$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8d963cf-b5a1-3542-a11e-019ff28d3fba.roa File: f8d963cf-b5a1-3542-a11e-019ff28d3fba.roa (raw, json) Hash identifier: fSxA0zW3iFIwX3I2COf4DBJGnbKKZiVBQ/E0hV8o5Rc= Subject key identifier: 33:55:D4:85:EC:7E:65:B4:E6:55:EF:DE:61:45:81:60:FE:AC:91:06 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B42D7859DA763CF28700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8d963cf-b5a1-3542-a11e-019ff28d3fba.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.185.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b4:2d:78:59:da:76:3c:f2:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=65c5c2f4-f471-4f3c-adc1-e4c1f19472e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:c8:6e:32:f2:9b:64:0a:5e:e1:42:5a:e2: 1a:b0:60:55:1d:1f:36:df:0d:c1:ae:02:f1:9b:fb: 83:bd:78:3e:d6:7a:64:7b:d5:a8:c3:45:fc:47:7c: 46:96:43:bb:66:58:c4:7b:e2:20:6f:eb:8e:91:64: 3b:8f:20:f3:1a:01:74:62:d1:f5:be:4a:36:d7:f6: 00:e1:d1:c4:ed:7f:94:76:1e:ae:2b:05:d4:00:29: 13:7b:c8:41:32:62:c3:9d:4b:dc:22:9e:fe:bf:78: 0b:92:88:49:95:68:4f:42:9e:f3:85:43:92:a2:70: df:65:dc:20:fb:da:41:1f:4a:7e:32:76:e3:3f:49: 19:82:bf:13:8c:c8:b3:3e:f5:56:e9:4d:15:96:39: 7b:b7:1b:a8:a3:40:28:56:21:ef:f4:bb:06:7c:69: 3b:09:aa:80:be:09:bb:9d:96:05:9d:d1:68:a5:72: 91:8c:b7:8d:d2:96:0e:66:e0:34:63:b6:50:89:e4: 13:29:6b:61:74:9b:ce:25:64:64:5d:13:58:c4:26: 98:ff:68:66:9e:51:77:06:ea:71:cd:92:88:b9:7d: 9d:22:4d:e9:a5:13:e4:f3:f1:9c:10:f9:8b:16:1a: 8b:5b:0d:78:40:99:40:1b:3e:b6:c0:c9:dc:81:e5: 33:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:55:D4:85:EC:7E:65:B4:E6:55:EF:DE:61:45:81:60:FE:AC:91:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8d963cf-b5a1-3542-a11e-019ff28d3fba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.185.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:97:56:27:dd:0d:35:bb:b3:b5:25:f3:ee:23:ec:d1:e2:5b: 4b:25:3d:75:92:cf:8f:b2:df:d9:cc:60:75:8f:43:fe:27:5c: 1a:c3:cd:8d:f1:be:83:bc:26:54:cd:9a:14:62:a0:c4:65:f3: b5:3a:d2:e5:fa:43:5b:e3:b7:d1:6e:c4:23:a9:ff:93:1f:02: 5c:7e:29:22:01:98:d2:05:f6:c4:44:72:c8:d8:08:fa:0e:a3: 54:bf:11:5e:69:a6:16:61:4a:d0:b0:84:a5:f0:bd:b1:ff:35: a2:97:dd:7c:a3:03:5d:1f:c1:76:7a:25:77:97:f9:c0:15:05: d3:3a:25:b2:79:74:a9:da:4e:8a:28:8b:d4:25:42:29:62:9f: 63:2b:2d:3b:b7:3e:a9:bf:41:ba:c0:01:7c:14:dd:c6:66:48: 84:d5:8b:d4:a5:ea:92:3e:6c:5a:c3:70:84:ce:0a:24:2c:4d: 2e:f9:5a:b3:f9:ff:cd:65:a9:cc:64:06:7a:14:37:b0:6d:9a: f2:76:2c:66:c7:ce:98:ac:84:55:ef:3f:3f:b3:5e:98:06:92: 15:f5:7d:80:32:75:12:25:e3:8e:ed:96:16:65:0f:09:41:3e: 5f:b6:e2:42:12:d0:43:b8:fc:18:ad:b1:0b:d5:7e:ad:08:63: 5d:13:ff:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7QteFnadjzyhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjVjNWMyZjQtZjQ3MS00ZjNjLWFkYzEtZTRjMWYxOTQ3MmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprrIbjLym2QKXuFCWuIasGBVHR823w3BrgLx m/uDvXg+1npke9Wow0X8R3xGlkO7ZljEe+Igb+uOkWQ7jyDzGgF0YtH1vko21/YA 4dHE7X+Udh6uKwXUACkTe8hBMmLDnUvcIp7+v3gLkohJlWhPQp7zhUOSonDfZdwg +9pBH0p+MnbjP0kZgr8TjMizPvVW6U0Vljl7txuoo0AoViHv9LsGfGk7CaqAvgm7 nZYFndFopXKRjLeN0pYOZuA0Y7ZQieQTKWthdJvOJWRkXRNYxCaY/2hmnlF3Bupx zZKIuX2dIk3ppRPk8/GcEPmLFhqLWw14QJlAGz62wMncgeUz/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNV1IXsfmW05lXv3mFFgWD+rJEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjhkOTYzY2YtYjVhMS0z NTQyLWExMWUtMDE5ZmYyOGQzZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKXVifdDTW7s7Ul8+4j7NHiW0slPXWSz4+y39nMYHWPQ/4nXBrDzY3x voO8JlTNmhRioMRl87U60uX6Q1vjt9FuxCOp/5MfAlx+KSIBmNIF9sREcsjYCPoO o1S/EV5pphZhStCwhKXwvbH/NaKX3XyjA10fwXZ6JXeX+cAVBdM6JbJ5dKnaTooo i9QlQilin2MrLTu3Pqm/QbrAAXwU3cZmSITVi9Sl6pI+bFrDcITOCiQsTS75WrP5 /81lqcxkBnoUN7BtmvJ2LGbHzpishFXvPz+zXpgGkhX1fYAydRIl447tlhZlDwlB Pl+24kIS0EO4/BitsQvVfq0IY10T/4Q= -----END CERTIFICATE-----Generated at Mon Oct 20 07:36:10 2025 by rpki-client