$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aeee80c3-d9fa-3825-ba45-f538a281a2fe.roa File: aeee80c3-d9fa-3825-ba45-f538a281a2fe.roa (raw, json) Hash identifier: tSqGVxgbsdq/g3gPBW8ccKJMi4AjIXRKRbbQfTuxJUc= Subject key identifier: 2E:C1:6F:62:7C:18:91:1F:51:47:BF:90:FD:56:B2:38:BD:5D:19:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679796F362FEBF587FA79040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aeee80c3-d9fa-3825-ba45-f538a281a2fe.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.222.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:96:f3:62:fe:bf:58:7f:a7:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=80b31a13-d01b-4c79-889c-56f8a8ec24fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:c2:12:be:58:fd:01:57:2a:4d:59:1f:03: 01:6c:f4:66:08:c5:0e:c7:d3:08:a0:44:04:38:08: b0:f4:de:ec:46:2d:e5:82:16:cf:d8:c6:cc:12:ab: a8:35:b6:67:33:59:27:0b:cb:36:00:2f:c2:1c:3b: b6:29:0b:8b:4d:06:06:32:e0:36:dc:e8:d8:ac:a0: ce:e6:7f:87:d1:02:71:b8:20:d1:00:0f:e7:91:8f: 38:14:8a:00:02:ce:68:25:3b:2f:d1:61:3a:2b:ec: da:e2:86:9b:f1:a7:a4:2f:33:2c:63:d3:6b:69:74: 55:06:0c:cb:54:8a:91:16:f0:72:98:cd:60:27:7d: 7e:56:cb:06:f9:c2:26:06:7e:e1:73:74:45:45:17: 16:04:ab:d0:81:f1:8b:37:03:46:a4:c1:70:f7:61: 34:79:57:8d:66:10:a2:07:50:19:cf:6e:a5:9d:7c: 91:5b:35:de:33:02:74:e9:52:c2:c2:7d:9b:66:f3: e8:bb:de:3a:f1:6c:47:54:33:b0:b2:e8:09:09:55: 3d:94:6e:ef:6a:16:d6:17:65:2c:93:6b:05:aa:1c: be:a2:1e:01:ee:e2:64:7e:3c:44:a0:d6:d6:2e:ca: 81:ee:55:a9:df:c0:57:87:16:d0:4b:d7:21:9e:98: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C1:6F:62:7C:18:91:1F:51:47:BF:90:FD:56:B2:38:BD:5D:19:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aeee80c3-d9fa-3825-ba45-f538a281a2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a1:53:7a:0d:e3:ea:ae:f6:ac:eb:ee:94:22:98:e9:d1:01: 61:5e:ac:c9:11:09:79:06:ce:3b:cd:db:11:3d:2c:dc:f7:0d: b4:18:77:0c:65:43:19:f5:be:c6:3e:a2:84:8c:3d:57:8e:a8: f7:f2:a6:bb:54:cf:6e:88:7a:18:2f:1f:f4:a7:48:27:2a:f9: b0:f0:cc:0a:b2:c9:a1:7b:12:40:f6:f2:f1:36:ea:f1:55:2f: 4c:15:08:66:36:21:a0:4d:1d:4c:2b:3a:b1:47:a2:f9:14:a3: 8b:40:45:67:67:81:19:42:ea:84:58:18:3e:e5:3b:bd:9b:52: 1b:f8:3f:92:7b:42:36:05:78:e0:4d:a4:47:4c:8d:d6:b7:08: c0:63:22:48:95:23:8a:8c:46:b8:a4:4a:36:d5:12:b7:4b:9e: 68:1d:26:60:73:a7:88:16:24:ca:6b:98:78:70:59:19:6a:51: 24:69:6e:a2:67:4f:9f:ae:cd:1b:ca:84:33:ae:ab:7d:92:c4: 23:1b:bb:be:91:32:2c:85:69:55:c8:f8:8a:3e:54:8c:cc:0d: fe:f8:0b:0b:d9:f7:bb:3c:e8:e5:1a:d7:c7:94:81:65:8c:53: fe:91:a3:41:1a:cc:4f:d7:5e:a9:de:8b:47:4a:75:ff:2c:48: f8:37:e5:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5bzYv6/WH+nkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODBiMzFhMTMtZDAxYi00Yzc5LTg4OWMtNTZmOGE4ZWMyNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgTCEr5Y/QFXKk1ZHwMBbPRmCMUOx9MIoEQE OAiw9N7sRi3lghbP2MbMEquoNbZnM1knC8s2AC/CHDu2KQuLTQYGMuA23OjYrKDO 5n+H0QJxuCDRAA/nkY84FIoAAs5oJTsv0WE6K+za4oab8aekLzMsY9NraXRVBgzL VIqRFvBymM1gJ31+VssG+cImBn7hc3RFRRcWBKvQgfGLNwNGpMFw92E0eVeNZhCi B1AZz26lnXyRWzXeMwJ06VLCwn2bZvPou9468WxHVDOwsugJCVU9lG7vahbWF2Us k2sFqhy+oh4B7uJkfjxEoNbWLsqB7lWp38BXhxbQS9chnpj/FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7Bb2J8GJEfUUe/kP1Wsji9XRkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVlZTgwYzMtZDlmYS0z ODI1LWJhNDUtZjUzOGEyODFhMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI97IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyhU3oN4+qu9qzr7pQimOnRAWFerMkRCXkGzjvN2xE9LNz3DbQYdwxl Qxn1vsY+ooSMPVeOqPfyprtUz26IehgvH/SnSCcq+bDwzAqyyaF7EkD28vE26vFV L0wVCGY2IaBNHUwrOrFHovkUo4tARWdngRlC6oRYGD7lO72bUhv4P5J7QjYFeOBN pEdMjda3CMBjIkiVI4qMRrikSjbVErdLnmgdJmBzp4gWJMprmHhwWRlqUSRpbqJn T5+uzRvKhDOuq32SxCMbu76RMiyFaVXI+Io+VIzMDf74CwvZ97s86OUa18eUgWWM U/6Ro0EazE/XXqnei0dKdf8sSPg35ac= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:56 2025 by rpki-client