$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5dd603e-29a2-3350-a37c-5b694ad9362b.roa File: f5dd603e-29a2-3350-a37c-5b694ad9362b.roa (raw, json) Hash identifier: UknDxpAS4VD/CvRvJxBmuS++LpULCCqd/QG7gJ3zYYk= Subject key identifier: 7F:25:23:DC:A2:75:AB:47:79:48:53:93:82:D1:F1:B4:26:4C:6B:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A1F05C291B4BBED8BB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5dd603e-29a2-3350-a37c-5b694ad9362b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.238.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a1:f0:5c:29:1b:4b:be:d8:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1360c620-f3c5-4d05-b9bd-4b1cbd6f328b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:39:a9:bf:d5:b3:f2:63:92:73:80:26:ee: ef:54:93:8f:8b:97:d2:ff:35:7c:c8:98:58:c4:6c: 80:2b:7b:f4:9a:27:e0:22:f5:25:15:0c:b0:6d:70: 5d:a1:1e:92:d9:47:71:03:5f:d4:19:e6:6d:b2:19: 3f:2d:11:de:2d:8d:a0:f8:8a:89:fc:41:e1:ab:62: 42:94:cd:3d:95:5b:fa:72:7b:e8:5c:99:f2:2a:9c: 05:38:12:15:0b:71:b6:83:da:44:5d:a8:ef:25:c7: 6b:c9:a3:a6:15:53:3b:69:ab:47:64:4d:a0:68:c7: 7e:48:65:ac:f4:d4:18:77:4e:f5:80:c9:1d:e9:01: 0f:27:37:da:3f:b9:e3:04:cf:03:1c:52:0f:2f:ef: e3:25:cf:83:06:f7:f0:b7:d8:ca:8c:1d:00:ce:be: 9f:04:85:1c:f1:08:90:6f:a1:c2:3b:f6:cf:fe:88: a3:0b:c9:4d:8a:e0:a0:53:e3:2b:17:f9:21:59:36: bc:7f:b7:f6:7c:35:49:f7:a5:bc:3c:89:72:53:80: 17:6d:3b:e1:82:62:d2:7b:e1:7b:75:1e:70:b6:e4: 34:f3:df:cc:5e:ba:6c:7b:c6:83:72:84:67:03:7b: 3f:04:79:a7:0c:88:f1:75:4b:f2:40:23:a4:67:12: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:25:23:DC:A2:75:AB:47:79:48:53:93:82:D1:F1:B4:26:4C:6B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5dd603e-29a2-3350-a37c-5b694ad9362b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cd:31:e8:8a:ee:68:e0:f5:f5:75:85:48:2c:94:d1:07:56: b1:3f:4c:f9:14:f4:11:5e:1d:09:b7:e7:fa:e9:63:4b:4a:d7: 6e:13:8d:fc:e9:07:a7:90:53:93:01:a3:b5:5c:2a:a1:61:04: 72:3b:48:60:d3:2b:ef:98:ef:ff:c8:b3:2f:92:ee:98:d7:ef: 19:d4:13:75:43:3d:b2:98:a7:58:ab:3d:d8:f0:65:e1:9e:ec: dc:f2:0e:5e:b7:63:6c:be:0a:59:d7:e2:10:7a:bb:8e:f6:2b: ba:b9:f2:2c:89:91:39:57:53:c9:12:54:63:23:20:63:7d:d5: af:ac:43:9f:a2:c3:8f:39:d7:cc:70:1d:2a:c5:61:fd:50:d6: ed:4f:f6:28:78:22:d2:c3:00:c2:dd:53:90:ea:8a:24:4c:79: 99:27:57:e2:11:d8:03:1d:d6:61:89:7b:ab:44:3e:fa:45:7b: ec:0c:4f:31:eb:fc:26:90:6e:89:f9:93:d8:ed:4f:5b:f1:da: e8:fe:13:66:47:ae:9b:f6:36:0a:5f:02:c3:47:f8:06:c5:52: 2b:73:9f:33:e7:ce:21:81:8a:29:99:59:0a:13:16:3f:2f:c1: 8d:f6:2d:5e:88:06:d2:72:7a:aa:20:c1:18:a3:b3:c4:86:c8: 47:72:9e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6HwXCkbS77Yu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTM2MGM2MjAtZjNjNS00ZDA1LWI5YmQtNGIxY2JkNmYzMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQs5qb/Vs/JjknOAJu7vVJOPi5fS/zV8yJhY xGyAK3v0mifgIvUlFQywbXBdoR6S2UdxA1/UGeZtshk/LRHeLY2g+IqJ/EHhq2JC lM09lVv6cnvoXJnyKpwFOBIVC3G2g9pEXajvJcdryaOmFVM7aatHZE2gaMd+SGWs 9NQYd071gMkd6QEPJzfaP7njBM8DHFIPL+/jJc+DBvfwt9jKjB0Azr6fBIUc8QiQ b6HCO/bP/oijC8lNiuCgU+MrF/khWTa8f7f2fDVJ96W8PIlyU4AXbTvhgmLSe+F7 dR5wtuQ089/MXrpse8aDcoRnA3s/BHmnDIjxdUvyQCOkZxJ11QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8lI9yidatHeUhTk4LR8bQmTGs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjVkZDYwM2UtMjlhMi0z MzUwLWEzN2MtNWI2OTRhZDkzNjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbNMeiK7mjg9fV1hUgslNEHVrE/TPkU9BFeHQm35/rpY0tK124Tjfzp B6eQU5MBo7VcKqFhBHI7SGDTK++Y7//Isy+S7pjX7xnUE3VDPbKYp1irPdjwZeGe 7NzyDl63Y2y+ClnX4hB6u472K7q58iyJkTlXU8kSVGMjIGN91a+sQ5+iw48518xw HSrFYf1Q1u1P9ih4ItLDAMLdU5DqiiRMeZknV+IR2AMd1mGJe6tEPvpFe+wMTzHr /CaQbon5k9jtT1vx2uj+E2ZHrpv2NgpfAsNH+AbFUitznzPnziGBiimZWQoTFj8v wY32LV6IBtJyeqogwRijs8SGyEdynkM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:17 2025 by rpki-client