$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c055b94f-7190-389e-8431-b8ead2c1ac8e.roa File: c055b94f-7190-389e-8431-b8ead2c1ac8e.roa (raw, json) Hash identifier: dZxhM7/e1pniwmPhieiz/+OhVvwgV8koz6H72RZvrMM= Subject key identifier: 33:22:EA:68:6B:0E:F2:4C:EE:8D:86:78:BB:D1:86:E7:C8:AA:EF:24 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797E50365D18DCD4E94A2A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c055b94f-7190-389e-8431-b8ead2c1ac8e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.188.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e5:03:65:d1:8d:cd:4e:94:a2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3dee50a5-7505-49d0-a7d6-50b8c2b09e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:35:39:bd:46:83:0d:08:5c:aa:96:d3:d7: 96:13:90:d3:f4:c9:b2:df:c3:ac:9c:08:36:62:bd: a8:df:4c:ae:2d:48:93:6a:be:7d:a9:9a:9e:6f:34: 96:73:e5:1b:23:35:18:ba:6c:4d:de:a3:41:4c:3c: ae:b8:d0:e3:45:43:80:47:16:0a:17:0d:c8:9c:b4: 48:eb:63:e0:68:c2:81:d8:26:b9:42:6f:54:74:58: 57:f6:bc:77:db:2b:7b:ad:cf:a6:50:fa:c9:21:fa: fd:39:8c:1b:44:de:7c:37:ad:27:31:f5:d2:24:f4: b4:6d:46:cc:d1:1c:af:73:31:e5:01:77:fc:6d:f2: fd:e2:c6:9f:15:33:11:17:07:29:b5:43:06:e1:42: 3e:41:b9:43:db:1b:f1:81:51:a9:fb:05:c9:d6:f9: d1:8c:54:08:c0:04:81:b4:6c:50:87:32:e2:71:8a: 4d:b4:57:26:34:cd:a5:0d:14:f3:5b:fa:37:b7:65: c0:41:f6:bf:75:93:a9:78:23:51:8f:6e:e2:18:81: 62:53:7e:4c:fb:0f:a3:e6:5e:da:9b:b1:29:cd:ad: df:e0:8f:d9:ea:8c:36:20:f6:79:fe:24:a5:46:c2: 39:ec:cd:5b:1e:ac:9c:34:dc:ba:9e:41:42:8e:ad: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:22:EA:68:6B:0E:F2:4C:EE:8D:86:78:BB:D1:86:E7:C8:AA:EF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c055b94f-7190-389e-8431-b8ead2c1ac8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0f:f5:f6:24:94:b1:ab:e7:00:ab:e3:ed:87:6c:0a:a5:95: 78:c2:56:7c:80:3a:69:ff:45:d9:a0:4b:04:c4:d8:02:7d:17: 78:d8:2e:62:57:5f:07:0b:6e:bf:e2:45:b6:75:91:ae:ab:f6: 1e:ea:20:7d:2a:15:34:35:36:0c:57:49:57:6b:9d:fc:8d:c5: 03:8b:47:42:5f:cb:72:64:56:27:3f:21:ea:96:83:5a:0e:e0: 31:f6:19:34:0f:11:1a:6f:bc:f1:02:84:08:c3:51:8f:f5:27: 0b:f8:f8:e1:e6:75:0c:ff:61:2f:91:d7:a0:81:3a:4a:f4:8d: 17:da:2f:e6:e5:f0:cf:7c:28:0c:bc:8f:df:7f:7d:c6:a0:ec: b1:1a:53:82:0b:b9:07:66:b7:02:a5:5f:8b:3e:f4:fe:37:9e: 69:fa:ab:13:42:91:11:ef:78:34:d8:e1:60:e1:bc:52:90:36: cb:3e:e3:72:c2:aa:81:55:75:21:5d:c2:d0:d0:22:85:3b:3f: 39:90:b6:ac:ad:5e:6e:dc:ee:4d:95:e5:a7:99:7a:7c:57:28: 79:ec:ed:3e:b6:34:89:5b:ea:b5:42:21:d0:2b:a7:af:a7:82: 4a:2f:7d:a4:86:da:bf:a9:9e:58:2b:2a:88:99:cb:c9:c8:2b: fb:e2:17:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+UDZdGNzU6UoqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2RlZTUwYTUtNzUwNS00OWQwLWE3ZDYtNTBiOGMyYjA5ZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhI1Ob1Ggw0IXKqW09eWE5DT9Mmy38OsnAg2 Yr2o30yuLUiTar59qZqebzSWc+UbIzUYumxN3qNBTDyuuNDjRUOARxYKFw3InLRI 62PgaMKB2Ca5Qm9UdFhX9rx32yt7rc+mUPrJIfr9OYwbRN58N60nMfXSJPS0bUbM 0RyvczHlAXf8bfL94safFTMRFwcptUMG4UI+QblD2xvxgVGp+wXJ1vnRjFQIwASB tGxQhzLicYpNtFcmNM2lDRTzW/o3t2XAQfa/dZOpeCNRj27iGIFiU35M+w+j5l7a m7Epza3f4I/Z6ow2IPZ5/iSlRsI57M1bHqycNNy6nkFCjq29mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMi6mhrDvJM7o2GeLvRhufIqu8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzA1NWI5NGYtNzE5MC0z ODllLTg0MzEtYjhlYWQyYzFhYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEP9fYklLGr5wCr4+2HbAqllXjCVnyAOmn/RdmgSwTE2AJ9F3jYLmJX XwcLbr/iRbZ1ka6r9h7qIH0qFTQ1NgxXSVdrnfyNxQOLR0Jfy3JkVic/IeqWg1oO 4DH2GTQPERpvvPEChAjDUY/1Jwv4+OHmdQz/YS+R16CBOkr0jRfaL+bl8M98KAy8 j99/fcag7LEaU4ILuQdmtwKlX4s+9P43nmn6qxNCkRHveDTY4WDhvFKQNss+43LC qoFVdSFdwtDQIoU7PzmQtqytXm7c7k2V5aeZenxXKHns7T62NIlb6rVCIdArp6+n gkovfaSG2r+pnlgrKoiZy8nIK/viF3A= -----END CERTIFICATE-----Generated at Mon Oct 20 08:21:33 2025 by rpki-client