$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa File: ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa (raw, json) Hash identifier: I72FFL0aK2rrTPUQkkQlHo9WoxEIakElKSIH8Tsg1cw= Subject key identifier: D0:7F:F2:A5:87:DD:03:52:F9:39:21:42:DC:9E:60:41:29:6A:94:CF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67974C5221F4317720D07840 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.199.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:4c:52:21:f4:31:77:20:d0:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=712d2ae5-1870-4eb4-857e-8ec16f02471c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:dc:b8:fa:3f:28:f7:5d:fe:73:7c:34:d0: b3:8c:05:67:ab:cb:4f:d5:86:c6:e6:07:a4:73:bc: 6a:de:99:e5:08:66:6d:cf:93:76:a9:bd:22:0b:db: 8d:b5:ff:e4:22:7a:fb:70:d2:ab:87:e2:05:e7:ae: 35:9d:bd:ec:9f:b1:8b:6c:dd:e1:5c:d9:35:0f:dd: 4a:80:86:f5:a7:9d:e3:4e:6a:ba:65:b8:c1:01:b2: 9e:04:00:8e:46:31:80:32:6a:95:aa:de:f8:4c:39: 0c:6f:47:4e:94:cd:fe:b2:9f:67:60:57:5b:b7:06: e7:2f:d9:b3:91:d5:d3:b8:25:97:50:f7:c5:e1:57: 97:0f:c8:a1:7b:ba:0c:af:62:72:63:98:2c:f5:4b: a9:49:9f:66:79:81:0a:f1:03:f0:e5:13:37:80:dd: 4a:bf:2d:72:92:71:a7:1b:60:56:17:29:6d:42:54: e9:b7:81:f6:1d:98:99:11:78:a0:5c:4f:ef:bd:6c: 60:45:fe:2b:f2:09:72:46:f2:c6:ab:7b:73:5e:32: ca:9e:f6:b5:65:2a:00:19:b0:11:18:24:4a:e3:82: 09:53:f7:73:3e:f5:88:b9:fe:c6:71:47:bc:17:43: 04:b2:3b:70:c4:97:f0:08:27:0f:47:8f:33:73:07: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7F:F2:A5:87:DD:03:52:F9:39:21:42:DC:9E:60:41:29:6A:94:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:84:9e:43:4e:a3:bb:30:4b:6b:c7:23:56:5e:4c:ef:0e:12: 21:9a:d6:eb:c2:4b:d4:20:5e:b5:fc:b5:69:bc:5b:f1:5d:1c: 72:91:12:04:43:5d:93:a0:7b:01:4c:a1:c0:97:d2:0d:61:c7: b0:c5:61:5c:6c:67:b9:d6:8f:fc:e5:77:f9:3c:af:bb:94:6f: 66:2c:bc:7a:d8:89:37:3d:ab:04:7a:d3:6c:7a:58:83:00:09: 08:fc:0a:3f:09:db:4f:5d:71:35:d2:1a:bb:35:3a:c9:5f:7d: 2d:04:5a:3d:60:fe:e3:b2:61:ea:2f:e1:29:9b:81:7a:23:39: ac:c4:16:42:c8:15:aa:7b:a1:9a:76:47:66:8c:4b:e1:08:bf: e2:a4:bf:90:04:e0:aa:1d:09:3e:a4:9f:4f:95:0c:78:1a:ba: 75:08:b6:f7:9d:74:87:c4:15:24:b4:b7:f2:2a:3c:27:3b:6d: f1:a7:32:62:33:9a:a8:7a:d7:84:bb:c9:85:fd:77:92:8c:ef: 55:0f:6f:02:90:96:b3:ed:c5:23:15:b6:a9:45:a7:51:25:5a: 03:b5:57:f6:02:8c:15:46:dd:0b:e6:07:44:49:6b:ab:e5:7d: 98:1f:24:59:9f:b1:d3:ae:6c:2a:c4:34:6b:3f:16:a7:18:12: 58:27:a6:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0xSIfQxdyDQeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzEyZDJhZTUtMTg3MC00ZWI0LTg1N2UtOGVjMTZmMDI0NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgrcuPo/KPdd/nN8NNCzjAVnq8tP1YbG5gek c7xq3pnlCGZtz5N2qb0iC9uNtf/kInr7cNKrh+IF5641nb3sn7GLbN3hXNk1D91K gIb1p53jTmq6ZbjBAbKeBACORjGAMmqVqt74TDkMb0dOlM3+sp9nYFdbtwbnL9mz kdXTuCWXUPfF4VeXD8ihe7oMr2JyY5gs9UupSZ9meYEK8QPw5RM3gN1Kvy1yknGn G2BWFyltQlTpt4H2HZiZEXigXE/vvWxgRf4r8glyRvLGq3tzXjLKnva1ZSoAGbAR GCRK44IJU/dzPvWIuf7GcUe8F0MEsjtwxJfwCCcPR48zcwd6bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNB/8qWH3QNS+TkhQtyeYEEpapTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2U3ZThlZjgtMDFmMS0z NWM5LWIxMTktYmQxMzA2M2ZmOGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8dAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKEnkNOo7swS2vHI1ZeTO8OEiGa1uvCS9QgXrX8tWm8W/FdHHKREgRD XZOgewFMocCX0g1hx7DFYVxsZ7nWj/zld/k8r7uUb2YsvHrYiTc9qwR602x6WIMA CQj8Cj8J209dcTXSGrs1OslffS0EWj1g/uOyYeov4SmbgXojOazEFkLIFap7oZp2 R2aMS+EIv+Kkv5AE4KodCT6kn0+VDHgaunUItveddIfEFSS0t/IqPCc7bfGnMmIz mqh614S7yYX9d5KM71UPbwKQlrPtxSMVtqlFp1ElWgO1V/YCjBVG3QvmB0RJa6vl fZgfJFmfsdOubCrENGs/FqcYElgnppM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:04:08 2025 by rpki-client