$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa3e4828-28f6-30af-9b26-bc40385f52f2.roa File: fa3e4828-28f6-30af-9b26-bc40385f52f2.roa (raw, json) Hash identifier: cDbRBhlk+vKmFoDykgXwR2cMA8d6bv29rXlXWdfRRK8= Subject key identifier: 8E:E6:4D:A3:96:C9:F1:D6:6F:3B:F0:BC:8B:F5:99:54:40:7F:1B:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BA26B854F84CE33D01FF06080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa3e4828-28f6-30af-9b26-bc40385f52f2.roa Signing time: Sat 25 Oct 2025 02:45:18 +0000 ROA not before: Sat 25 Oct 2025 02:45:18 +0000 ROA not after: Fri 23 Jan 2026 03:45:18 +0000 asID: 396982 IP address blocks: 35.253.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:6b:85:4f:84:ce:33:d0:1f:f0:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 25 02:45:18 2025 GMT Not After : Jan 23 03:45:18 2026 GMT Subject: CN=a5731d5d-a9e1-4738-a011-1faf2246d678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:58:6f:9d:59:02:40:f4:26:ce:c8:63:db:7a: cc:89:d0:b4:11:c4:aa:48:88:47:a3:43:05:0c:ae: 24:52:50:46:01:4c:07:3c:63:af:30:51:74:fb:ee: 59:c7:0d:73:3a:54:c5:08:be:4c:d2:d5:1f:26:f1: 7d:4e:8e:30:97:8f:9c:db:d9:bb:d9:ff:b0:ae:37: ba:0e:e0:f5:2a:f0:52:1f:30:80:24:97:41:9d:5d: 38:9a:d6:e9:43:23:57:6c:ca:9f:f1:d7:19:b0:64: 45:00:ff:02:73:fc:64:fb:08:84:13:ab:ee:fd:de: c4:4f:f4:d6:dd:3c:13:ae:42:15:cd:c4:ca:39:ff: 66:2d:e4:46:b3:b6:bf:02:cd:20:79:cf:df:fa:e2: d2:98:66:1f:73:73:f7:54:96:5e:09:46:db:b8:c2: a3:f9:3f:64:7f:96:e5:b0:7c:a8:84:3d:9e:54:30: 83:58:5f:51:19:00:ba:23:0e:45:69:24:7e:db:ca: 65:09:ea:7e:81:5a:a7:06:44:aa:b2:86:2d:c4:7c: e1:6e:a7:04:6c:21:31:4a:d9:38:79:27:2e:d0:4c: 8a:77:79:0a:1c:19:79:da:fe:cf:0a:4d:83:e9:d9: 9c:d5:67:24:2a:f5:c5:11:82:a3:a6:3a:88:64:c9: 3a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E6:4D:A3:96:C9:F1:D6:6F:3B:F0:BC:8B:F5:99:54:40:7F:1B:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa3e4828-28f6-30af-9b26-bc40385f52f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:37:dd:e1:b8:82:0c:7e:6f:fe:71:8f:d1:45:0d:d7:ce:9f: 60:7a:fe:89:b2:96:07:60:6f:d7:fd:96:8d:27:09:09:35:82: 10:a9:85:0a:6d:4e:d2:9e:ff:db:72:b5:ff:35:ae:f9:1d:d8: 84:be:ca:0d:b2:74:8c:13:e4:1c:ec:cb:59:86:03:f1:d5:c5: 5d:41:ae:8a:b7:10:70:3e:83:0c:5f:ec:af:46:c1:78:3d:ba: 84:71:fd:d5:72:dc:af:85:0a:fc:98:75:a3:0f:ba:3e:bb:b3: e2:62:8b:96:d8:da:32:0b:47:91:7a:25:e0:f4:b1:71:f1:95: b7:92:64:09:12:98:5d:6f:75:65:03:dd:bc:8d:99:48:3e:fd: 72:9f:c6:ea:ee:05:b5:4a:71:e8:e5:db:74:74:cf:e0:25:6d: 87:dd:06:77:d2:04:80:85:4b:54:0c:83:1e:b6:a8:ba:7e:f3: 7c:eb:6b:14:2f:4f:d7:40:e3:ac:04:38:e7:c1:c2:bf:cc:c5: 96:3b:03:d9:36:ea:2f:4a:de:3d:39:58:79:a3:03:16:9e:36: 09:be:8c:aa:a3:60:14:13:31:9b:4b:51:99:9a:b9:e6:33:35: b2:3e:d3:ea:21:92:23:d0:37:1c:79:60:09:b9:c4:a0:c5:eb: b7:a8:8b:7d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuia4VPhM4z0B/wYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyNTAyNDUxOFoXDTI2MDEyMzAzNDUxOFowLzEtMCsGA1UEAxMk YTU3MzFkNWQtYTllMS00NzM4LWEwMTEtMWZhZjIyNDZkNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1hvnVkCQPQmzshj23rMidC0EcSqSIhHo0MF DK4kUlBGAUwHPGOvMFF0++5Zxw1zOlTFCL5M0tUfJvF9To4wl4+c29m72f+wrje6 DuD1KvBSHzCAJJdBnV04mtbpQyNXbMqf8dcZsGRFAP8Cc/xk+wiEE6vu/d7ET/TW 3TwTrkIVzcTKOf9mLeRGs7a/As0gec/f+uLSmGYfc3P3VJZeCUbbuMKj+T9kf5bl sHyohD2eVDCDWF9RGQC6Iw5FaSR+28plCep+gVqnBkSqsoYtxHzhbqcEbCExStk4 eScu0EyKd3kKHBl52v7PCk2D6dmc1WckKvXFEYKjpjqIZMk6SQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI7mTaOWyfHWbzvwvIv1mVRAfxsyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmEzZTQ4MjgtMjhmNi0z MGFmLTliMjYtYmM0MDM4NWY1MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAI/0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABzfd4biCDH5v/nGP0UUN186fYHr+ibKWB2Bv1/2WjScJCTWCEKmFCm1O 0p7/23K1/zWu+R3YhL7KDbJ0jBPkHOzLWYYD8dXFXUGuircQcD6DDF/sr0bBeD26 hHH91XLcr4UK/Jh1ow+6Pruz4mKLltjaMgtHkXol4PSxcfGVt5JkCRKYXW91ZQPd vI2ZSD79cp/G6u4FtUpx6OXbdHTP4CVth90Gd9IEgIVLVAyDHraoun7zfOtrFC9P 10DjrAQ458HCv8zFljsD2TbqL0rePTlYeaMDFp42Cb6MqqNgFBMxm0tRmZq55jM1 sj7T6iGSI9A3HHlgCbnEoMXrt6iLfQ== -----END CERTIFICATE-----Generated at Mon Nov 3 21:51:02 2025 by rpki-client