$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1da0e7-c104-31de-9278-54b4327a6491.roa File: fd1da0e7-c104-31de-9278-54b4327a6491.roa (raw, json) Hash identifier: d3vBF+UfRGERICCiVtJDm8oW4RaFE5rWRtKnyn+v62w= Subject key identifier: 84:03:D6:59:E1:C1:7F:37:74:CD:1F:CD:A0:54:10:D4:38:26:9A:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797AC898F53CF97E1E9CD60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1da0e7-c104-31de-9278-54b4327a6491.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.242.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ac:89:8f:53:cf:97:e1:e9:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=eec13a84-50da-485a-9266-94423be8b679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:3f:4b:1f:77:52:2d:ba:b8:be:4e:f3:5a: c3:3a:c7:d7:10:aa:ce:bc:8f:4f:4a:01:66:d7:55: f4:0a:d3:13:b1:91:09:e2:42:95:f4:40:3f:93:a1: 37:fe:63:83:9f:81:74:1a:0a:49:77:31:3b:ab:27: c5:ab:48:3a:a1:c0:b2:c6:46:e6:c9:5b:2b:18:d9: 29:98:db:c5:a2:00:04:38:e2:bd:fe:68:d2:b1:c9: c9:1e:a5:d5:84:d8:03:9b:42:d4:3a:a5:83:97:8b: 99:53:62:ec:34:4b:9d:08:53:85:c0:b4:fc:26:fc: b8:ec:c2:5f:53:0b:17:eb:fc:6c:53:50:0d:1d:64: 60:c2:ca:5a:88:7d:af:cb:45:51:af:05:81:2a:fc: 6f:08:0d:e6:ec:1a:9f:1d:b2:3d:b3:db:bf:76:08: 90:e2:25:74:69:37:00:26:82:19:40:8b:46:65:eb: b4:47:23:a6:76:d7:ed:ee:30:42:f2:f0:f3:ea:b3: 82:ad:45:43:0e:0c:e5:14:a0:cd:f8:ea:d9:bf:c0: 91:dc:10:df:ce:85:91:f2:30:75:d8:fd:54:c8:10: 54:d2:3e:69:48:79:cc:24:ab:22:4f:f7:7f:d5:b1: 62:f5:e0:34:df:11:cf:56:24:42:8f:85:4d:55:fa: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:03:D6:59:E1:C1:7F:37:74:CD:1F:CD:A0:54:10:D4:38:26:9A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1da0e7-c104-31de-9278-54b4327a6491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.242.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:dc:4a:6f:15:d7:30:87:fc:2d:6d:06:78:d5:9d:95:5f:8a: 2f:f5:68:39:fa:ba:e5:49:f4:ad:cb:76:c8:31:df:e6:17:92: fd:0f:94:a5:e4:54:1a:37:42:9e:25:61:9d:bb:74:f2:d8:bb: dd:3b:93:3b:88:0d:94:46:3d:d2:3c:21:ac:d6:a4:21:04:66: 3c:5f:3f:28:f9:51:9e:e4:54:d9:5e:00:54:6a:5b:e5:b6:6e: a8:43:d6:d6:5a:3c:54:fe:60:2a:d9:da:b9:41:ec:7c:33:05: 47:d0:ff:30:95:cc:27:68:74:5c:5d:44:58:b9:7b:ed:65:b1: e4:49:dc:8a:51:a8:69:c9:3e:28:5a:c1:65:e7:1c:e6:bb:8a: bc:50:3a:6b:5d:a3:3d:70:4b:2b:86:cb:21:aa:0b:42:56:88: 87:8e:22:23:d0:ab:e5:c0:48:32:9b:81:df:92:7c:1c:be:1e: 13:21:6a:e4:b7:d9:10:61:0f:9c:7d:a8:5f:46:51:cf:31:ba: 75:e7:dc:6f:49:b7:4c:9f:49:d0:be:da:15:67:31:86:0b:4a: a1:dd:61:92:41:8c:e4:1a:c3:47:72:dd:14:01:b6:ce:ac:63: 7d:95:a0:14:a7:3e:28:f5:43:88:55:0e:d3:a6:0d:b3:54:88: ae:5f:9c:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6yJj1PPl+HpzWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWVjMTNhODQtNTBkYS00ODVhLTkyNjYtOTQ0MjNiZThiNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqg/Sx93Ui26uL5O81rDOsfXEKrOvI9PSgFm 11X0CtMTsZEJ4kKV9EA/k6E3/mODn4F0GgpJdzE7qyfFq0g6ocCyxkbmyVsrGNkp mNvFogAEOOK9/mjSscnJHqXVhNgDm0LUOqWDl4uZU2LsNEudCFOFwLT8Jvy47MJf UwsX6/xsU1ANHWRgwspaiH2vy0VRrwWBKvxvCA3m7BqfHbI9s9u/dgiQ4iV0aTcA JoIZQItGZeu0RyOmdtft7jBC8vDz6rOCrUVDDgzlFKDN+OrZv8CR3BDfzoWR8jB1 2P1UyBBU0j5pSHnMJKsiT/d/1bFi9eA03xHPViRCj4VNVfpa1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQD1lnhwX83dM0fzaBUENQ4JpqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmQxZGEwZTctYzEwNC0z MWRlLTkyNzgtNTRiNDMyN2E2NDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/LAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7cSm8V1zCH/C1tBnjVnZVfii/1aDn6uuVJ9K3Ldsgx3+YXkv0PlKXk VBo3Qp4lYZ27dPLYu907kzuIDZRGPdI8IazWpCEEZjxfPyj5UZ7kVNleAFRqW+W2 bqhD1tZaPFT+YCrZ2rlB7HwzBUfQ/zCVzCdodFxdRFi5e+1lseRJ3IpRqGnJPiha wWXnHOa7irxQOmtdoz1wSyuGyyGqC0JWiIeOIiPQq+XASDKbgd+SfBy+HhMhauS3 2RBhD5x9qF9GUc8xunXn3G9Jt0yfSdC+2hVnMYYLSqHdYZJBjOQaw0dy3RQBts6s Y32VoBSnPij1Q4hVDtOmDbNUiK5fnPM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:42 2025 by rpki-client