$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c25cc5f-991c-3dd0-8b6e-2134d9fb875f.roa File: 2c25cc5f-991c-3dd0-8b6e-2134d9fb875f.roa (raw, json) Hash identifier: VmzBAHlKXIvFodGIib00F3SNmg076joEkWOybScKf8I= Subject key identifier: 3F:80:2B:5E:78:56:F8:D5:5C:24:60:8A:01:61:57:C1:0A:E0:25:76 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797CCB7E56769128C8B5700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c25cc5f-991c-3dd0-8b6e-2134d9fb875f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.225.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:cc:b7:e5:67:69:12:8c:8b:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=4d43e7ad-493c-4cb6-ad44-63738856fe12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c4:67:e1:8a:0e:8e:9c:56:b7:52:a4:16:6a: d2:55:f4:2b:51:c1:aa:35:f1:8e:17:b6:f1:17:c8: 54:e6:8c:fb:d7:8f:d8:fa:c5:4f:ae:60:df:44:0a: 07:57:ea:6e:53:a4:1f:a1:10:80:cb:75:d6:f0:72: 5a:7c:dd:91:91:5a:78:a1:82:89:b5:b1:d2:39:4e: b2:59:e0:1a:95:ce:ac:c7:37:61:46:0d:ee:16:97: cd:13:5b:1e:f9:45:26:2e:90:e9:4d:20:1c:d6:03: 0f:0d:f3:c3:a2:85:11:df:bc:bf:58:fa:01:d0:01: b3:ea:2c:5a:b4:36:f7:75:47:a7:34:58:ce:4e:c0: 4b:75:01:94:87:5e:1b:46:2e:2a:4d:f5:29:16:be: f6:c8:3c:50:ea:08:61:61:ed:21:16:06:0f:74:63: 39:ad:7d:8a:c1:af:1f:27:0f:1e:3d:af:59:c3:8e: 0a:da:12:1c:24:8d:d1:d8:4e:48:3e:4b:6a:9a:f0: 3e:6a:a4:6b:54:70:49:2b:65:16:c0:43:64:85:2e: 1f:41:0f:7b:93:20:8b:ba:ce:fb:dc:07:50:24:9c: 14:0c:de:b3:d3:96:d8:12:0a:41:f6:3b:61:05:ff: 7e:df:dd:0c:f9:71:b5:f8:6a:58:c3:ff:0b:73:3f: 9d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:80:2B:5E:78:56:F8:D5:5C:24:60:8A:01:61:57:C1:0A:E0:25:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c25cc5f-991c-3dd0-8b6e-2134d9fb875f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.225.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:e2:4a:01:08:90:8b:ba:8f:6b:93:2d:87:40:69:ff:34:d2: 3b:59:46:81:c9:1e:1f:4e:bf:55:b4:20:ea:8b:74:07:a4:9c: 11:53:13:89:d8:8c:bd:18:ed:3f:6e:1a:b6:a0:6a:d8:d7:73: 4e:81:ab:23:ba:2b:21:6e:c4:64:e6:f8:41:ff:1b:46:b3:a7: d8:59:d6:ed:8c:d7:e5:00:8d:13:38:f0:2e:6d:e7:1b:06:41: d5:4e:90:a9:55:99:25:ad:9c:b2:69:3f:4a:db:2a:18:94:60: 59:b8:8d:cb:12:f6:a5:8e:9c:ca:eb:d3:4d:ea:52:bc:91:b3: 0e:5f:8c:4a:82:69:62:43:2b:56:9f:0c:a4:8e:73:21:38:4f: e3:e0:c3:d2:cc:8d:79:49:d4:80:59:c6:90:b5:a7:7c:85:30: 4e:34:8a:28:87:67:3d:ca:42:8a:b7:d7:9e:ca:a1:44:ec:49: 05:cb:25:b7:8f:70:95:fa:a5:e1:dc:2d:bb:c7:1e:e0:f3:7f: 6f:f0:26:3b:91:f4:40:c1:3d:39:81:36:c1:f3:ab:c5:40:48: ef:58:80:d0:6a:3e:de:b9:2a:23:d1:fb:ba:2d:b7:49:8f:ff: 4e:06:bb:e3:97:8a:89:06:61:2c:4a:00:99:14:46:b4:ce:bd: 9a:e3:fa:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8y35WdpEoyLVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NGQ0M2U3YWQtNDkzYy00Y2I2LWFkNDQtNjM3Mzg4NTZmZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMRn4YoOjpxWt1KkFmrSVfQrUcGqNfGOF7bx F8hU5oz714/Y+sVPrmDfRAoHV+puU6QfoRCAy3XW8HJafN2RkVp4oYKJtbHSOU6y WeAalc6sxzdhRg3uFpfNE1se+UUmLpDpTSAc1gMPDfPDooUR37y/WPoB0AGz6ixa tDb3dUenNFjOTsBLdQGUh14bRi4qTfUpFr72yDxQ6ghhYe0hFgYPdGM5rX2Kwa8f Jw8ePa9Zw44K2hIcJI3R2E5IPktqmvA+aqRrVHBJK2UWwENkhS4fQQ97kyCLus77 3AdQJJwUDN6z05bYEgpB9jthBf9+390M+XG1+GpYw/8Lcz+d6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+AK154VvjVXCRgigFhV8EK4CV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmMyNWNjNWYtOTkxYy0z ZGQwLThiNmUtMjEzNGQ5ZmI4NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+HAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjiSgEIkIu6j2uTLYdAaf800jtZRoHJHh9Ov1W0IOqLdAeknBFTE4nY jL0Y7T9uGragatjXc06BqyO6KyFuxGTm+EH/G0azp9hZ1u2M1+UAjRM48C5t5xsG QdVOkKlVmSWtnLJpP0rbKhiUYFm4jcsS9qWOnMrr003qUryRsw5fjEqCaWJDK1af DKSOcyE4T+Pgw9LMjXlJ1IBZxpC1p3yFME40iiiHZz3KQoq3157KoUTsSQXLJbeP cJX6peHcLbvHHuDzf2/wJjuR9EDBPTmBNsHzq8VASO9YgNBqPt65KiPR+7ott0mP /04Gu+OXiokGYSxKAJkURrTOvZrj+iI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:33 2025 by rpki-client