$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/35f2d94d-e21a-3f32-ab8d-64a19cf4e2ad.roa File: 35f2d94d-e21a-3f32-ab8d-64a19cf4e2ad.roa (raw, json) Hash identifier: wq6f9VvJ/IWPWF1s9wgfKcOcKhgHDCW1NaS0jcB2Fj8= Subject key identifier: F7:BA:5C:1C:20:20:F0:09:F4:A7:B0:D7:1A:F0:11:0D:2A:AF:12:D2 Certificate issuer: /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Certificate serial: 010D0C9F4328584B92DCF24F9359220D9CD7BA18 Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/35f2d94d-e21a-3f32-ab8d-64a19cf4e2ad.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7794 IP address blocks: 104.194.32.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f2:4f:93:59:22:0d:9c:d7:ba:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=b957e3b0-3da7-4aaa-ad1d-afd3574d417c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:67:6e:b1:9f:29:b3:62:db:2c:7c:93:9c: a7:a7:52:9e:d0:10:54:6d:e4:34:42:7a:fa:15:fe: 75:c3:b5:e1:e0:85:61:12:7f:7a:23:c6:e1:0e:70: e8:e5:6e:d9:c7:06:a7:7a:60:99:2e:7f:71:63:a6: 48:04:ab:28:5d:6f:8f:ed:59:7c:53:da:26:86:5a: 87:75:ec:c2:56:a0:92:54:85:99:69:13:7a:4b:79: 7e:94:8e:de:b4:69:ef:4f:b6:84:42:ab:f4:05:b7: b9:e7:df:2b:79:17:81:03:f8:df:dc:24:e1:7a:ea: cc:85:35:41:b8:08:c3:1d:78:40:0e:35:b8:4e:e7: 0a:be:02:51:1f:63:8f:52:7b:bb:95:f2:40:b7:d4: 3f:c7:30:94:03:a5:2e:bf:f7:7c:b5:3d:f4:af:05: e3:ce:8d:0d:a0:6f:b9:9b:a6:cf:26:96:8d:19:27: 35:02:fc:01:dd:53:2a:48:9d:20:23:16:c8:f5:b7: e0:4a:3b:a2:01:11:91:5b:a2:0c:74:e1:73:ea:c8: 24:c7:d8:54:30:52:79:0a:2e:a9:ea:8a:bc:19:e9: 6a:45:6d:71:a5:ac:fc:29:62:9a:52:47:a1:e2:ac: 5b:b5:07:1a:0b:46:3b:ce:05:94:15:c2:3d:77:06: 6f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BA:5C:1C:20:20:F0:09:F4:A7:B0:D7:1A:F0:11:0D:2A:AF:12:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/35f2d94d-e21a-3f32-ab8d-64a19cf4e2ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl X509v3 Authority Key Identifier: keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer sbgp-ipAddrBlock: critical IPv4: 104.194.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:a7:e8:12:06:82:bf:8c:28:01:e3:ae:f3:f2:18:33:be:2e: 4f:41:00:41:bd:7e:c0:ff:e1:2e:b1:a5:9a:6d:4a:08:5f:c0: 7d:94:5a:2b:93:d5:37:a3:4d:8d:dc:12:29:7c:32:be:2f:cb: 2e:16:d3:d5:86:6a:58:2b:a5:8b:8e:36:62:0c:47:14:54:12: d9:2f:03:0c:24:08:7f:04:79:9c:a1:20:3c:a6:7a:2d:bd:be: db:36:15:ac:f8:06:ea:8c:4b:bd:cc:50:eb:0c:5d:94:ff:e0: 63:d4:11:e4:27:04:c6:0b:fd:6f:1d:e5:21:c9:48:55:ca:5a: ee:5e:88:9b:85:09:7a:f9:5a:e2:83:f1:ad:f4:8b:ef:e6:0e: 54:27:53:96:db:9d:e2:cb:dd:5a:bb:25:08:2c:08:c9:d0:0d: b5:21:a8:ac:1f:e1:37:4e:04:d7:0a:00:55:45:8c:9e:8a:ca: 62:cd:ad:a4:e7:8c:f1:29:d7:34:0a:ca:e2:9d:ee:f7:3c:3f: 7f:a5:bb:e1:f4:a3:87:dd:aa:76:93:de:28:48:c4:56:21:c2: 5a:a6:dd:07:0b:34:af:60:70:0d:f4:39:d1:45:76:44:90:a6: 71:e8:11:7d:65:ac:74:00:3c:04:0f:04:d9:07:08:fd:59:42: 98:29:cd:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PJPk1kiDZzXuhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx NzZlMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk Yjk1N2UzYjAtM2RhNy00YWFhLWFkMWQtYWZkMzU3NGQ0MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcxnbrGfKbNi2yx8k5ynp1Ke0BBUbeQ0Qnr6 Ff51w7Xh4IVhEn96I8bhDnDo5W7ZxwanemCZLn9xY6ZIBKsoXW+P7Vl8U9omhlqH dezCVqCSVIWZaRN6S3l+lI7etGnvT7aEQqv0Bbe5598reReBA/jf3CTheurMhTVB uAjDHXhADjW4TucKvgJRH2OPUnu7lfJAt9Q/xzCUA6Uuv/d8tT30rwXjzo0NoG+5 m6bPJpaNGSc1AvwB3VMqSJ0gIxbI9bfgSjuiARGRW6IMdOFz6sgkx9hUMFJ5Ci6p 6oq8GelqRW1xpaz8KWKaUkeh4qxbtQcaC0Y7zgWUFcI9dwZvYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe6XBwgIPAJ9Kew1xrwEQ0qrxLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvMzVmMmQ5NGQtZTIxYS0z ZjMyLWFiOGQtNjRhMTljZjRlMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1 ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOWn6BIGgr+MKAHjrvPyGDO+Lk9BAEG9fsD/4S6xpZptSghfwH2UWiuT 1TejTY3cEil8Mr4vyy4W09WGalgrpYuONmIMRxRUEtkvAwwkCH8EeZyhIDymei29 vts2Faz4BuqMS73MUOsMXZT/4GPUEeQnBMYL/W8d5SHJSFXKWu5eiJuFCXr5WuKD 8a30i+/mDlQnU5bbneLL3Vq7JQgsCMnQDbUhqKwf4TdOBNcKAFVFjJ6KymLNraTn jPEp1zQKyuKd7vc8P3+lu+H0o4fdqnaT3ihIxFYhwlqm3QcLNK9gcA30OdFFdkSQ pnHoEX1lrHQAPAQPBNkHCP1ZQpgpzeA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:05 2025 by rpki-client