$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65a89f8b-00b4-3e57-a599-1d4aab326ddc.roa File: 65a89f8b-00b4-3e57-a599-1d4aab326ddc.roa (raw, json) Hash identifier: byX5eo6bKGXQEbvBWjV3UC9MZ0Pfr7N4SIglwYLcrGg= Subject key identifier: 50:A9:EA:D1:84:17:3E:9F:BE:A6:79:41:5C:D8:73:64:AC:0C:9B:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67975527C9D2DBDFC66C8100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65a89f8b-00b4-3e57-a599-1d4aab326ddc.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.239.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:55:27:c9:d2:db:df:c6:6c:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=63b9d187-fe04-4dfc-9ea1-2fd6c076ccc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:64:91:e0:b3:dd:d9:98:b5:96:45:02:e6: 58:05:39:14:15:46:38:4e:6f:fc:4c:47:79:20:28: 34:5b:d5:0d:cb:00:db:36:48:0a:07:fb:35:7d:29: e7:a7:d0:44:2a:85:44:94:40:15:05:4b:b8:e7:58: 9a:5b:c9:5e:da:1f:c0:f3:7f:13:47:c7:d8:14:1e: 5c:0d:71:9c:e3:cf:0f:84:35:a3:c9:af:3d:ea:9f: 3b:c9:3b:f9:4e:16:69:a4:a9:87:71:0d:c0:14:a9: d8:03:48:4e:91:e9:57:9d:94:26:76:ef:72:af:78: d8:47:15:e5:1f:e9:46:32:93:28:a0:20:3c:45:ce: 42:df:ae:66:ea:7e:80:26:14:98:20:59:dd:8c:bb: 57:ea:f2:87:a5:b9:09:2d:32:47:5c:46:6d:55:c6: 87:09:7d:32:f1:f1:1d:a0:b0:19:fc:bd:8d:32:04: df:df:35:c5:f5:c4:e4:28:04:5f:72:3d:46:30:fa: ce:0b:63:d0:59:6c:65:06:a9:cc:42:a5:01:ce:2e: 2d:e0:d6:f6:67:b3:50:c3:df:cf:c5:d2:ea:7d:d8: d2:1c:24:07:d7:b0:4e:da:b1:d0:66:be:5c:75:be: 1b:0a:2a:91:ae:9f:df:cd:7c:64:53:fa:9c:4a:c7: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A9:EA:D1:84:17:3E:9F:BE:A6:79:41:5C:D8:73:64:AC:0C:9B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65a89f8b-00b4-3e57-a599-1d4aab326ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:25:c4:d4:1e:b8:98:92:68:14:d6:7e:5c:f5:c8:fa:9c:dd: eb:ef:cf:2e:be:7e:a6:8c:e3:b7:33:47:f9:9d:4a:31:ab:ec: f2:03:e5:5c:c7:45:18:9f:46:5e:85:cb:f1:4e:f4:22:39:2e: 7e:93:e9:e5:e7:98:d9:2c:29:7f:c1:83:13:25:66:9e:49:d7: 81:41:57:49:c7:e2:b9:77:e9:5d:a8:e9:75:52:58:d8:eb:67: 67:4f:f1:a8:f1:2d:47:30:5d:f8:9e:56:32:99:16:ae:6d:1d: ec:06:e2:ad:20:e4:36:77:74:d3:e6:bd:61:41:87:fc:a6:ad: 7c:3d:7b:21:c7:5d:b1:2c:0d:69:ea:e5:b5:fc:76:76:0e:95: 07:cf:5e:3d:e8:31:22:74:c9:5a:0a:92:32:12:9a:7e:64:91: f5:c1:32:72:16:63:22:0f:89:ba:df:76:e2:4f:c7:b1:1e:43: d5:7c:c6:d5:58:90:3d:5d:4f:51:b1:b6:92:39:99:63:8c:f0: d2:4e:ed:ca:13:b1:a0:e9:6a:93:22:fa:80:9b:06:fb:01:59: d8:2c:1c:ea:ed:67:10:50:81:bb:a9:68:05:48:18:8a:49:42: cd:86:e7:b7:d4:d3:0f:de:25:40:6d:f2:7d:7e:83:8a:e0:75: fe:80:dd:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1UnydLb38ZsgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjNiOWQxODctZmUwNC00ZGZjLTllYTEtMmZkNmMwNzZjY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm1kkeCz3dmYtZZFAuZYBTkUFUY4Tm/8TEd5 ICg0W9UNywDbNkgKB/s1fSnnp9BEKoVElEAVBUu451iaW8le2h/A838TR8fYFB5c DXGc488PhDWjya896p87yTv5ThZppKmHcQ3AFKnYA0hOkelXnZQmdu9yr3jYRxXl H+lGMpMooCA8Rc5C365m6n6AJhSYIFndjLtX6vKHpbkJLTJHXEZtVcaHCX0y8fEd oLAZ/L2NMgTf3zXF9cTkKARfcj1GMPrOC2PQWWxlBqnMQqUBzi4t4Nb2Z7NQw9/P xdLqfdjSHCQH17BO2rHQZr5cdb4bCiqRrp/fzXxkU/qcSseGNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCp6tGEFz6fvqZ5QVzYc2SsDJuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjVhODlmOGItMDBiNC0z ZTU3LWE1OTktMWQ0YWFiMzI2ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI++gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHclxNQeuJiSaBTWflz1yPqc3evvzy6+fqaM47czR/mdSjGr7PID5VzH RRifRl6Fy/FO9CI5Ln6T6eXnmNksKX/BgxMlZp5J14FBV0nH4rl36V2o6XVSWNjr Z2dP8ajxLUcwXfieVjKZFq5tHewG4q0g5DZ3dNPmvWFBh/ymrXw9eyHHXbEsDWnq 5bX8dnYOlQfPXj3oMSJ0yVoKkjISmn5kkfXBMnIWYyIPibrfduJPx7EeQ9V8xtVY kD1dT1GxtpI5mWOM8NJO7coTsaDpapMi+oCbBvsBWdgsHOrtZxBQgbupaAVIGIpJ Qs2G57fU0w/eJUBt8n1+g4rgdf6A3ec= -----END CERTIFICATE-----Generated at Tue Nov 4 21:14:41 2025 by rpki-client