$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa File: a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa (raw, json) Hash identifier: 6hnvI48kRp3YUTuxO5dbcKyYa4g5txoNtYtvJ4F7MtI= Subject key identifier: A3:2A:08:1F:8D:15:C0:5E:49:88:D1:3C:8C:A3:CA:F9:83:8D:D4:00 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797900E4FF576F0639C4900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.245.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:90:0e:4f:f5:76:f0:63:9c:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=c8e42d55-a147-4c90-afa5-69c8be423e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:d4:69:19:77:df:54:13:6c:88:7b:ae:4a: f6:83:a7:b2:03:22:4a:37:b3:c3:2c:1e:24:cd:a9: 0b:33:a9:b4:14:e2:5e:4e:a0:cd:ee:ff:2b:34:89: d5:cf:fa:1b:09:61:1c:24:df:e3:4e:f5:8b:9c:23: e7:93:b7:64:ed:fb:65:62:19:db:34:7d:17:90:c4: 0e:5a:db:97:fc:2d:5a:50:5f:14:67:3c:d8:02:bb: 63:92:f6:88:9c:50:99:4c:bf:0c:b0:bc:f4:fa:53: e1:e2:46:d1:9d:53:1b:b8:8e:cc:1a:3f:38:69:c7: 95:93:61:8f:b6:df:d0:e5:d1:d7:d5:f9:15:44:4f: 14:2b:7a:2a:bc:57:8e:e6:7c:58:fc:2c:44:82:e6: 97:bb:cc:cf:f6:02:1f:19:59:f0:b9:0a:cf:9f:0f: 00:d0:c5:8e:99:0f:f2:98:d3:85:dc:be:27:f1:d5: 6b:bd:8c:68:8d:bb:48:a9:b1:2c:08:c4:b4:b5:05: 77:9c:91:f9:e0:d7:ce:14:68:ef:d6:67:b8:a2:76: 6a:e5:b5:a9:ab:cd:1a:de:f8:20:07:56:7c:4c:30: b0:dc:43:bd:fb:5a:06:3a:ee:41:61:8f:aa:d7:2a: 08:70:4a:6f:35:e2:9b:fe:52:d7:0f:ed:a3:e2:a3: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2A:08:1F:8D:15:C0:5E:49:88:D1:3C:8C:A3:CA:F9:83:8D:D4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.245.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4a:97:22:16:18:37:da:80:bd:97:ba:5a:dc:63:f1:48:db: ff:73:cb:b2:4f:ff:fe:d8:73:08:ae:87:ae:08:be:a2:87:49: 7a:0c:d4:30:db:8c:5c:e2:5f:60:bb:77:5f:f1:9c:5a:df:84: b1:f9:b2:e2:a2:a8:72:9b:51:bb:06:d1:6f:fa:9c:32:a7:56: a4:01:f9:9e:d3:cc:f0:6f:b9:9f:0b:91:05:d9:2e:cb:f1:c0: 19:5f:33:a5:b3:58:34:ce:67:5d:88:41:be:23:e9:bb:48:04: 18:ff:f5:0f:8c:40:e1:de:65:e1:6d:23:2a:88:be:e7:0f:eb: 95:d7:df:e3:c5:40:b7:e8:f2:f2:1e:40:18:40:9b:b8:15:46: ff:df:22:40:7d:9e:96:92:c6:af:38:45:ba:83:f1:22:24:ef: 4e:82:35:f4:61:08:dc:d8:68:91:c0:4d:1a:68:6f:81:f0:8d: fa:ca:fd:52:c7:a7:13:4c:82:f4:13:00:81:cf:3a:a4:26:1f: c6:ab:38:4e:8a:27:39:76:5e:80:44:7e:b4:1d:fb:4f:48:48: 33:86:3a:47:6b:3d:9b:13:ed:ab:61:a3:5e:f8:85:1f:e6:02: 47:0b:d7:d3:d0:02:09:ba:ae:42:aa:18:c9:f2:bf:50:e6:d4: 0d:71:02:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5AOT/V28GOcSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YzhlNDJkNTUtYTE0Ny00YzkwLWFmYTUtNjljOGJlNDIzZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/TUaRl331QTbIh7rkr2g6eyAyJKN7PDLB4k zakLM6m0FOJeTqDN7v8rNInVz/obCWEcJN/jTvWLnCPnk7dk7ftlYhnbNH0XkMQO WtuX/C1aUF8UZzzYArtjkvaInFCZTL8MsLz0+lPh4kbRnVMbuI7MGj84aceVk2GP tt/Q5dHX1fkVRE8UK3oqvFeO5nxY/CxEguaXu8zP9gIfGVnwuQrPnw8A0MWOmQ/y mNOF3L4n8dVrvYxojbtIqbEsCMS0tQV3nJH54NfOFGjv1me4onZq5bWpq80a3vgg B1Z8TDCw3EO9+1oGOu5BYY+q1yoIcEpvNeKb/lLXD+2j4qND0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMqCB+NFcBeSYjRPIyjyvmDjdQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTNhY2Y2N2UtMTQwYy0z MWNkLTliYTEtZTM1NWEwZTk4YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNKlyIWGDfagL2XulrcY/FI2/9zy7JP//7Ycwiuh64IvqKHSXoM1DDb jFziX2C7d1/xnFrfhLH5suKiqHKbUbsG0W/6nDKnVqQB+Z7TzPBvuZ8LkQXZLsvx wBlfM6WzWDTOZ12IQb4j6btIBBj/9Q+MQOHeZeFtIyqIvucP65XX3+PFQLfo8vIe QBhAm7gVRv/fIkB9npaSxq84RbqD8SIk706CNfRhCNzYaJHATRpob4HwjfrK/VLH pxNMgvQTAIHPOqQmH8arOE6KJzl2XoBEfrQd+09ISDOGOkdrPZsT7atho174hR/m AkcL19PQAgm6rkKqGMnyv1Dm1A1xAvU= -----END CERTIFICATE-----Generated at Mon Oct 20 01:58:29 2025 by rpki-client