$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afb33790-28b6-3935-8456-9f5dbeb77628.roa File: afb33790-28b6-3935-8456-9f5dbeb77628.roa (raw, json) Hash identifier: FqOD5rwd6oA/1qAM37qXESpaD0ohkfd4E4yLkGzbMgc= Subject key identifier: 5D:3D:91:C0:42:82:B3:DD:FE:F4:29:87:45:37:08:A0:E8:05:4D:10 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B9EEE77C5294C8E387BFA8580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afb33790-28b6-3935-8456-9f5dbeb77628.roa Signing time: Thu 23 Oct 2025 20:45:54 +0000 ROA not before: Thu 23 Oct 2025 20:45:54 +0000 ROA not after: Wed 21 Jan 2026 21:45:54 +0000 asID: 15169 IP address blocks: 35.216.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:ee:77:c5:29:4c:8e:38:7b:fa:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 23 20:45:54 2025 GMT Not After : Jan 21 21:45:54 2026 GMT Subject: CN=1eb3215d-d7b8-4726-a0e4-8fc120923085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:05:60:52:bc:42:42:53:c8:1c:c3:76:84:82: c7:65:69:a2:92:1f:68:60:71:7e:ff:55:23:24:38: 01:bf:a9:56:29:c9:0a:59:9e:64:e8:3c:34:ab:67: 36:e9:ad:7a:8b:4d:30:01:e2:35:d2:5d:5a:a5:28: 59:c1:b5:c3:7d:66:6a:b8:0d:5f:1b:d1:22:ef:e5: 8e:e6:db:71:35:55:70:df:a8:b5:2d:49:8a:c4:63: 37:91:ab:7b:e6:2e:ff:cd:5b:63:dd:98:8c:7e:55: 56:2d:8c:b0:c5:99:fa:b3:2b:1c:56:4c:53:9d:98: cd:8f:cc:f0:c0:02:bf:1f:7f:35:9a:e1:50:cd:e8: 3d:55:85:6b:50:69:17:16:1e:c6:e7:fc:46:cf:1a: 8d:4c:44:fe:3f:b8:a4:ee:6e:ab:1b:1e:66:be:98: 77:cb:b2:94:d2:2b:b7:58:18:1e:03:d1:e5:15:36: e4:3b:44:1b:6d:9f:00:bf:1b:06:84:a7:65:d5:a7: c4:0a:7a:62:74:90:c7:17:09:c1:a5:3e:17:a1:97: 45:06:ec:26:5f:c4:7a:a4:48:18:27:80:2f:73:ea: 0a:ee:ac:c9:55:67:87:d2:85:a3:f2:9c:8b:34:a7: 6d:f6:2f:fd:49:8b:a6:0c:0c:ed:8a:61:ae:f5:2d: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3D:91:C0:42:82:B3:DD:FE:F4:29:87:45:37:08:A0:E8:05:4D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afb33790-28b6-3935-8456-9f5dbeb77628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.216.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:80:c7:69:41:f7:ef:a3:1f:ac:01:47:d0:63:3a:87:81:56: 32:42:18:29:b3:da:8a:63:ee:fa:b6:54:63:cc:93:47:7e:93: 09:5b:53:cf:30:f4:a0:a2:48:44:a6:4c:6f:29:e9:5b:62:2a: fb:63:21:a2:ca:17:28:26:d4:06:c2:7b:a5:c3:55:b6:20:a1: 9b:d1:6e:a2:e3:d8:fd:15:25:a4:e6:29:37:cf:b6:6b:f9:3e: 90:0c:7e:69:89:d0:91:d4:54:82:fb:07:c0:da:36:f0:b7:24: 8a:fe:1b:6e:bb:dd:c1:99:80:e5:99:e8:01:ac:9f:5b:b0:f2: 2e:07:5d:0f:d2:b3:0a:ba:9d:c9:94:60:23:d2:f6:72:b0:0a: 74:7a:62:b9:04:d3:88:5f:74:d0:28:55:9d:97:1b:08:8b:36: a8:97:a1:9f:b0:5a:dc:97:51:09:52:a4:e6:c1:55:2b:13:fc: 9b:1f:f3:de:0d:fa:e3:ca:2d:ed:b8:4c:ec:5f:ad:c5:2c:bb: 23:29:09:d7:78:e3:de:bf:04:aa:7e:f2:7d:58:74:d6:05:cc: 7d:8f:d2:1d:bc:9b:88:2a:4a:f1:d2:46:4f:46:8d:30:2e:be: 9f:cd:b4:f5:15:51:52:d6:d2:9c:59:9b:08:41:33:64:bd:a9: 1e:f3:36:4f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEue7nfFKUyOOHv6hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyMzIwNDU1NFoXDTI2MDEyMTIxNDU1NFowLzEtMCsGA1UEAxMk MWViMzIxNWQtZDdiOC00NzI2LWEwZTQtOGZjMTIwOTIzMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wVgUrxCQlPIHMN2hILHZWmikh9oYHF+/1Uj JDgBv6lWKckKWZ5k6Dw0q2c26a16i00wAeI10l1apShZwbXDfWZquA1fG9Ei7+WO 5ttxNVVw36i1LUmKxGM3kat75i7/zVtj3ZiMflVWLYywxZn6syscVkxTnZjNj8zw wAK/H381muFQzeg9VYVrUGkXFh7G5/xGzxqNTET+P7ik7m6rGx5mvph3y7KU0iu3 WBgeA9HlFTbkO0QbbZ8AvxsGhKdl1afECnpidJDHFwnBpT4XoZdFBuwmX8R6pEgY J4Avc+oK7qzJVWeH0oWj8pyLNKdt9i/9SYumDAztimGu9S3KUQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFF09kcBCgrPd/vQph0U3CKDoBU0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZiMzM3OTAtMjhiNi0z OTM1LTg0NTYtOWY1ZGJlYjc3NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCI9gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAV4DHaUH376MfrAFH0GM6h4FWMkIYKbPaimPu+rZUY8yTR36TCVtTzzD0 oKJIRKZMbynpW2Iq+2MhosoXKCbUBsJ7pcNVtiChm9FuouPY/RUlpOYpN8+2a/k+ kAx+aYnQkdRUgvsHwNo28Lckiv4bbrvdwZmA5ZnoAayfW7DyLgddD9KzCrqdyZRg I9L2crAKdHpiuQTTiF900ChVnZcbCIs2qJehn7Ba3JdRCVKk5sFVKxP8mx/z3g36 48ot7bhM7F+txSy7IykJ13jj3r8Eqn7yfVh01gXMfY/SHbybiCpK8dJGT0aNMC6+ n8209RVRUtbSnFmbCEEzZL2pHvM2Tw== -----END CERTIFICATE-----Generated at Tue Nov 4 17:12:21 2025 by rpki-client