$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa File: b2678a67-8ef4-3062-adc8-762daaa2d576.roa (raw, json) Hash identifier: uKwtIB/IoKyARwcEd/vQ5pzC/SddmZlQB4wE0agnPgw= Subject key identifier: C5:C1:D8:25:0E:AD:1C:E0:37:82:E4:96:23:A1:48:46:BE:48:83:C7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B4632997C5F48FD6A700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.203.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b4:63:29:97:c5:f4:8f:d6:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=63589fc9-6f73-468b-9347-927a47be1ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:65:be:9f:01:a1:38:4b:b8:c6:17:12:a7: 7e:42:f9:97:92:62:1a:f2:e0:05:36:63:2c:ad:e4: be:bb:b7:7a:f6:aa:5a:ae:34:96:8a:3d:ce:7d:c3: db:3f:c6:62:e4:d7:ea:84:bc:da:4c:79:4a:73:d0: 14:0a:97:96:20:9c:82:13:37:6d:6a:3c:1c:1e:c1: 32:8f:c5:10:13:80:de:dd:61:74:09:fb:58:e0:80: 14:60:ad:26:14:3d:97:be:38:c3:95:35:d6:32:22: 00:44:ad:e3:55:f6:99:9e:85:b4:47:1e:61:6b:d1: 3f:2e:a2:f9:ff:ce:cd:de:32:47:2a:49:41:b8:eb: e6:0f:13:06:bd:6a:d6:61:8c:b2:67:2e:45:48:36: 59:d9:f8:34:65:a1:47:77:68:e1:56:52:fb:f1:be: 27:02:4e:c4:c1:70:10:3f:b8:7d:5d:b7:ba:e7:94: e8:1c:59:52:ab:2c:b7:02:45:31:15:09:b5:1d:94: 6e:86:a0:19:58:3b:47:72:90:86:85:67:b9:c4:c3: cd:db:96:54:d4:5b:42:8e:ac:6f:85:79:e7:5e:33: 62:3b:55:18:01:c8:2f:b1:df:00:7c:18:e4:1f:72: 88:28:59:7b:f6:f0:ec:00:77:3a:de:32:bf:3b:ba: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C1:D8:25:0E:AD:1C:E0:37:82:E4:96:23:A1:48:46:BE:48:83:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:eb:f8:32:74:ee:b6:97:00:b5:9e:dc:3e:fd:b7:60:53:fd: e2:81:24:44:69:a6:dd:f9:ee:21:cf:ad:3f:57:5e:2a:1c:db: 15:40:04:54:87:7c:af:b7:3c:41:23:dc:89:99:12:a9:9c:db: 18:56:82:59:47:89:11:38:26:1b:8e:c5:2c:75:8f:d8:45:42: fa:00:92:90:11:d4:d0:cc:6b:f4:4e:d3:eb:8d:97:36:ee:8f: 08:f3:5b:05:b4:59:e1:e4:38:ef:58:eb:91:af:2b:95:43:dc: 34:32:b5:f1:4c:34:92:ef:de:d8:73:b1:38:a0:d8:67:0d:4a: 9d:47:41:fe:6c:d4:11:dd:c1:87:eb:2c:ff:1c:fe:ea:08:ac: bf:63:33:82:85:b6:c9:59:67:04:86:c9:2c:48:9b:44:a5:28: 24:3d:b1:02:7a:fa:df:9b:4e:0a:e1:aa:73:5c:c9:71:ad:04: 33:e4:d9:14:fb:b5:5e:14:ea:dd:1b:1e:79:b1:ad:5b:ec:91: e7:8e:83:02:ad:7a:5b:27:53:4f:04:5d:ec:cb:64:9e:af:1e: bf:61:c1:d3:0e:c2:d9:8a:7c:34:93:77:c4:c4:18:c4:5b:84: 8d:4a:81:e5:ef:7e:7f:0a:87:f7:16:f2:83:b7:c3:57:06:19: 1c:e6:a5:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7RjKZfF9I/WpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjM1ODlmYzktNmY3My00NjhiLTkzNDctOTI3YTQ3YmUxYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihtlvp8BoThLuMYXEqd+QvmXkmIa8uAFNmMs reS+u7d69qparjSWij3OfcPbP8Zi5NfqhLzaTHlKc9AUCpeWIJyCEzdtajwcHsEy j8UQE4De3WF0CftY4IAUYK0mFD2XvjjDlTXWMiIARK3jVfaZnoW0Rx5ha9E/LqL5 /87N3jJHKklBuOvmDxMGvWrWYYyyZy5FSDZZ2fg0ZaFHd2jhVlL78b4nAk7EwXAQ P7h9Xbe655ToHFlSqyy3AkUxFQm1HZRuhqAZWDtHcpCGhWe5xMPN25ZU1FtCjqxv hXnnXjNiO1UYAcgvsd8AfBjkH3KIKFl79vDsAHc63jK/O7pa8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXB2CUOrRzgN4LkliOhSEa+SIPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjI2NzhhNjctOGVmNC0z MDYyLWFkYzgtNzYyZGFhYTJkNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzr+DJ07raXALWe3D79t2BT/eKBJERppt357iHPrT9XXioc2xVABFSH fK+3PEEj3ImZEqmc2xhWgllHiRE4JhuOxSx1j9hFQvoAkpAR1NDMa/RO0+uNlzbu jwjzWwW0WeHkOO9Y65GvK5VD3DQytfFMNJLv3thzsTig2GcNSp1HQf5s1BHdwYfr LP8c/uoIrL9jM4KFtslZZwSGySxIm0SlKCQ9sQJ6+t+bTgrhqnNcyXGtBDPk2RT7 tV4U6t0bHnmxrVvskeeOgwKtelsnU08EXezLZJ6vHr9hwdMOwtmKfDSTd8TEGMRb hI1KgeXvfn8Kh/cW8oO3w1cGGRzmpVo= -----END CERTIFICATE-----Generated at Tue Oct 21 02:00:33 2025 by rpki-client