$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/144301ce-321f-35ad-8b91-4ca30859736c.roa File: 144301ce-321f-35ad-8b91-4ca30859736c.roa (raw, json) Hash identifier: vBaL0rcjsU/tGw6xcuYXO2NLzmUBAK1/KpaQ/WdqLPQ= Subject key identifier: 8F:88:47:01:4C:06:7E:A5:76:6C:AE:CA:47:48:4F:0D:09:B8:49:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C1066CE39C6C701E7D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/144301ce-321f-35ad-8b91-4ca30859736c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.196.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c1:06:6c:e3:9c:6c:70:1e:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=ea253aff-ab87-416e-9885-bdcf4044a945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:91:f5:bc:54:3c:1a:47:5d:c5:f7:41:e0:9f: 3c:29:88:82:3d:f6:23:5e:14:c1:d1:d2:a8:ca:1d: c6:85:51:57:ab:c3:5a:68:90:bb:2d:27:85:98:8b: 40:bb:34:cf:bf:f1:e0:9b:0a:dc:b6:42:ca:25:de: 47:c9:29:05:53:3a:55:f5:92:6e:3f:94:71:d9:ad: ea:f9:f2:dc:2f:5d:97:71:5a:e4:21:d8:85:0b:40: 6d:a5:e0:f2:5e:2f:d9:23:c8:e3:e1:04:b0:db:3f: ed:a0:88:35:58:6c:fe:74:2e:43:0a:de:da:3e:c0: d4:5a:cd:f4:8d:7d:b5:01:95:80:d3:18:65:57:3f: d9:76:5c:05:6c:f6:0e:0b:4e:f8:41:8e:cf:fa:fa: 0c:4e:a3:49:14:af:e7:11:7b:96:8d:01:97:21:b3: e4:a7:0a:59:f5:3d:0c:2a:0f:0c:be:be:cb:d0:7b: e7:19:ec:b6:17:dc:2c:65:3d:f3:4f:40:a2:63:9f: 37:09:61:9b:ca:ef:53:b6:4c:d0:74:3d:5f:36:c4: 4d:00:f1:8f:e9:9c:8e:4a:a4:0d:0f:f1:07:88:db: 2b:82:5c:bb:a0:4a:88:c1:e1:e3:ae:c6:28:ef:1a: c7:db:57:7d:4a:66:25:f9:56:99:8c:24:f2:66:7d: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:88:47:01:4C:06:7E:A5:76:6C:AE:CA:47:48:4F:0D:09:B8:49:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/144301ce-321f-35ad-8b91-4ca30859736c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.196.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:82:77:e4:aa:d4:8b:4d:9c:41:e4:d0:67:9c:7d:da:5f:3a: 07:42:63:67:f0:a6:93:3a:43:c0:bb:40:b9:90:1e:ad:d1:a6: 34:82:fa:c4:45:97:44:7f:5d:85:ff:f5:67:57:9b:d9:82:8c: 00:6c:67:4f:b5:44:ca:e4:ad:01:f8:06:30:32:06:6f:55:df: 49:0e:8d:05:e0:62:c3:4b:86:b8:71:6e:2c:c3:e5:d4:74:81: 3b:64:73:35:7d:ca:c7:84:64:71:e5:10:74:e2:89:ae:37:06: 0f:0e:24:9d:ad:8b:3f:26:da:09:1f:ff:8d:0c:f6:0c:26:08: 6a:df:19:d6:ba:c9:d1:be:fa:76:3a:1e:b2:9d:91:0b:0f:73: cc:1e:d6:b1:ff:48:ef:c6:7d:b8:cb:cf:f1:c4:41:09:83:c5: f9:d3:3a:53:42:49:af:18:67:2c:8e:49:07:31:a3:46:f3:c3: 0c:77:e5:95:e6:f2:ce:b7:70:c7:f0:96:2e:00:2d:26:cc:d6: 84:65:cd:35:40:fb:1a:67:55:75:cb:65:40:f6:5d:77:8e:2b: 57:9d:76:dc:26:2c:fd:ec:db:28:f2:9d:59:5a:dc:29:cd:79: c1:ac:17:15:7d:5d:99:e6:73:63:31:50:49:82:9d:6b:1f:aa: 89:72:81:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8EGbOOcbHAefYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWEyNTNhZmYtYWI4Ny00MTZlLTk4ODUtYmRjZjQwNDRhOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZH1vFQ8GkddxfdB4J88KYiCPfYjXhTB0dKo yh3GhVFXq8NaaJC7LSeFmItAuzTPv/HgmwrctkLKJd5HySkFUzpV9ZJuP5Rx2a3q +fLcL12XcVrkIdiFC0BtpeDyXi/ZI8jj4QSw2z/toIg1WGz+dC5DCt7aPsDUWs30 jX21AZWA0xhlVz/ZdlwFbPYOC074QY7P+voMTqNJFK/nEXuWjQGXIbPkpwpZ9T0M Kg8Mvr7L0HvnGey2F9wsZT3zT0CiY583CWGbyu9TtkzQdD1fNsRNAPGP6ZyOSqQN D/EHiNsrgly7oEqIweHjrsYo7xrH21d9SmYl+VaZjCTyZn27mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+IRwFMBn6ldmyuykdITw0JuEkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTQ0MzAxY2UtMzIxZi0z NWFkLThiOTEtNGNhMzA4NTk3MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaCd+Sq1ItNnEHk0GecfdpfOgdCY2fwppM6Q8C7QLmQHq3RpjSC+sRF l0R/XYX/9WdXm9mCjABsZ0+1RMrkrQH4BjAyBm9V30kOjQXgYsNLhrhxbizD5dR0 gTtkczV9yseEZHHlEHTiia43Bg8OJJ2tiz8m2gkf/40M9gwmCGrfGda6ydG++nY6 HrKdkQsPc8we1rH/SO/GfbjLz/HEQQmDxfnTOlNCSa8YZyyOSQcxo0bzwwx35ZXm 8s63cMfwli4ALSbM1oRlzTVA+xpnVXXLZUD2XXeOK1eddtwmLP3s2yjynVla3CnN ecGsFxV9XZnmc2MxUEmCnWsfqolygS8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:54:35 2025 by rpki-client