a:10:c5:e0:b6:ca:5d: d5:dd:d7:70:6e:aa:bf:e2:95:b8:82:24:83:75:2c:c5:ef:29: 66:7a:d4:4a:e9:f2:b8:30:84:73:f2:ce:a1:cf:82:e4:49:cb: 4e:d3:2c:5b:bf:ef:62:4d:06:70:84:83:8b:b0:77:bb:c5:de: 3f:88:c1:43:48:e7:cb:fd:af:01:85:36:f5:f8:12:7b:f9:28: 74:d6:33:52:92:ec:45:18:0f:f4:f9:43:3a:a6:1f:74:3a:56: 60:31:8b:18:34:f5:2e:8d:21:77:32:80:f1:4f:22:6e:10:cf: 39:82:03:c6:66:5d:18:a6:29:15:49:07:9d:32:fd:e2:54:43: fa:81:29:3f:72:a8:0b:25:0f:0c:06:0d:9f:7e:c8:28:a5:1c: 55:db:02:ca:d2:ad:99:a4:e8:c4:9b:2f:de:de:8d:c2:55:7c: 07:fe:05:4c:87:d1:27:a7:d6:a4:21:57:5a:2e:1f:57:7f:81: 03:d8:43:b7:53:12:5d:74:e1:7c:5c:5b:67:44:58:30:0a:86: 1c:1c:05:bd:b8:23:ee:92:bf:1f:e9:3d:ab:b0:56:60:0f:91: 11:16:ac:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8BuEzSQE9mvZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2I2ZDNjMjEtMDA2Yy00N2ZhLWI2M2ItMDdiYTBjNjA4ZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ7veFzVdwwLWDYjr2zB4cUNMDiOLorU1h7T 380pphs+mIU9j97qvjM2KszbWJczgnJA4OvQDbZDY+ienVbvn8aEzup9af8+OTk+ yPUPiYqVaTNCxwLwwRJ1+qsFy/45RBjyfQ9jD//9EcnGNSPMswWVcoJPIjCoLmP4 hXTJ2IqhwVT3srU3SBJEx4BhR4ZKFU1SOy/58aYSVyiFcSXjQC0+uB1+zA6yDWnR B6PUTUwV04DJXpJ3fhcs+THshZ0OCYhApDfXlTepO7aeYw0MY6BRAqPNZSMKgyVQ FYfMShOW2XtcvHHQcA+rW0h7ABMjcrUrphlOTHvjaDfiZ8fFlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsvLWixiMha+m79wenuO5KvkDMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWEzZGM0OTYtNjY2ZC0z ZDE4LTk1YjQtMThhOTI2NDI1MDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQFszXyO/G42SJmJLFOXQUAUbTh9CSb4BkuEXEQmhDF4LbKXdXd13Bu qr/ilbiCJIN1LMXvKWZ61Erp8rgwhHPyzqHPguRJy07TLFu/72JNBnCEg4uwd7vF 3j+IwUNI58v9rwGFNvX4Env5KHTWM1KS7EUYD/T5QzqmH3Q6VmAxixg09S6NIXcy gPFPIm4QzzmCA8ZmXRimKRVJB50y/eJUQ/qBKT9yqAslDwwGDZ9+yCilHFXbAsrS rZmk6MSbL97ejcJVfAf+BUyH0Sen1qQhV1ouH1d/gQPYQ7dTEl104XxcW2dEWDAK hhwcBb24I+6Svx/pPauwVmAPkREWrHg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:59 2025 by rpki-client