$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa File: a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa (raw, json) Hash identifier: q+1B7WcLZRS4pjoLKSMGveYoHj3YLoaqkyZSEzvtOio= Subject key identifier: 7F:21:16:C8:11:38:21:2B:E4:B3:C1:72:2E:DE:8B:ED:94:CC:4A:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679751E34DAA2C1E9C75A960 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.240.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:51:e3:4d:aa:2c:1e:9c:75:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=ea002d1e-61fa-4f32-93d2-e17a972be790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c7:f9:e8:33:e6:0f:58:04:f8:fe:24:bb:61: 49:38:65:2a:c3:c2:7c:c0:d5:fd:db:25:1b:27:c8: 3a:25:fd:ce:21:cf:50:50:95:b6:36:1e:f5:eb:cc: 8a:95:68:e9:e1:62:34:a5:dd:d4:53:d7:e3:43:3f: 01:cf:88:f8:95:de:aa:7a:f4:ea:94:f0:6d:dc:3e: 5d:31:ca:ad:fe:df:b6:f8:f4:1d:98:09:5d:2b:e5: 06:cf:a3:7d:9f:27:b0:2c:e2:2f:9f:a9:b8:ed:52: 39:de:95:f5:c3:8b:d1:8e:c1:11:f3:dd:15:7d:04: 7f:e1:39:22:e6:6f:c3:28:c8:d3:30:da:68:33:f7: 3a:72:9d:6b:bc:fe:15:8c:ed:ca:da:58:81:18:12: c8:10:52:82:10:54:36:c3:35:a0:8d:29:21:fe:04: b1:2b:fc:a1:e6:d8:23:d5:8a:c0:5b:6a:d7:46:b5: 48:b8:80:90:f2:60:d9:ec:8f:ce:9a:3d:18:08:be: 7e:62:de:47:95:e8:20:8c:e1:05:32:7b:7f:0d:03: a1:c4:2f:93:38:ea:b8:83:42:42:bc:db:7e:c4:5f: d1:13:68:06:8a:fb:be:b6:cd:a6:8c:db:a7:80:69: 78:80:7c:a5:50:1d:92:86:52:e4:70:53:94:09:d3: 13:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:21:16:C8:11:38:21:2B:E4:B3:C1:72:2E:DE:8B:ED:94:CC:4A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:17:6f:42:3f:23:e7:7b:53:7f:d6:99:3c:a0:94:ef:22:0f: 30:d1:c1:b4:21:84:76:f5:66:04:3c:fb:22:46:5d:e7:12:8a: ee:e2:e5:6a:f3:8f:99:ef:ee:47:7e:7a:d1:91:b0:88:84:95: 14:ac:4c:45:5a:fe:ef:5f:ed:0d:f4:db:0c:a7:b7:a1:f9:31: d8:34:40:d1:77:1c:31:b5:c2:5b:a5:72:2d:ee:2b:05:2a:df: 18:c8:b6:c5:5a:00:36:d4:61:44:18:d2:02:66:2c:5c:7d:0b: 9d:2d:3b:99:ca:ae:ad:9d:cd:36:1d:d9:07:ff:ed:6e:77:7a: 08:3e:07:77:e8:e1:e1:f8:e0:62:7a:5c:b8:8f:c1:e4:0e:9e: 2d:08:1b:3a:b6:fe:70:04:1b:54:52:af:d7:eb:a1:18:40:32: 98:3b:a5:8c:66:fc:14:85:9f:77:45:29:cc:11:a9:a9:59:e1: 62:50:34:ad:0d:48:24:63:72:1e:d8:48:9d:46:9f:8e:a4:56: ed:68:0b:0c:f4:ee:0f:65:89:8a:49:39:60:52:e6:3b:b3:4b: 35:1b:aa:32:c9:39:2b:9a:48:f7:11:7f:c3:e3:84:59:83:df: e1:f3:36:79:bf:b4:ad:84:14:09:39:62:e4:58:37:3f:2a:70: f7:ce:0a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1HjTaosHpx1qWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWEwMDJkMWUtNjFmYS00ZjMyLTkzZDItZTE3YTk3MmJlNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8f56DPmD1gE+P4ku2FJOGUqw8J8wNX92yUb J8g6Jf3OIc9QUJW2Nh7168yKlWjp4WI0pd3UU9fjQz8Bz4j4ld6qevTqlPBt3D5d Mcqt/t+2+PQdmAldK+UGz6N9nyewLOIvn6m47VI53pX1w4vRjsER890VfQR/4Tki 5m/DKMjTMNpoM/c6cp1rvP4VjO3K2liBGBLIEFKCEFQ2wzWgjSkh/gSxK/yh5tgj 1YrAW2rXRrVIuICQ8mDZ7I/Omj0YCL5+Yt5HleggjOEFMnt/DQOhxC+TOOq4g0JC vNt+xF/RE2gGivu+ts2mjNungGl4gHylUB2ShlLkcFOUCdMTVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8hFsgROCEr5LPBci7ei+2UzEqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTRhYTIzMGEtZTQ2NC0z ZWFkLWE1NDMtMTNlOGQ3YTNkZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwXb0I/I+d7U3/WmTyglO8iDzDRwbQhhHb1ZgQ8+yJGXecSiu7i5Wrz j5nv7kd+etGRsIiElRSsTEVa/u9f7Q302wynt6H5Mdg0QNF3HDG1wlulci3uKwUq 3xjItsVaADbUYUQY0gJmLFx9C50tO5nKrq2dzTYd2Qf/7W53egg+B3fo4eH44GJ6 XLiPweQOni0IGzq2/nAEG1RSr9froRhAMpg7pYxm/BSFn3dFKcwRqalZ4WJQNK0N SCRjch7YSJ1Gn46kVu1oCwz07g9liYpJOWBS5juzSzUbqjLJOSuaSPcRf8PjhFmD 3+HzNnm/tK2EFAk5YuRYNz8qcPfOCg8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:36 2025 by rpki-client