$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/31835bef-af03-31a7-b204-b82f834fc6f9.roa File: 31835bef-af03-31a7-b204-b82f834fc6f9.roa (raw, json) Hash identifier: ta/BTGPyC5vhefbR/0COYLGnTrxkf+bBiXTHQEvy+0Q= Subject key identifier: 95:99:9D:9B:7B:E4:6C:F3:DB:DC:14:91:F1:9F:4D:03:A3:37:9A:29 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A980BA39F253211E6130 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/31835bef-af03-31a7-b204-b82f834fc6f9.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.203.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a9:80:ba:39:f2:53:21:1e:61:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=8f828df3-7dec-416c-ba31-557418e1ffd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:c2:f4:d3:b8:53:fd:bc:20:e8:3e:06:93: c6:3f:f4:c2:33:25:f0:99:12:fe:f6:ba:65:84:4d: c6:d2:9f:e0:5f:f7:04:48:b2:99:f2:fb:11:03:ca: ea:29:4b:f0:5a:4b:e0:25:c7:86:3f:bf:0d:de:72: 9b:f2:dc:c4:c0:e6:20:85:3b:8e:cb:22:74:b0:c2: a0:a1:15:a6:01:2c:13:5e:91:33:1f:9a:a0:0e:54: 84:a7:6b:df:37:de:27:b7:00:b2:39:3a:28:b5:f2: 0c:08:c5:5e:13:5e:21:72:b7:cb:27:4e:eb:ed:f0: 43:92:15:12:b8:82:18:9f:d4:5e:48:b3:37:f9:c4: 55:bb:6c:49:84:97:06:b5:ac:6f:e0:b9:d3:b0:59: 33:c1:b8:0b:a0:a6:b0:5d:e6:82:5c:fe:4f:7c:cb: 0f:26:e4:6c:47:5d:bc:59:a6:3e:38:e0:56:82:e0: 96:08:f1:ab:1a:5e:2b:36:fc:13:66:2e:f2:61:5a: c8:18:64:0d:b2:bb:b9:de:76:0e:20:22:4a:6a:38: 44:05:5f:f7:7c:7a:78:5d:4a:23:02:d4:ed:93:a4: 47:9d:bd:4d:74:88:bf:26:4f:19:c1:ca:8c:0e:7d: 52:60:03:3a:f3:df:a3:c8:cc:e3:c2:07:d9:ad:de: 95:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:99:9D:9B:7B:E4:6C:F3:DB:DC:14:91:F1:9F:4D:03:A3:37:9A:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/31835bef-af03-31a7-b204-b82f834fc6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:95:7a:fc:ec:64:14:89:98:22:5a:fc:79:3b:38:c1:85:c3: c0:83:63:cc:f3:3d:e8:8a:c2:a8:22:b8:3b:39:05:8a:91:a9: dd:8b:ca:0d:1d:ee:8b:a9:8a:c1:dc:d5:e2:c8:1c:3c:f1:f9: 86:db:37:4c:06:cb:00:d1:59:80:f8:9a:af:a4:1e:02:97:e0: b7:5f:fe:56:ed:25:0e:6c:3d:b6:57:1a:18:cb:5f:5e:a7:82: 94:f0:cd:92:68:ed:1f:c9:4e:35:9f:a1:c7:93:4a:77:53:e1: 91:1f:df:de:e0:df:36:1e:1e:23:10:a8:cb:c0:bb:36:66:87: 14:ad:f0:6b:83:ae:dc:67:4b:76:7a:14:34:be:39:fe:93:e5: ac:15:31:db:6e:32:9d:ff:01:79:37:24:cd:08:02:85:1b:f6: 75:21:86:b1:99:b4:6a:7c:d2:c6:68:eb:63:56:4f:71:4f:de: 70:26:60:ad:88:51:9f:75:8b:6e:7e:14:41:e2:4b:bc:1e:5b: 2a:f2:a3:ae:1d:85:4e:32:c8:e8:a9:06:04:f0:7b:14:17:6f: 2f:de:95:8a:74:4e:f5:ab:42:08:b0:d9:2e:a7:08:38:dd:88: dc:c5:f0:07:e1:8f:e2:d3:b0:98:84:70:bd:4a:14:7d:46:e9: f1:2c:31:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6mAujnyUyEeYTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OGY4MjhkZjMtN2RlYy00MTZjLWJhMzEtNTU3NDE4ZTFmZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6fC9NO4U/28IOg+BpPGP/TCMyXwmRL+9rpl hE3G0p/gX/cESLKZ8vsRA8rqKUvwWkvgJceGP78N3nKb8tzEwOYghTuOyyJ0sMKg oRWmASwTXpEzH5qgDlSEp2vfN94ntwCyOTootfIMCMVeE14hcrfLJ07r7fBDkhUS uIIYn9ReSLM3+cRVu2xJhJcGtaxv4LnTsFkzwbgLoKawXeaCXP5PfMsPJuRsR128 WaY+OOBWguCWCPGrGl4rNvwTZi7yYVrIGGQNsru53nYOICJKajhEBV/3fHp4XUoj AtTtk6RHnb1NdIi/Jk8ZwcqMDn1SYAM689+jyMzjwgfZrd6VhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWZnZt75Gzz29wUkfGfTQOjN5opMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzE4MzViZWYtYWYwMy0z MWE3LWIyMDQtYjgyZjgzNGZjNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKVevzsZBSJmCJa/Hk7OMGFw8CDY8zzPeiKwqgiuDs5BYqRqd2Lyg0d 7oupisHc1eLIHDzx+YbbN0wGywDRWYD4mq+kHgKX4Ldf/lbtJQ5sPbZXGhjLX16n gpTwzZJo7R/JTjWfoceTSndT4ZEf397g3zYeHiMQqMvAuzZmhxSt8GuDrtxnS3Z6 FDS+Of6T5awVMdtuMp3/AXk3JM0IAoUb9nUhhrGZtGp80sZo62NWT3FP3nAmYK2I UZ91i25+FEHiS7weWyryo64dhU4yyOipBgTwexQXby/elYp0TvWrQgiw2S6nCDjd iNzF8Afhj+LTsJiEcL1KFH1G6fEsMbE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:57 2025 by rpki-client