$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa File: fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa (raw, json) Hash identifier: 7xN9XRWCImoSFK50ufDx4AuHew+ZBXOYExOXoBLiBY8= Subject key identifier: F4:6D:BE:FF:F9:35:D7:3B:3F:80:28:BD:CB:54:DA:3D:B3:59:18:70 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797815E54CEE1463264C100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.228.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:81:5e:54:ce:e1:46:32:64:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a7bf4fe5-403a-4154-abda-26a45ee71e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:f2:e8:a9:59:52:53:b8:e5:5a:0c:ec:ef: ea:cd:61:70:0b:fd:b8:96:9e:36:04:6d:85:f4:b3: 25:78:8c:20:cc:68:58:cf:f1:d5:49:32:38:a5:ba: 9b:b3:b8:b4:e6:9f:2b:8e:51:8c:da:54:1e:fe:e4: 9b:50:75:bf:a8:29:ba:c8:81:50:a2:27:d3:9c:aa: c9:2e:e3:f6:87:a9:b1:cf:b7:8d:4f:74:aa:c8:4e: f0:0c:b6:e4:a9:2c:83:0b:a8:eb:52:8f:5e:0a:de: f9:a7:0f:b7:72:94:27:2b:38:6d:15:ea:ad:58:5b: f3:a5:b6:54:3b:b8:79:70:ee:37:7f:77:80:fe:29: 1e:40:b2:fd:20:c9:25:f8:a8:f1:a3:b1:9b:b5:cd: ba:48:4f:96:e2:45:73:d9:bd:71:0e:5b:54:55:38: 67:b7:be:b9:f5:f2:f4:21:28:78:9e:58:da:72:83: 8c:8e:b6:ae:b9:20:1e:d0:fe:38:44:c0:4f:bb:2f: 4f:ea:ed:3e:9c:98:5f:d2:d6:1d:08:bf:b3:ac:c7: fc:21:24:82:20:43:c3:a0:9c:86:e6:79:fe:d4:88: a5:3b:a4:bb:a6:8a:41:07:f3:9d:24:f7:9e:1e:a5: 68:1d:e0:0b:cf:ba:34:f6:74:89:d0:e0:4a:11:e2: b8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6D:BE:FF:F9:35:D7:3B:3F:80:28:BD:CB:54:DA:3D:B3:59:18:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e3:95:f0:ec:02:96:be:fa:ec:09:f9:e6:60:e9:5b:56:3d: 06:90:69:08:75:8b:bf:64:72:28:00:83:44:2c:b4:44:7b:94: e6:71:89:26:c8:f1:1d:a3:ed:5f:4f:12:ed:b9:b6:a0:75:58: 12:fa:d6:eb:cf:26:bc:3b:b1:00:75:e0:e4:b4:97:b0:2e:53: 3c:38:4f:85:8a:31:9a:1e:62:fb:0e:5e:d4:ad:a1:cd:73:a9: 46:70:96:7a:d1:5e:70:6b:01:2d:b1:ee:14:42:a8:17:b1:52: d7:2d:1a:ee:ca:2c:80:75:e2:c5:72:f8:7c:f4:d8:0b:b3:6e: 21:9a:37:24:e4:21:ff:54:c0:34:90:8b:67:53:17:de:50:8f: 31:9c:05:5c:76:e7:b3:db:ad:4d:2c:00:1c:7c:72:cd:31:34: 24:b7:7f:02:65:a2:20:4d:cd:7c:c6:7b:eb:b8:f2:28:dd:3a: d2:29:c4:5d:57:a4:2b:e3:2e:d4:52:da:e8:91:64:9c:51:46: 50:7a:08:58:5d:da:ae:e9:82:42:6e:ec:8c:a4:cf:e0:8b:3d: bc:bb:a6:54:98:5e:5d:96:24:85:11:f1:ee:6b:37:f9:c4:d7: 87:d4:2f:9c:01:1b:58:6f:d0:3d:78:da:95:c1:65:22:e0:ed: b6:34:a0:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4FeVM7hRjJkwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTdiZjRmZTUtNDAzYS00MTU0LWFiZGEtMjZhNDVlZTcxZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynny6KlZUlO45VoM7O/qzWFwC/24lp42BG2F 9LMleIwgzGhYz/HVSTI4pbqbs7i05p8rjlGM2lQe/uSbUHW/qCm6yIFQoifTnKrJ LuP2h6mxz7eNT3SqyE7wDLbkqSyDC6jrUo9eCt75pw+3cpQnKzhtFeqtWFvzpbZU O7h5cO43f3eA/ikeQLL9IMkl+Kjxo7Gbtc26SE+W4kVz2b1xDltUVThnt7659fL0 ISh4nljacoOMjrauuSAe0P44RMBPuy9P6u0+nJhf0tYdCL+zrMf8ISSCIEPDoJyG 5nn+1IilO6S7popBB/OdJPeeHqVoHeALz7o09nSJ0OBKEeK4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRtvv/5Ndc7P4AovctU2j2zWRhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmEyNzFhMDUtM2U2OS0z MGNlLTgzZTEtYjNiM2FiMjkzZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITjlfDsApa++uwJ+eZg6VtWPQaQaQh1i79kcigAg0QstER7lOZxiSbI 8R2j7V9PEu25tqB1WBL61uvPJrw7sQB14OS0l7AuUzw4T4WKMZoeYvsOXtStoc1z qUZwlnrRXnBrAS2x7hRCqBexUtctGu7KLIB14sVy+Hz02AuzbiGaNyTkIf9UwDSQ i2dTF95QjzGcBVx257PbrU0sABx8cs0xNCS3fwJloiBNzXzGe+u48ijdOtIpxF1X pCvjLtRS2uiRZJxRRlB6CFhd2q7pgkJu7Iykz+CLPby7plSYXl2WJIUR8e5rN/nE 14fUL5wBG1hv0D142pXBZSLg7bY0oO0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:03 2025 by rpki-client