$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6863ad1-4b00-3b45-81fa-8dfd82a2328f.roa File: e6863ad1-4b00-3b45-81fa-8dfd82a2328f.roa (raw, json) Hash identifier: +HSLQdOAQdGXz/VAZVuCdcPxTEMplfUwptDoErG7M58= Subject key identifier: 31:86:34:E2:9B:CA:E9:4D:94:50:40:1E:B3:F9:10:CC:F2:E0:94:B4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679792DDADEA3D6D60462800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6863ad1-4b00-3b45-81fa-8dfd82a2328f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.239.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:92:dd:ad:ea:3d:6d:60:46:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=7288cfe8-8a69-42b1-b7bb-4dabba0dbf07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:e0:e5:37:9e:f0:b7:21:ab:ab:cd:26:75: 40:97:e2:fa:db:f4:35:61:42:48:69:20:fe:8e:ac: 26:12:72:7b:34:c6:d4:8b:d5:9b:b8:8d:6a:5b:f6: b0:4e:7b:12:0d:db:5c:be:0e:ab:35:43:00:54:7b: e5:ad:0d:7f:04:b9:03:cd:9f:a4:b6:c5:5b:ca:bd: b6:9e:49:00:5f:43:b1:4a:c3:fa:8e:b8:0c:a6:27: 8d:5f:11:bb:94:65:01:43:e4:01:dc:8a:c2:82:2c: 97:ac:52:79:03:a1:65:7e:b3:68:09:87:f4:30:f0: 2b:fe:c4:eb:85:c5:23:26:e2:a1:8d:c1:f8:c3:ce: 78:f2:d7:ab:45:fd:85:c7:b2:16:f0:d6:a5:48:03: d3:78:76:ea:21:58:15:90:bc:13:f8:83:42:54:c6: 57:34:10:a3:6b:fc:b5:a1:84:23:50:2d:2e:c2:1f: 16:de:31:b6:34:9c:f9:3b:96:15:4d:6b:00:de:45: 8a:e2:9d:79:cc:b5:d5:6b:5f:de:1c:e6:0a:e3:95: b8:05:0e:93:d6:82:6c:b5:d6:dd:c7:29:ac:5e:a3: 74:8e:94:87:89:94:d8:fa:55:cb:6e:17:68:52:34: 4e:aa:cf:26:63:03:32:bf:41:ff:cc:a2:ac:42:24: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:86:34:E2:9B:CA:E9:4D:94:50:40:1E:B3:F9:10:CC:F2:E0:94:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6863ad1-4b00-3b45-81fa-8dfd82a2328f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:61:a8:58:92:82:47:21:c8:8e:03:2a:e7:bd:c1:9a:46:f8: 7f:06:a1:8e:5f:33:0c:54:97:07:0b:d1:4e:40:b1:f3:0b:44: 9d:cd:39:35:85:b5:9b:05:2e:12:b1:41:bb:00:3a:2b:b3:52: 28:b1:bc:22:05:c4:f8:cc:fc:4a:a0:64:00:bd:79:3d:ad:be: 17:fb:e7:2f:af:14:29:1f:08:92:e0:05:7c:8c:aa:7c:4b:ce: ae:af:a5:c2:b2:34:1d:24:30:41:8c:6d:11:a2:30:1c:ba:68: 6a:d4:dd:86:47:da:bc:5b:5b:04:76:5f:de:ad:9e:3d:ce:dc: e6:31:f3:87:87:da:10:47:81:45:56:14:f1:32:b2:ff:ef:79: 7c:b3:03:4f:e7:a0:2c:ae:f1:57:a4:31:59:d9:40:30:f9:2b: 4c:9b:94:19:fa:df:1f:5e:a1:a7:ac:bc:34:0c:4c:60:5f:76: e7:d6:92:2a:9e:cb:70:9b:6e:15:97:64:38:f5:71:84:e4:b1: 9c:51:3c:df:59:4e:a8:32:59:4d:f0:6e:31:cb:2a:26:0a:45: 7c:62:3f:cf:cc:15:6c:c1:8a:07:dc:eb:5a:1f:ad:f9:58:6a: 33:65:36:67:52:b5:af:b9:69:6e:e9:7e:33:83:15:c7:42:b0: 4c:bc:8f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5Ldreo9bWBGKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzI4OGNmZTgtOGE2OS00MmIxLWI3YmItNGRhYmJhMGRiZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Xg5Tee8Lchq6vNJnVAl+L62/Q1YUJIaSD+ jqwmEnJ7NMbUi9WbuI1qW/awTnsSDdtcvg6rNUMAVHvlrQ1/BLkDzZ+ktsVbyr22 nkkAX0OxSsP6jrgMpieNXxG7lGUBQ+QB3IrCgiyXrFJ5A6FlfrNoCYf0MPAr/sTr hcUjJuKhjcH4w8548terRf2Fx7IW8NalSAPTeHbqIVgVkLwT+INCVMZXNBCja/y1 oYQjUC0uwh8W3jG2NJz5O5YVTWsA3kWK4p15zLXVa1/eHOYK45W4BQ6T1oJstdbd xymsXqN0jpSHiZTY+lXLbhdoUjROqs8mYwMyv0H/zKKsQiQLmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGGNOKbyulNlFBAHrP5EMzy4JS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTY4NjNhZDEtNGIwMC0z YjQ1LTgxZmEtOGRmZDgyYTIzMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI++QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZhqFiSgkchyI4DKue9wZpG+H8GoY5fMwxUlwcL0U5AsfMLRJ3NOTWF tZsFLhKxQbsAOiuzUiixvCIFxPjM/EqgZAC9eT2tvhf75y+vFCkfCJLgBXyMqnxL zq6vpcKyNB0kMEGMbRGiMBy6aGrU3YZH2rxbWwR2X96tnj3O3OYx84eH2hBHgUVW FPEysv/veXyzA0/noCyu8VekMVnZQDD5K0yblBn63x9eoaesvDQMTGBfdufWkiqe y3CbbhWXZDj1cYTksZxRPN9ZTqgyWU3wbjHLKiYKRXxiP8/MFWzBigfc61ofrflY ajNlNmdSta+5aW7pfjODFcdCsEy8j9c= -----END CERTIFICATE-----Generated at Mon Oct 20 04:35:28 2025 by rpki-client