$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa File: d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa (raw, json) Hash identifier: Ni4Dm5xLi2ixrVkFTSi7ddvb8o5uhEH9797+m6ZzLi4= Subject key identifier: AA:0D:C1:8F:56:6F:2C:5C:32:42:7C:DE:48:B8:05:09:FF:BE:17:BC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797996FD446A6DBD2EF8000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.240.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:99:6f:d4:46:a6:db:d2:ef:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=13c2a5f5-065c-4bdb-98be-2501bdf5b38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:5f:20:77:2e:c5:50:59:2b:c0:b3:f9:16: 44:79:0a:b5:c7:1d:2a:e2:a3:db:42:53:f0:ce:bb: fb:85:d7:be:5e:7a:ee:8b:4a:c3:93:02:42:28:36: 68:b8:fb:b0:12:a4:6c:b0:3e:6b:7e:f8:49:45:d3: 1f:af:ef:5c:a9:2e:3f:e5:23:6f:98:db:e9:3b:94: 4d:a9:00:51:5f:1f:ad:10:17:91:24:8f:77:33:0f: 10:37:22:77:84:41:c6:e9:54:15:ab:f3:d4:70:f8: 2f:e9:a7:4c:51:4a:20:a2:ac:d8:a4:23:cd:04:55: 05:00:0c:c0:ac:13:80:7a:55:7b:18:a7:ae:a2:36: df:cd:a2:2f:67:2e:a0:e0:a3:00:26:a4:0b:58:0c: 35:f3:48:70:7c:79:c3:6e:c6:d7:ba:de:56:cf:e1: 9e:5c:0a:b1:3f:14:c7:57:e3:27:c1:39:77:1d:6a: 85:a7:80:a3:51:8b:a2:77:21:85:56:e7:0f:01:3c: fc:99:1e:7a:59:c8:31:d8:28:de:ef:a5:9b:97:70: 11:da:9a:5b:c8:e4:8d:80:d9:23:9c:5e:8d:9d:e6: 4a:33:3b:2e:6e:3b:2d:f7:6e:96:74:87:fd:42:9a: ea:d0:d0:57:7a:c1:9f:a3:e0:c3:78:e8:62:b5:72: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0D:C1:8F:56:6F:2C:5C:32:42:7C:DE:48:B8:05:09:FF:BE:17:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9d:7c:db:6f:75:c4:f4:ae:fc:b0:88:e0:00:7a:d1:c1:df: 24:aa:2e:ed:54:3e:b6:ff:2d:db:c7:85:04:41:e0:75:33:22: 23:e2:75:22:8e:20:b7:39:14:3f:60:e7:8b:d2:2a:05:0f:cb: 74:57:cc:d4:50:9a:e5:8a:b7:c1:41:9d:ed:a7:53:67:67:26: eb:63:11:a4:2b:65:7d:83:c9:9e:0f:8f:c4:95:a6:60:e5:c4: cb:98:0c:5f:dd:71:c8:a1:1e:43:31:7b:8d:6d:d9:74:3f:56: ae:ff:f9:66:4a:56:d2:7d:0f:8d:04:d2:b4:67:e9:5e:3a:ab: 6c:cb:e7:8b:29:d4:e8:a9:a9:1e:e9:6e:90:e8:4d:dd:ec:82: fb:5e:c7:c0:1b:e4:03:4a:43:74:a7:10:ae:2c:e9:8e:af:8c: 90:f4:47:a5:d0:a1:f7:b0:16:f9:20:08:de:c5:3d:c2:17:fd: 8d:3c:39:89:5b:2a:88:58:43:37:f3:f5:f8:30:fc:3d:7e:fc: 79:e2:be:83:8f:1a:0c:cf:71:be:c9:e3:a3:61:84:1d:5f:6a: ae:34:bf:82:52:04:e2:53:66:d3:85:68:90:29:f5:87:d1:b7: fd:b2:dc:c3:9c:e1:5f:a3:81:aa:82:df:4f:23:dc:65:b4:29: 43:71:b9:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5lv1Eam29LvgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTNjMmE1ZjUtMDY1Yy00YmRiLTk4YmUtMjUwMWJkZjViMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzNfIHcuxVBZK8Cz+RZEeQq1xx0q4qPbQlPw zrv7hde+Xnrui0rDkwJCKDZouPuwEqRssD5rfvhJRdMfr+9cqS4/5SNvmNvpO5RN qQBRXx+tEBeRJI93Mw8QNyJ3hEHG6VQVq/PUcPgv6adMUUogoqzYpCPNBFUFAAzA rBOAelV7GKeuojbfzaIvZy6g4KMAJqQLWAw180hwfHnDbsbXut5Wz+GeXAqxPxTH V+MnwTl3HWqFp4CjUYuidyGFVucPATz8mR56Wcgx2Cje76Wbl3AR2ppbyOSNgNkj nF6NneZKMzsubjst926WdIf9Qprq0NBXesGfo+DDeOhitXJONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoNwY9WbyxcMkJ83ki4BQn/vhe8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDEyNmUxYWItNzhjNC0z YTMxLWIxNGEtZTBjZWQzMzU2YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHedfNtvdcT0rvywiOAAetHB3ySqLu1UPrb/LdvHhQRB4HUzIiPidSKO ILc5FD9g54vSKgUPy3RXzNRQmuWKt8FBne2nU2dnJutjEaQrZX2DyZ4Pj8SVpmDl xMuYDF/dccihHkMxe41t2XQ/Vq7/+WZKVtJ9D40E0rRn6V46q2zL54sp1OipqR7p bpDoTd3sgvtex8Ab5ANKQ3SnEK4s6Y6vjJD0R6XQofewFvkgCN7FPcIX/Y08OYlb KohYQzfz9fgw/D1+/HnivoOPGgzPcb7J46NhhB1faq40v4JSBOJTZtOFaJAp9YfR t/2y3MOc4V+jgaqC308j3GW0KUNxuTo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:04 2025 by rpki-client