$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa File: c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa (raw, json) Hash identifier: EP4KFvRwLNK39rtFh/VAJZewax7YlOSVPSSjJ/LB5XI= Subject key identifier: 3E:A1:D8:FA:D5:16:4C:68:17:E5:C9:23:DD:2B:E3:63:92:84:1D:C4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797E7F35445B0AAEC7E7A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.229.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e7:f3:54:45:b0:aa:ec:7e:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d30131ff-2475-4530-9d79-a9414dc1470f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4a:df:07:f2:e5:cf:d4:e9:a0:33:12:37:57: 9f:ef:c2:12:6f:4a:54:ec:49:5d:a7:47:d2:be:73: 1c:55:bf:31:6d:02:51:fa:d6:0e:7a:0c:b4:a8:1a: 28:b3:74:c8:2f:d2:39:9c:5c:95:60:d5:4f:e3:ea: 25:8b:e4:bc:42:21:5c:ca:4b:14:f1:a7:c4:dd:92: 9c:75:f3:57:52:29:f2:41:8d:b5:df:a9:c5:23:61: 7c:64:ad:26:6a:22:e2:d1:e2:26:42:cb:fd:19:3f: e4:97:86:cd:90:01:de:84:c3:67:75:04:9a:4b:cd: 38:d4:2f:95:fc:b8:b1:b0:ea:75:4c:b2:4a:03:bb: cf:a1:b8:c4:46:a6:20:60:9a:69:a0:32:0b:12:5d: 3b:3f:02:26:14:67:33:5d:98:bf:af:6f:20:22:42: d2:a4:9e:37:3d:1e:6f:4f:1e:8e:a0:5e:17:f3:6b: 83:be:3d:fc:0c:c8:28:49:b8:ed:ed:ca:3b:c0:0e: 8a:4b:19:da:2f:ba:cd:99:75:7f:9c:c8:2a:4c:47: 97:02:81:e8:a1:2c:92:dd:31:b6:2e:09:63:7f:b6: 2b:74:ba:26:03:72:c1:9f:f0:a9:a4:d6:27:c8:6b: e0:69:fb:df:15:16:e1:e7:9c:70:0f:22:1b:94:a7: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A1:D8:FA:D5:16:4C:68:17:E5:C9:23:DD:2B:E3:63:92:84:1D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.229.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1f:ec:27:c7:42:c8:ab:8f:e1:88:5f:79:fa:c1:29:e0:cb: d8:4f:ce:e7:ed:30:ca:cd:d7:7d:3c:86:55:96:a1:89:8e:3f: ef:d6:d7:39:2f:ec:9e:a3:ef:68:20:71:7b:ca:39:e6:09:c7: 37:69:c5:64:ea:e0:67:70:2d:fa:65:84:2b:8b:8b:96:0e:0b: f8:da:57:e9:36:1f:f5:a9:33:f2:e4:5b:1e:72:ae:b4:65:a9: 99:3f:1c:41:18:33:65:73:f5:d1:a0:dc:0b:fa:b0:66:78:c4: 37:0f:50:ee:9c:57:11:cd:8d:ed:82:b5:f7:05:f7:a6:28:f4: a1:4c:cf:43:d7:84:12:ff:4a:14:a2:89:4e:92:ac:63:7e:26: d9:ed:cb:9a:a7:48:cc:ba:fe:d6:21:28:9e:14:ff:bf:cb:fe: 22:c7:31:0f:b1:65:86:66:42:ba:7b:f5:0e:e5:a9:8b:4a:61: b6:48:9b:1d:a5:9c:ae:40:24:bf:d2:03:45:a9:55:9f:86:e9: 75:e0:20:ad:ba:79:fb:77:f7:c4:4d:da:12:d0:23:94:bf:6c: f1:50:fd:5f:85:3e:23:3e:b2:8c:00:59:77:13:82:cc:17:31: f0:a4:1e:78:7a:da:57:cf:05:36:cb:cc:e6:50:b3:48:7e:54: 6d:b7:ac:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+fzVEWwqux+eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDMwMTMxZmYtMjQ3NS00NTMwLTlkNzktYTk0MTRkYzE0NzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUrfB/Llz9TpoDMSN1ef78ISb0pU7Eldp0fS vnMcVb8xbQJR+tYOegy0qBoos3TIL9I5nFyVYNVP4+oli+S8QiFcyksU8afE3ZKc dfNXUinyQY2136nFI2F8ZK0maiLi0eImQsv9GT/kl4bNkAHehMNndQSaS8041C+V /LixsOp1TLJKA7vPobjERqYgYJppoDILEl07PwImFGczXZi/r28gIkLSpJ43PR5v Tx6OoF4X82uDvj38DMgoSbjt7co7wA6KSxnaL7rNmXV/nMgqTEeXAoHooSyS3TG2 Lgljf7YrdLomA3LBn/CppNYnyGvgafvfFRbh55xwDyIblKdm8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6h2PrVFkxoF+XJI90r42OShB3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzFjYjQwZWQtYmJmZi0z MDJhLWFjMjktZjBhNGExYTU4YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABof7CfHQsirj+GIX3n6wSngy9hPzuftMMrN1308hlWWoYmOP+/W1zkv 7J6j72ggcXvKOeYJxzdpxWTq4GdwLfplhCuLi5YOC/jaV+k2H/WpM/LkWx5yrrRl qZk/HEEYM2Vz9dGg3Av6sGZ4xDcPUO6cVxHNje2CtfcF96Yo9KFMz0PXhBL/ShSi iU6SrGN+Jtnty5qnSMy6/tYhKJ4U/7/L/iLHMQ+xZYZmQrp79Q7lqYtKYbZImx2l nK5AJL/SA0WpVZ+G6XXgIK26eft398RN2hLQI5S/bPFQ/V+FPiM+sowAWXcTgswX MfCkHnh62lfPBTbLzOZQs0h+VG23rOo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:08:21 2025 by rpki-client