$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa File: a31dff1c-139d-388a-a3e6-347acb99e941.roa (raw, json) Hash identifier: ODBnnMT6PkXSZJMd6kV/vWU0IUL4alrSjyYh1Ahwy/Q= Subject key identifier: 30:21:FA:77:6B:D4:4B:91:22:7C:7E:49:55:6B:41:05:7A:AB:D2:DA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679756D379D2F3C1D4D15A40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.243.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:56:d3:79:d2:f3:c1:d4:d1:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2cc5feb1-d62e-47bb-9226-6d8c2c8abf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:02:36:20:63:94:bc:76:b1:9b:1d:2e:d6: 68:8a:73:9e:52:c5:28:17:2a:fb:fd:3c:00:05:3d: 7a:e0:e5:4b:b5:e2:bd:d9:93:69:c8:ba:62:b7:84: 97:5a:1b:dd:0c:23:8c:2c:2f:c8:a5:94:4f:27:15: 45:7e:d6:0e:9d:77:11:9b:38:7a:ef:60:65:d6:12: a9:0a:34:d0:08:a2:1d:64:94:cf:60:f8:37:37:65: d9:f7:54:6d:4c:44:bd:c4:f4:8b:2f:d6:89:3c:f8: cb:ec:90:8b:a4:ac:0c:bf:d3:e9:0f:19:7a:75:54: a8:f8:99:a1:49:38:ba:27:a8:72:b8:20:76:98:19: 1d:fb:f4:22:20:ed:92:d8:7e:4d:03:68:02:7c:51: 7d:bb:1e:7b:54:4f:10:a0:0e:3b:4a:b0:e7:38:eb: 0e:2f:40:45:31:aa:39:28:89:b7:fc:b6:d7:cd:a7: 3c:5e:12:b3:92:b2:f1:c4:75:e4:08:57:57:e4:ec: d1:63:99:d9:d9:b2:eb:86:dc:f0:4d:5b:fe:d6:16: 73:27:c5:27:df:c2:d1:3c:9c:9a:6e:91:33:a2:1d: c2:58:1e:86:d5:45:30:c6:3c:dd:f7:82:f0:c4:1d: bd:20:7e:96:8f:de:e8:0a:3f:39:f8:67:39:6a:28: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:21:FA:77:6B:D4:4B:91:22:7C:7E:49:55:6B:41:05:7A:AB:D2:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f3:66:e0:71:4a:14:20:78:af:51:7b:19:83:b6:fc:67:b8: 55:ae:13:0f:10:f2:26:80:14:a3:99:d6:59:79:d8:2d:a6:01: d7:f7:a2:a6:3b:f4:89:1f:f5:1b:73:2d:1e:c0:ea:93:5c:1c: e9:03:c8:81:fa:48:c5:88:b5:57:5a:7b:a8:2c:1f:57:b5:78: 38:9d:6c:16:99:e1:bc:2d:44:b9:0f:36:76:a8:79:fc:c9:64: 55:43:42:9b:1e:b8:e1:de:6d:2f:ef:50:42:81:84:5a:8a:27: 8e:08:6a:57:23:92:27:23:96:95:64:d8:73:45:47:fc:bd:6d: 91:b9:cd:46:98:9f:84:ca:39:d4:df:d6:6a:6a:b6:ee:0f:ea: ab:71:61:f1:02:76:b0:5c:4c:fe:c5:b0:40:53:80:2c:67:6a: 79:34:8f:13:dc:39:21:ce:37:60:84:98:a6:3e:73:64:21:4b: 49:90:e2:cb:0f:b2:88:1f:bd:f6:31:d2:78:23:cb:f6:96:7b: 70:6c:7d:b6:72:9d:8a:93:e0:4d:5e:0a:d3:15:06:57:c6:fa: 1b:95:4f:fc:bc:61:10:d0:63:31:ae:60:52:64:65:90:18:d6: 9b:3e:be:39:0e:af:0e:22:33:99:34:b2:5b:35:d2:05:76:b6: 56:92:b4:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1bTedLzwdTRWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmNjNWZlYjEtZDYyZS00N2JiLTkyMjYtNmQ4YzJjOGFiZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk0CNiBjlLx2sZsdLtZoinOeUsUoFyr7/TwA BT164OVLteK92ZNpyLpit4SXWhvdDCOMLC/IpZRPJxVFftYOnXcRmzh672Bl1hKp CjTQCKIdZJTPYPg3N2XZ91RtTES9xPSLL9aJPPjL7JCLpKwMv9PpDxl6dVSo+Jmh STi6J6hyuCB2mBkd+/QiIO2S2H5NA2gCfFF9ux57VE8QoA47SrDnOOsOL0BFMao5 KIm3/LbXzac8XhKzkrLxxHXkCFdX5OzRY5nZ2bLrhtzwTVv+1hZzJ8Un38LRPJya bpEzoh3CWB6G1UUwxjzd94LwxB29IH6Wj97oCj85+Gc5aijbjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAh+ndr1EuRInx+SVVrQQV6q9LaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTMxZGZmMWMtMTM5ZC0z ODhhLWEzZTYtMzQ3YWNiOTllOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/PQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPzZuBxShQgeK9RexmDtvxnuFWuEw8Q8iaAFKOZ1ll52C2mAdf3oqY7 9Ikf9RtzLR7A6pNcHOkDyIH6SMWItVdae6gsH1e1eDidbBaZ4bwtRLkPNnaoefzJ ZFVDQpseuOHebS/vUEKBhFqKJ44IalcjkicjlpVk2HNFR/y9bZG5zUaYn4TKOdTf 1mpqtu4P6qtxYfECdrBcTP7FsEBTgCxnank0jxPcOSHON2CEmKY+c2QhS0mQ4ssP sogfvfYx0ngjy/aWe3BsfbZynYqT4E1eCtMVBlfG+huVT/y8YRDQYzGuYFJkZZAY 1ps+vjkOrw4iM5k0sls10gV2tlaStPQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:04:06 2025 by rpki-client