$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa File: aa31434b-d455-3716-8753-f1c07991149e.roa (raw, json) Hash identifier: TnlTo0CkwrdW/9Jl8KzxEWUz4KJdz5CqKzKO+XEtIiI= Subject key identifier: 4A:49:2E:3E:85:9B:49:2B:06:7D:D1:E3:DC:B8:88:B7:F3:A2:F0:FC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C1BA5E775AA0A6914F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.188.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c1:ba:5e:77:5a:a0:a6:91:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5b024a59-e5a8-4ab5-8ffc-3c7f68dfb1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:bd:c7:6e:6d:77:b8:f5:90:6d:5e:b5:6e: c3:0e:fa:90:87:42:78:49:c6:39:0e:14:cd:b5:32: 9a:88:b5:00:1a:e7:1b:99:7f:f7:b8:b6:fa:18:dd: 8c:27:43:53:b6:f4:a4:b3:dd:f8:43:f4:a8:0b:c3: 0f:d0:8e:4b:9d:09:fc:7a:5b:de:37:75:5a:07:3b: e7:10:77:49:d1:ca:7a:d2:82:0b:71:32:0e:29:c6: 68:6b:30:20:47:c3:1f:90:1d:02:e0:6a:eb:63:89: 67:1a:d1:df:6d:5c:47:02:97:71:fd:9c:8b:9b:e0: 39:06:46:28:3a:b4:ec:1b:a1:9f:d5:93:ed:ed:fe: e8:05:ad:ef:4c:af:96:a2:a4:56:f1:92:18:87:9a: 26:8c:ad:92:bc:f9:a6:39:ef:73:0b:80:88:de:ef: 4f:a4:b5:82:98:52:82:d0:f7:04:ee:94:22:82:f7: 26:ca:28:ec:e2:54:90:ff:6a:08:ba:85:cb:ef:f7: b9:61:e7:51:0c:dd:da:9f:dd:11:a3:f0:e0:67:12: b8:ae:13:39:9e:8a:30:fc:f9:41:51:0e:00:74:8d: 7d:99:69:31:43:11:93:14:99:12:fa:7d:7e:c7:15: d2:3b:b2:87:8f:88:bb:c2:22:da:7e:c6:bd:3c:17: 41:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:49:2E:3E:85:9B:49:2B:06:7D:D1:E3:DC:B8:88:B7:F3:A2:F0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:8d:fd:07:13:8d:84:e7:16:33:9c:b7:20:da:b2:fd:0c:01: 73:3a:41:d3:ce:e5:73:8c:4e:55:07:84:9e:34:e4:c0:6f:2b: b1:f9:cd:a9:49:e7:71:34:ad:ba:47:52:3c:b0:a0:ad:9c:b4: 34:ee:74:4d:5e:2a:0d:60:ab:63:7e:06:e3:bd:ba:d4:04:ec: fd:d9:23:0d:b5:5c:1c:f5:bb:af:84:2f:8a:ba:15:13:7f:22: 07:0d:d8:ba:a3:22:fe:7f:7b:67:78:1a:a7:57:eb:c6:86:12: 8f:e4:1d:99:cf:8f:ba:ae:ec:dc:b8:49:b3:a2:28:2b:f9:74: 52:88:18:2d:28:a4:61:36:b0:61:85:02:6d:99:22:5e:cf:6d: 96:b9:42:81:4e:0f:19:5a:a6:be:10:e0:6f:db:61:16:6f:3f: 6f:46:35:6c:ee:dd:50:c9:e6:54:ba:c6:1d:64:04:15:77:f3: 9b:6d:9f:26:68:af:34:af:a6:b4:cf:11:79:71:bd:a1:26:3a: 86:09:01:1b:a4:da:d9:a3:a6:73:dc:ce:04:87:0b:95:36:62: 72:9d:27:66:50:09:06:87:6a:5e:17:41:b7:c8:93:99:1f:f5: d9:50:ec:95:d4:e2:6a:12:c3:6b:12:4d:07:46:9d:75:8a:7a: b0:f1:ba:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8G6XndaoKaRT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NWIwMjRhNTktZTVhOC00YWI1LThmZmMtM2M3ZjY4ZGZiMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+W9x25td7j1kG1etW7DDvqQh0J4ScY5DhTN tTKaiLUAGucbmX/3uLb6GN2MJ0NTtvSks934Q/SoC8MP0I5LnQn8elveN3VaBzvn EHdJ0cp60oILcTIOKcZoazAgR8MfkB0C4GrrY4lnGtHfbVxHApdx/ZyLm+A5BkYo OrTsG6Gf1ZPt7f7oBa3vTK+WoqRW8ZIYh5omjK2SvPmmOe9zC4CI3u9PpLWCmFKC 0PcE7pQigvcmyijs4lSQ/2oIuoXL7/e5YedRDN3an90Ro/DgZxK4rhM5noow/PlB UQ4AdI19mWkxQxGTFJkS+n1+xxXSO7KHj4i7wiLafsa9PBdB0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpJLj6Fm0krBn3R49y4iLfzovD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEzMTQzNGItZDQ1NS0z NzE2LTg3NTMtZjFjMDc5OTExNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKN/QcTjYTnFjOctyDasv0MAXM6QdPO5XOMTlUHhJ405MBvK7H5zalJ 53E0rbpHUjywoK2ctDTudE1eKg1gq2N+BuO9utQE7P3ZIw21XBz1u6+EL4q6FRN/ IgcN2LqjIv5/e2d4GqdX68aGEo/kHZnPj7qu7Ny4SbOiKCv5dFKIGC0opGE2sGGF Am2ZIl7PbZa5QoFODxlapr4Q4G/bYRZvP29GNWzu3VDJ5lS6xh1kBBV385ttnyZo rzSvprTPEXlxvaEmOoYJARuk2tmjpnPczgSHC5U2YnKdJ2ZQCQaHal4XQbfIk5kf 9dlQ7JXU4moSw2sSTQdGnXWKerDxugo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:14:45 2025 by rpki-client