$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa File: a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa (raw, json) Hash identifier: d4uzkY+ATbpqP5TYVW8CLQPmMBkWZWX8ixqmQVqVsF8= Subject key identifier: 19:71:C3:F0:A0:43:99:1B:DB:AD:14:C7:7D:BA:C5:F9:C4:49:71:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67975005BB8C985405796C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.238.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:50:05:bb:8c:98:54:05:79:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=b36330a7-a4a8-4955-8eb6-76fd69bf2459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:96:60:ca:5f:85:7d:ed:d2:9c:c7:e7:8b:02: 2b:d7:aa:b5:3e:ed:1e:f6:13:da:63:00:a2:3e:d6: 5b:6b:f7:83:48:51:35:3b:e6:4e:6f:f7:45:39:ed: 97:27:83:7b:61:aa:6a:b0:6a:e3:85:46:8f:62:7a: 19:14:d2:d6:71:ee:df:fc:92:1a:0f:0a:5b:35:36: e1:59:d5:2f:8a:c3:02:fe:e3:9e:96:33:b8:ad:70: 6f:b5:96:b1:0b:82:37:58:6c:fc:db:a7:85:f1:44: 36:cd:09:fd:6a:8a:96:f2:10:96:fe:5a:58:f1:84: e0:9b:6b:29:c1:2b:81:2c:06:0d:40:49:18:86:0d: 4e:4d:ad:04:a1:25:a7:05:dc:4e:41:6b:70:cf:b0: 69:55:8c:70:ce:28:27:f9:a2:bb:8d:c8:55:0f:93: 93:72:4b:ff:2f:54:1c:eb:c3:ae:c9:bc:15:69:25: 2f:c2:c0:37:93:4a:ab:6a:6f:9d:8e:71:ff:08:2b: f1:ac:b4:84:56:f0:64:ac:42:cc:4b:7e:7a:fa:f1: bc:58:d5:70:dc:80:e8:e9:6b:23:f6:34:cc:5f:be: 30:18:d4:03:89:98:8c:15:65:c4:7b:1a:db:62:17: b4:bf:81:1d:34:a0:4f:8b:e1:bf:b7:0a:a1:20:d7: 35:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:71:C3:F0:A0:43:99:1B:DB:AD:14:C7:7D:BA:C5:F9:C4:49:71:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:4e:34:0c:d2:27:39:82:95:13:f3:b3:47:45:c0:09:73:cc: 09:4d:1c:77:89:7a:c5:32:24:bb:6a:d6:08:4d:f7:9a:d0:99: f2:c8:14:e6:c3:fa:65:2b:08:b6:f9:f8:6c:e5:1c:93:70:7f: 9a:97:47:7c:f7:82:7b:bc:6f:35:54:95:fd:d5:12:bb:ab:38: c8:a9:18:a7:ef:fd:96:0e:16:4e:de:de:29:7d:8a:91:15:2d: ea:b4:14:e8:af:fd:ad:3b:6c:d8:b8:a0:2a:8e:b6:42:c4:01: fa:6c:d1:66:42:c4:ea:c6:21:ec:77:e1:e2:71:6b:40:fb:be: 58:d3:27:97:16:f6:2c:bb:ba:98:50:05:7f:5b:e0:be:bd:ac: 8e:af:f9:44:44:bb:0d:07:3c:25:01:f7:e8:ce:8d:4c:66:af: ea:a7:3c:34:bf:92:8a:8e:f2:d3:14:05:c2:de:d5:ac:25:8b: c6:56:a3:c2:35:0b:09:ca:fb:d7:63:f0:55:5d:85:06:c4:72: cc:f3:da:0a:7c:a5:52:ed:8a:d3:81:f0:99:19:08:b5:05:ff: 89:e6:f1:89:7c:8e:08:eb:12:0e:69:da:9c:f3:98:d3:33:d4: cc:7d:3b:cf:61:37:84:2d:79:2d:80:ce:9b:ca:23:ec:af:24: c2:04:31:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1AFu4yYVAV5bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YjM2MzMwYTctYTRhOC00OTU1LThlYjYtNzZmZDY5YmYyNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJZgyl+Ffe3SnMfniwIr16q1Pu0e9hPaYwCi PtZba/eDSFE1O+ZOb/dFOe2XJ4N7YapqsGrjhUaPYnoZFNLWce7f/JIaDwpbNTbh WdUvisMC/uOeljO4rXBvtZaxC4I3WGz826eF8UQ2zQn9aoqW8hCW/lpY8YTgm2sp wSuBLAYNQEkYhg1OTa0EoSWnBdxOQWtwz7BpVYxwzign+aK7jchVD5OTckv/L1Qc 68OuybwVaSUvwsA3k0qram+djnH/CCvxrLSEVvBkrELMS356+vG8WNVw3IDo6Wsj 9jTMX74wGNQDiZiMFWXEexrbYhe0v4EdNKBPi+G/twqhINc1sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlxw/CgQ5kb260Ux326xfnESXFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVhYWYwNTgtOWZiYy0z NmQ3LTg3N2EtMWE0MjdhYTFlNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJONAzSJzmClRPzs0dFwAlzzAlNHHeJesUyJLtq1ghN95rQmfLIFObD +mUrCLb5+GzlHJNwf5qXR3z3gnu8bzVUlf3VErurOMipGKfv/ZYOFk7e3il9ipEV Leq0FOiv/a07bNi4oCqOtkLEAfps0WZCxOrGIex34eJxa0D7vljTJ5cW9iy7uphQ BX9b4L69rI6v+UREuw0HPCUB9+jOjUxmr+qnPDS/koqO8tMUBcLe1awli8ZWo8I1 CwnK+9dj8FVdhQbEcszz2gp8pVLtitOB8JkZCLUF/4nm8Yl8jgjrEg5p2pzzmNMz 1Mx9O89hN4QteS2AzpvKI+yvJMIEMas= -----END CERTIFICATE-----Generated at Mon Oct 20 02:52:13 2025 by rpki-client