$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cad22cf8-67bc-3fff-a25c-5ec68e5d2493.roa File: cad22cf8-67bc-3fff-a25c-5ec68e5d2493.roa (raw, json) Hash identifier: c6BqnYaC8fu26nwzUnMk+I4bZyouz3ZrcJ9FIAtLvBg= Subject key identifier: 8A:23:A0:23:EF:6B:24:16:32:9A:9C:03:0D:3A:75:99:12:B1:02:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797E38F8221B97B84C7BCD0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cad22cf8-67bc-3fff-a25c-5ec68e5d2493.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 19527 IP address blocks: 35.206.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e3:8f:82:21:b9:7b:84:c7:bc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=0a447ca3-a479-42a1-b451-d71ed4662f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:b3:2e:b4:5b:2f:1c:b4:8d:b4:60:5e:21: 45:dd:41:06:ce:97:ef:6a:f8:c2:d9:8c:bb:3c:a5: 33:5d:94:41:59:89:52:48:45:90:35:27:68:30:90: 46:ad:63:59:f2:1a:d6:95:f5:3c:1a:19:d8:9e:2b: ed:3f:fd:b2:17:6b:91:50:8b:0a:12:c0:5b:5e:67: c1:f5:cc:6f:41:20:83:c6:9f:22:2b:53:f9:0b:88: 02:59:c8:b3:ed:af:87:7b:bf:a6:54:37:ed:68:49: 0b:2c:85:58:d2:68:54:6c:b7:d1:6e:31:8b:d6:e1: fe:42:dd:4f:da:a6:ae:51:58:df:41:a5:f0:b8:57: 18:96:e7:90:a2:5a:47:a1:3c:11:15:e2:01:00:92: ab:fc:01:95:5b:40:3f:be:82:20:30:4f:80:71:ef: f9:38:27:24:6b:2a:8f:c9:37:36:64:8e:ab:3b:8f: d5:48:a9:01:db:23:92:ea:a0:98:4d:84:60:f4:94: 7f:cc:3d:c5:ef:d0:a0:bd:86:ea:4b:9f:24:d7:da: 28:0e:32:74:38:da:c0:aa:cf:75:ea:14:e4:e8:62: 44:70:39:c6:65:a7:42:0f:20:da:22:81:b7:e4:bb: e1:5d:05:3f:93:8e:32:70:a8:f9:4f:4a:9f:25:07: 22:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:23:A0:23:EF:6B:24:16:32:9A:9C:03:0D:3A:75:99:12:B1:02:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cad22cf8-67bc-3fff-a25c-5ec68e5d2493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2d:be:a7:f9:eb:c9:58:1c:ef:00:c4:f0:9f:9d:b7:65:62: 3b:f4:b4:ff:61:1c:7a:c4:e5:f9:3a:bb:9e:52:29:f8:65:93: 43:5b:3b:0a:67:f0:0a:b2:c4:20:0a:9f:3e:86:e9:b6:f5:36: a8:fa:2c:43:e6:7e:ad:e6:5f:c6:28:c1:03:9c:9b:bd:83:63: 67:9e:11:83:04:4e:cb:f3:34:2b:ee:78:c1:12:40:e3:27:35: ea:a5:1c:35:7b:dc:d2:83:43:a5:95:67:63:02:7e:6e:c5:e9: b7:49:f8:70:3d:20:33:cc:44:78:e0:21:56:c4:f1:6d:11:4f: 41:d6:e0:43:a1:e1:4b:1a:43:5f:fc:3b:e9:77:40:e8:7e:f5: d3:d4:af:29:80:ab:a0:e6:73:8b:24:1e:8c:4d:44:f3:a6:40: e4:25:d1:2e:4a:96:74:c1:03:3a:90:fe:50:71:1c:7a:a2:57: 84:21:5b:8c:f4:d0:6f:16:a8:d8:a0:6f:08:7d:16:66:43:45: 29:27:3e:8b:d2:13:cb:60:23:bb:28:1c:a3:9f:fd:13:74:a7: a6:9d:4a:a9:3d:04:60:c9:4d:d0:00:48:19:12:d0:67:e0:8d: 4d:b2:8f:82:41:34:b3:39:2b:9c:a9:9d:c1:39:18:39:ce:92: 2c:47:ae:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+OPgiG5e4THvNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MGE0NDdjYTMtYTQ3OS00MmExLWI0NTEtZDcxZWQ0NjYyZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgqzLrRbLxy0jbRgXiFF3UEGzpfvavjC2Yy7 PKUzXZRBWYlSSEWQNSdoMJBGrWNZ8hrWlfU8GhnYnivtP/2yF2uRUIsKEsBbXmfB 9cxvQSCDxp8iK1P5C4gCWciz7a+He7+mVDftaEkLLIVY0mhUbLfRbjGL1uH+Qt1P 2qauUVjfQaXwuFcYlueQolpHoTwRFeIBAJKr/AGVW0A/voIgME+Ace/5OCckayqP yTc2ZI6rO4/VSKkB2yOS6qCYTYRg9JR/zD3F79CgvYbqS58k19ooDjJ0ONrAqs91 6hTk6GJEcDnGZadCDyDaIoG35LvhXQU/k44ycKj5T0qfJQci0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIojoCPvayQWMpqcAw06dZkSsQKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2FkMjJjZjgtNjdiYy0z ZmZmLWEyNWMtNWVjNjhlNWQyNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI84gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwtvqf568lYHO8AxPCfnbdlYjv0tP9hHHrE5fk6u55SKfhlk0NbOwpn 8AqyxCAKnz6G6bb1Nqj6LEPmfq3mX8YowQOcm72DY2eeEYMETsvzNCvueMESQOMn NeqlHDV73NKDQ6WVZ2MCfm7F6bdJ+HA9IDPMRHjgIVbE8W0RT0HW4EOh4UsaQ1/8 O+l3QOh+9dPUrymAq6Dmc4skHoxNRPOmQOQl0S5KlnTBAzqQ/lBxHHqiV4QhW4z0 0G8WqNigbwh9FmZDRSknPovSE8tgI7soHKOf/RN0p6adSqk9BGDJTdAASBkS0Gfg jU2yj4JBNLM5K5ypncE5GDnOkixHrmg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:46 2025 by rpki-client