$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa File: 68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa (raw, json) Hash identifier: 0bCVXtNcVlgJkdJ+Ij/XW47hBE+fQskrHU/wPP+S7B0= Subject key identifier: D3:44:74:B3:FB:A5:B0:2B:9F:5D:5D:DF:6B:7C:40:96:56:D2:B6:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67977D0BE53790B8B1110E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 19527 IP address blocks: 35.206.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:7d:0b:e5:37:90:b8:b1:11:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=dbcd54d2-1ff1-468c-acfe-bba7ca0341f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d6:e6:30:b7:26:d6:e2:61:af:77:7e:f3:8c: 34:7c:d7:c2:b1:78:73:5f:16:62:0c:ef:26:6e:e4: 44:0e:42:36:4a:50:85:41:95:0a:05:83:b4:5b:05: 71:fd:1e:79:d1:36:cb:c6:95:89:a0:5f:47:a0:ce: ff:99:c8:fd:d3:2d:94:41:8f:ca:bc:4a:bf:2e:fc: 74:b2:11:dd:6f:3a:6a:9e:4b:bf:02:a4:e2:db:af: 99:0d:94:6f:82:0d:49:8c:cf:45:13:03:df:bd:00: f1:4c:11:03:60:12:e9:fc:79:77:83:f8:cd:18:ca: 49:83:77:b6:73:c2:d1:15:b0:55:e1:84:0b:22:d3: 84:10:60:19:5a:bc:19:26:b4:95:43:0b:2a:53:38: 62:be:c1:b0:c8:05:f8:94:f7:fe:47:e4:fb:9a:61: 4b:ab:af:ab:f7:e1:75:d7:da:64:37:46:1b:86:70: 42:e6:ba:ee:44:86:0b:3f:cc:75:8b:a4:b1:4a:e4: 3e:ce:2c:f0:05:ab:85:5f:bd:53:10:f9:80:88:93: 39:49:76:b2:bb:bf:af:e3:7a:32:a9:50:96:b2:27: d2:a4:3f:eb:72:21:cd:6d:5a:77:24:dc:c7:ef:cd: e0:96:6d:a6:2e:cf:75:28:b5:99:74:c7:a4:a1:6d: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:44:74:B3:FB:A5:B0:2B:9F:5D:5D:DF:6B:7C:40:96:56:D2:B6:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:bb:70:92:3a:d5:e6:1c:2d:77:a0:6e:7b:19:5c:4b:8d:7c: d4:c5:c0:0e:6b:84:08:15:ee:64:ae:56:82:28:4b:f1:82:e0: 87:4d:d4:54:fb:9d:cc:5f:b9:6b:0b:3e:96:79:f6:8a:ef:44: 3f:a9:65:ac:a0:88:3f:9a:1b:f7:39:c4:e5:a3:ba:4e:1e:0c: 98:7c:01:33:29:2d:04:1e:9a:8f:88:04:c3:95:1d:6d:93:d3: e9:a5:cb:5c:51:24:c5:c3:4a:35:61:21:fd:61:49:bc:ff:57: cf:ca:b9:db:d3:fe:d7:da:a3:3a:aa:d6:93:b3:0b:d2:a6:88: f4:44:e4:72:74:df:4c:44:41:3e:58:98:1d:00:9e:0d:ed:18: 77:d0:72:80:7c:1d:ee:43:b1:a4:41:a5:49:66:e4:4a:b3:d0: 7d:1e:62:e5:14:55:68:7f:31:df:f7:fc:a2:ce:72:4b:c7:71: f5:5e:85:e8:de:35:c8:01:31:a0:93:24:32:df:ca:65:f7:e5: 9f:6d:85:25:38:9e:3e:9c:78:a6:dd:ab:b8:4b:96:9f:1b:c0: 53:46:60:da:ab:cb:9c:79:b9:5a:ec:91:88:66:f8:51:d3:8d: 3f:9a:c9:bf:68:af:e4:8a:35:26:5a:13:10:f3:11:42:ec:b8: 61:0f:38:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl30L5TeQuLERDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGJjZDU0ZDItMWZmMS00NjhjLWFjZmUtYmJhN2NhMDM0MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9bmMLcm1uJhr3d+84w0fNfCsXhzXxZiDO8m buREDkI2SlCFQZUKBYO0WwVx/R550TbLxpWJoF9HoM7/mcj90y2UQY/KvEq/Lvx0 shHdbzpqnku/AqTi26+ZDZRvgg1JjM9FEwPfvQDxTBEDYBLp/Hl3g/jNGMpJg3e2 c8LRFbBV4YQLItOEEGAZWrwZJrSVQwsqUzhivsGwyAX4lPf+R+T7mmFLq6+r9+F1 19pkN0YbhnBC5rruRIYLP8x1i6SxSuQ+zizwBauFX71TEPmAiJM5SXayu7+v43oy qVCWsifSpD/rciHNbVp3JNzH783glm2mLs91KLWZdMekoW2JhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNEdLP7pbArn11d32t8QJZW0rZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjhjMGNjZjEtY2M2Ny0z MTAxLWI3YjctYWM2ZjVkN2YzYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCI84MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG7cJI61eYcLXegbnsZXEuNfNTFwA5rhAgV7mSuVoIoS/GC4IdN1FT7 ncxfuWsLPpZ59orvRD+pZaygiD+aG/c5xOWjuk4eDJh8ATMpLQQemo+IBMOVHW2T 0+mly1xRJMXDSjVhIf1hSbz/V8/KudvT/tfaozqq1pOzC9KmiPRE5HJ030xEQT5Y mB0Ang3tGHfQcoB8He5DsaRBpUlm5Eqz0H0eYuUUVWh/Md/3/KLOckvHcfVeheje NcgBMaCTJDLfymX35Z9thSU4nj6ceKbdq7hLlp8bwFNGYNqry5x5uVrskYhm+FHT jT+ayb9or+SKNSZaExDzEULsuGEPOIQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:43 2025 by rpki-client