$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa69231b-f713-30e7-8c8e-1ccf8dbb0276.roa File: fa69231b-f713-30e7-8c8e-1ccf8dbb0276.roa (raw, json) Hash identifier: rlmqzm6mAEADhX5kkFBURsf4no5lANrrP8yUijOdMJI= Subject key identifier: 15:97:82:8C:5E:A1:47:5C:79:B0:DE:78:B0:58:84:30:E4:29:37:7B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A528EAE24B211F0B0F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa69231b-f713-30e7-8c8e-1ccf8dbb0276.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.222.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a5:28:ea:e2:4b:21:1f:0b:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=14c0a633-950c-443d-b48f-62122527fe18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:b8:59:6d:51:42:a8:51:3e:62:2c:81:64: c3:d3:f9:ab:59:64:20:fa:3c:ea:6e:d1:08:8f:e4: 58:a1:cb:1e:86:52:01:af:bb:f0:0c:98:4d:de:d8: da:42:45:ff:f7:a3:7a:85:82:a5:46:bd:49:69:08: 82:70:44:e4:6e:d8:67:72:40:bc:6a:ca:84:fc:4f: fa:b3:c1:3a:ca:77:e6:cf:c6:98:49:c5:b4:31:fa: 9b:ba:51:81:45:22:cd:e7:69:c8:1e:98:b1:9f:f5: 26:9a:c3:ab:2b:46:5b:a0:e7:ea:71:9e:d2:a4:ad: 3e:d3:f6:22:14:27:6a:2f:b2:5e:9e:65:41:ce:ca: 37:8a:08:94:fc:ba:33:b8:76:f6:bb:a0:77:9c:17: 04:31:cc:0a:bd:b3:c9:df:93:ee:4d:95:ed:d7:7d: 0b:e8:97:70:23:08:0e:2c:3a:77:c9:83:b5:93:43: 3f:4c:4b:f0:6a:fb:85:df:32:b0:c7:c9:26:f9:75: 7c:c8:c4:db:3f:6a:72:ed:0a:75:b8:d8:e3:08:5c: 9e:e6:01:bc:90:67:65:f1:47:b6:ad:f1:f1:ee:a2: ed:82:be:8f:43:c2:e7:2a:84:0c:40:72:de:40:9c: 4e:22:ee:5b:5d:30:91:54:90:71:87:75:08:36:9b: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:97:82:8C:5E:A1:47:5C:79:B0:DE:78:B0:58:84:30:E4:29:37:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa69231b-f713-30e7-8c8e-1ccf8dbb0276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b6:23:d1:b0:81:87:d8:e9:d1:08:55:e4:be:57:b4:18:f4: ba:c7:91:b1:72:ca:5e:58:1f:43:bd:89:b4:cd:ef:57:d2:f9: 15:2e:11:0a:51:ba:45:b9:9b:d4:d3:df:5d:85:0b:45:1c:97: ae:9f:d8:84:57:09:8d:94:4c:ad:ba:9b:41:55:62:fc:38:a6: 06:67:e4:1f:db:a2:13:20:bf:46:68:31:53:ec:6d:91:55:34: 11:6d:c0:4a:b9:d5:09:70:11:ec:6c:8f:d5:5e:2c:fa:3a:ce: 41:49:dc:7f:1c:16:95:4f:ee:7e:04:81:bf:ef:66:2e:66:38: a8:f1:69:01:82:3c:2f:2d:87:c1:e2:12:1d:14:fc:04:cd:bf: ae:0e:5c:2f:c1:9a:ad:57:e4:c0:e3:22:ec:f1:0e:c7:75:eb: 36:2c:22:f4:32:4a:8d:b2:f4:4f:56:3c:ff:8f:0d:86:ee:76: 0e:eb:9c:eb:47:dd:dd:2b:ad:9f:10:a9:6f:69:17:14:b1:a7: ad:9d:8b:c0:b8:6d:39:9a:1a:03:52:6f:11:07:75:96:fb:0b: b7:cb:92:48:31:cb:14:66:d1:b2:4e:87:84:90:ab:27:df:c0: 2e:2f:6c:94:32:57:90:22:d1:b4:cf:0d:2a:c2:0e:72:82:58: d9:94:1b:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6Uo6uJLIR8LD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTRjMGE2MzMtOTUwYy00NDNkLWI0OGYtNjIxMjI1MjdmZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWO4WW1RQqhRPmIsgWTD0/mrWWQg+jzqbtEI j+RYocsehlIBr7vwDJhN3tjaQkX/96N6hYKlRr1JaQiCcETkbthnckC8asqE/E/6 s8E6ynfmz8aYScW0MfqbulGBRSLN52nIHpixn/UmmsOrK0ZboOfqcZ7SpK0+0/Yi FCdqL7JenmVBzso3igiU/LozuHb2u6B3nBcEMcwKvbPJ35PuTZXt130L6JdwIwgO LDp3yYO1k0M/TEvwavuF3zKwx8km+XV8yMTbP2py7Qp1uNjjCFye5gG8kGdl8Ue2 rfHx7qLtgr6PQ8LnKoQMQHLeQJxOIu5bXTCRVJBxh3UINpuu0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWXgoxeoUdcebDeeLBYhDDkKTd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmE2OTIzMWItZjcxMy0z MGU3LThjOGUtMWNjZjhkYmIwMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI94AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO2I9GwgYfY6dEIVeS+V7QY9LrHkbFyyl5YH0O9ibTN71fS+RUuEQpR ukW5m9TT312FC0Ucl66f2IRXCY2UTK26m0FVYvw4pgZn5B/bohMgv0ZoMVPsbZFV NBFtwEq51QlwEexsj9VeLPo6zkFJ3H8cFpVP7n4Egb/vZi5mOKjxaQGCPC8th8Hi Eh0U/ATNv64OXC/Bmq1X5MDjIuzxDsd16zYsIvQySo2y9E9WPP+PDYbudg7rnOtH 3d0rrZ8QqW9pFxSxp62di8C4bTmaGgNSbxEHdZb7C7fLkkgxyxRm0bJOh4SQqyff wC4vbJQyV5Ai0bTPDSrCDnKCWNmUG+Y= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:07 2025 by rpki-client