$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df69434d-c794-3407-804e-69f0bb2a8ea7.roa File: df69434d-c794-3407-804e-69f0bb2a8ea7.roa (raw, json) Hash identifier: MIQXopldVKUzFF8oastcFWn79iPuQejRW/sy3Evv95Q= Subject key identifier: E2:89:A8:18:C6:8C:E9:D1:90:91:F1:20:D0:A4:9F:87:29:01:FD:3A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797BD6C457508C9E5463740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df69434d-c794-3407-804e-69f0bb2a8ea7.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 35.206.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:bd:6c:45:75:08:c9:e5:46:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=431d0056-84af-4ea5-ae57-f901919a2116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:89:b4:cb:6a:83:50:fc:6a:53:63:2e:87:6f: 5e:63:ba:91:34:ac:1d:60:6a:29:52:65:07:dc:15: 24:ed:50:fc:30:0b:0f:fb:5b:ed:6c:45:98:3e:71: 64:8c:85:8a:2e:ac:aa:d6:95:7d:23:65:88:3c:40: ef:e5:38:3f:37:d8:ae:50:92:7a:06:71:bb:ab:8a: b6:df:11:c8:b9:1e:3d:cb:5c:b0:ad:14:a0:57:70: c8:58:78:e6:d0:4f:fb:5c:9c:e4:35:47:34:d5:60: 66:96:3c:8e:98:d4:0f:8b:5e:62:91:20:0f:b7:b0: f5:91:8f:36:7c:4b:a9:4f:f4:30:b7:aa:f8:68:3b: 5a:16:dd:9c:27:7c:f6:b2:88:34:e7:9d:95:b4:85: 13:51:bd:7a:f5:58:1a:b3:98:31:7f:9d:90:d9:16: e4:80:c3:fe:f0:52:12:e8:2e:f6:f0:3b:92:a4:c4: 05:19:a6:b7:25:41:5a:f7:08:54:27:62:b1:18:0f: a7:8c:07:cf:fc:db:66:44:ec:7b:07:f2:2b:f6:a8: 32:3f:61:4d:fb:6f:15:1e:d8:2f:9b:58:d4:02:95: 34:64:35:bd:d6:95:31:35:c5:ea:84:55:84:e3:38: b9:8f:5b:7c:44:bc:c2:c9:04:3c:6a:f9:09:a8:15: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:89:A8:18:C6:8C:E9:D1:90:91:F1:20:D0:A4:9F:87:29:01:FD:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df69434d-c794-3407-804e-69f0bb2a8ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:10:2c:44:ff:5d:99:0a:c2:53:b0:c3:3d:c3:99:b8:ba:72: e0:4e:5d:56:09:2e:9a:1a:b7:d8:5a:6c:e3:a9:cd:aa:0b:13: b9:b0:d4:ac:b6:f0:63:d3:57:24:19:da:4d:33:d3:8a:a4:af: 40:ad:f8:62:e6:ab:b4:6b:71:f7:80:6c:c0:a1:03:53:fc:f3: 80:44:99:0b:cc:16:52:f0:6b:a6:d6:cb:62:b6:bb:3a:c1:5f: 29:f3:bf:da:62:fc:52:24:30:fe:7e:24:66:07:77:64:24:ef: 10:49:9f:9b:56:9e:c9:e6:2d:74:b8:67:af:45:91:76:dd:49: 22:fa:8f:01:bc:65:a9:1d:91:ed:8f:fa:a4:d5:54:b6:b3:da: 16:57:e7:06:f7:10:fe:17:d8:30:1c:82:e8:16:79:d7:cc:c6: 8e:9b:74:10:a9:40:40:ae:53:1b:50:fb:b1:6e:32:8e:d0:44: e1:62:f1:f5:fa:75:8e:f2:58:2d:03:69:5a:5f:61:0c:ea:ca: 6f:d3:9d:79:1f:f9:97:a1:c6:d5:18:17:0e:30:27:8c:2c:2b: 5b:62:59:9b:02:9f:a1:db:af:43:87:96:d3:23:17:42:da:5c: 15:dd:f2:f7:c2:e7:f3:27:96:2d:5e:cb:df:ff:31:c1:57:0d: a4:0e:3f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl71sRXUIyeVGN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDMxZDAwNTYtODRhZi00ZWE1LWFlNTctZjkwMTkxOWEyMTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4m0y2qDUPxqU2Muh29eY7qRNKwdYGopUmUH 3BUk7VD8MAsP+1vtbEWYPnFkjIWKLqyq1pV9I2WIPEDv5Tg/N9iuUJJ6BnG7q4q2 3xHIuR49y1ywrRSgV3DIWHjm0E/7XJzkNUc01WBmljyOmNQPi15ikSAPt7D1kY82 fEupT/Qwt6r4aDtaFt2cJ3z2sog0552VtIUTUb169Vgas5gxf52Q2RbkgMP+8FIS 6C728DuSpMQFGaa3JUFa9whUJ2KxGA+njAfP/NtmROx7B/Ir9qgyP2FN+28VHtgv m1jUApU0ZDW91pUxNcXqhFWE4zi5j1t8RLzCyQQ8avkJqBXb6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKJqBjGjOnRkJHxINCkn4cpAf06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGY2OTQzNGQtYzc5NC0z NDA3LTgwNGUtNjlmMGJiMmE4ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYQLET/XZkKwlOwwz3Dmbi6cuBOXVYJLpoat9habOOpzaoLE7mw1Ky2 8GPTVyQZ2k0z04qkr0Ct+GLmq7RrcfeAbMChA1P884BEmQvMFlLwa6bWy2K2uzrB Xynzv9pi/FIkMP5+JGYHd2Qk7xBJn5tWnsnmLXS4Z69FkXbdSSL6jwG8Zakdke2P +qTVVLaz2hZX5wb3EP4X2DAcgugWedfMxo6bdBCpQECuUxtQ+7FuMo7QROFi8fX6 dY7yWC0DaVpfYQzqym/TnXkf+ZehxtUYFw4wJ4wsK1tiWZsCn6Hbr0OHltMjF0La XBXd8vfC5/Mnli1ey9//McFXDaQOP1A= -----END CERTIFICATE-----Generated at Sun Oct 19 23:53:08 2025 by rpki-client