$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa File: bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa (raw, json) Hash identifier: 37+huRam82Pyx07NIEwbXth2S/Mmiqv1ePuvgAtEhi4= Subject key identifier: 2B:95:1F:8F:F2:DE:90:52:68:08:3E:F1:8B:18:66:3A:16:B6:72:03 Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe Certificate serial: 010D0C9F4328584B33F1A5D26E069989BEBB3280 Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 237 IP address blocks: 35.38.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a5:d2:6e:06:99:89:be:bb:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=ca84cc9c-0f8e-43af-91a5-ade26edb667b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fc:b2:9d:3f:96:ba:7f:39:e2:7e:18:02:3c: e7:8a:5e:4f:be:77:82:98:02:73:17:48:8d:15:42: 3c:5e:fb:9d:7b:aa:1f:19:6a:2e:30:f2:cd:c7:d6: 11:8f:e7:16:13:4e:66:56:f7:76:79:e7:1a:94:a1: c2:17:2c:b4:30:01:1d:6c:15:8c:97:21:bb:90:3a: 83:17:90:f0:4f:d4:31:25:ba:89:d1:09:a2:85:ba: 2d:c1:5b:a4:e1:dc:37:9e:2e:6a:1c:29:4c:a3:23: 48:b3:13:e5:f8:1f:9c:e5:16:92:a5:68:df:c8:83: 99:47:cb:35:84:46:85:c6:5c:cb:3b:26:85:3c:b3: 32:76:f8:c9:9f:61:03:0d:69:72:65:22:a1:4f:be: 99:3f:96:d0:33:bf:d6:39:14:f7:ae:56:aa:c3:6b: 9d:2d:a3:eb:88:e7:1c:b0:88:3b:c2:23:b8:a4:b6: 4b:73:23:19:33:15:8a:98:1b:8c:de:31:c8:ac:5c: d3:8f:5f:7f:71:01:85:95:56:72:ab:09:dc:61:50: 45:70:1e:bb:b2:f2:dd:b1:8e:46:4f:7e:b5:e0:d9: 9f:54:42:52:d2:59:91:38:34:c4:18:73:46:cc:be: 97:64:a9:d1:56:ef:2e:28:02:09:25:6c:84:7d:c0: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:95:1F:8F:F2:DE:90:52:68:08:3E:F1:8B:18:66:3A:16:B6:72:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl X509v3 Authority Key Identifier: keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer sbgp-ipAddrBlock: critical IPv4: 35.38.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b0:cb:40:78:e7:8a:02:56:d6:c8:22:a3:87:c8:7e:a0:c1: 58:b0:78:69:98:99:09:f5:dd:60:6a:0f:7e:dd:1b:43:f2:ee: 4c:7c:e0:2e:cf:2c:5d:94:72:32:85:dc:30:70:86:86:0a:10: ff:97:66:83:87:ef:7a:06:c9:6d:9c:de:76:ab:47:3e:d3:ac: 28:db:3c:b0:aa:52:76:45:9a:31:cb:e4:11:a6:e7:a5:16:a6: 84:2d:1f:9e:2f:19:c9:d7:92:a7:c8:f8:fe:a6:5f:53:41:f2: d4:5c:78:64:e0:ed:b4:ac:51:dc:51:17:f5:5b:e2:c5:59:a1: 1f:ff:0b:30:f3:79:37:ed:12:2a:29:aa:19:42:71:59:fd:69: 2d:b9:a1:53:b0:a0:a3:a1:b7:65:91:a3:21:26:41:e6:42:ae: f6:6f:0c:ca:b6:e8:02:6f:d6:31:aa:9d:6b:ae:11:9b:1d:df: 95:7b:97:b9:4d:98:47:07:b7:f3:22:88:c0:40:87:a5:af:96: 29:5d:9b:3e:21:4c:86:e8:ae:aa:84:44:88:91:e0:0e:b3:06: 7e:35:73:a7:75:30:84:c4:d3:64:58:5b:eb:7a:32:df:6c:cd: d0:6e:89:49:56:27:48:c6:10:8e:65:66:97:4d:0b:5e:23:14: d8:6f:4e:72 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsz8aXSbgaZib67MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk ZWZlMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk Y2E4NGNjOWMtMGY4ZS00M2FmLTkxYTUtYWRlMjZlZGI2NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/yynT+Wun854n4YAjznil5PvneCmAJzF0iN FUI8Xvude6ofGWouMPLNx9YRj+cWE05mVvd2eecalKHCFyy0MAEdbBWMlyG7kDqD F5DwT9QxJbqJ0QmihbotwVuk4dw3ni5qHClMoyNIsxPl+B+c5RaSpWjfyIOZR8s1 hEaFxlzLOyaFPLMydvjJn2EDDWlyZSKhT76ZP5bQM7/WORT3rlaqw2udLaPriOcc sIg7wiO4pLZLcyMZMxWKmBuM3jHIrFzTj19/cQGFlVZyqwncYVBFcB67svLdsY5G T3614NmfVEJS0lmRODTEGHNGzL6XZKnRVu8uKAIJJWyEfcBTDwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCuVH4/y3pBSaAg+8YsYZjoWtnIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvYmQ2MjJjOGMtOThjNC0z MzE5LWE2OTAtZDUyYTI3YmMyZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4 ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm ODc1OGRlZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIyYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAnbDLQHjnigJW1sgio4fIfqDBWLB4aZiZCfXdYGoPft0bQ/LuTHzgLs8s XZRyMoXcMHCGhgoQ/5dmg4fvegbJbZzedqtHPtOsKNs8sKpSdkWaMcvkEabnpRam hC0fni8ZydeSp8j4/qZfU0Hy1Fx4ZODttKxR3FEX9VvixVmhH/8LMPN5N+0SKimq GUJxWf1pLbmhU7Cgo6G3ZZGjISZB5kKu9m8MyrboAm/WMaqda64Rmx3flXuXuU2Y Rwe38yKIwECHpa+WKV2bPiFMhuiuqoREiJHgDrMGfjVzp3UwhMTTZFhb63oy32zN 0G6JSVYnSMYQjmVml00LXiMU2G9Ocg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:48 2025 by rpki-client