$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e151cac-c7eb-353b-9933-4bc817614767.roa File: 2e151cac-c7eb-353b-9933-4bc817614767.roa (raw, json) Hash identifier: d0zbGWDtLftC59A3bsqr+rmCYA/OIqdUsCAZfsYlX2U= Subject key identifier: D1:68:EC:57:B7:00:C1:52:9D:44:EB:1B:66:6D:20:D5:F4:7E:CA:B6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D36A099C8CFD641AE780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e151cac-c7eb-353b-9933-4bc817614767.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.241.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d3:6a:09:9c:8c:fd:64:1a:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2ce8cd68-c6f1-4c8a-b3a3-f44ab757b7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:a8:79:92:28:6a:6d:40:e3:f9:ae:79:a7: 4d:42:c4:45:90:b6:3d:b1:8f:73:12:93:d0:c3:2c: 7d:a2:9c:80:53:29:20:56:99:0a:57:86:03:0b:d9: bc:c1:53:87:b8:e1:cd:15:4d:1c:0c:3c:61:ba:90: 06:52:2b:77:8b:36:af:a9:a2:18:ce:77:54:3a:4a: 16:07:d8:37:f0:f5:1c:56:b2:a9:bd:df:4f:59:95: 45:1a:27:4c:de:54:3b:a3:fe:0a:40:53:e6:5b:21: 20:b6:32:84:26:c3:7f:d0:d0:dd:c4:f6:01:a2:4d: 64:88:74:5c:29:1a:56:bb:fc:93:3d:5c:07:9a:3a: 0b:1a:a5:34:21:ee:2d:b2:08:ef:56:9b:35:4a:30: 78:b9:82:7d:c3:bf:ce:70:0a:a5:a8:5f:5c:63:67: e0:00:dc:03:4b:4f:a8:aa:c6:20:5c:ce:87:07:d9: 71:3a:37:bf:0a:79:ad:bc:2f:06:b8:84:31:63:63: b5:18:20:42:66:9f:28:0e:e4:61:47:6f:b7:3b:9a: 42:9e:3d:13:46:dc:43:58:b4:ca:a9:94:67:65:49: f4:47:7c:c1:ae:6e:35:09:d4:c5:4b:ba:49:b1:9c: b2:58:0c:fd:4d:32:06:7f:e0:50:ae:3f:8b:57:78: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:68:EC:57:B7:00:C1:52:9D:44:EB:1B:66:6D:20:D5:F4:7E:CA:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e151cac-c7eb-353b-9933-4bc817614767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.241.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:56:44:ec:94:ea:a6:56:3e:06:64:4a:ff:fd:20:b9:7f:90: 9d:db:42:d3:0d:0a:11:6d:16:05:d9:77:bc:f5:74:0b:63:a5: ab:6f:2d:27:d3:46:24:f1:72:a1:2d:e3:5f:dd:01:1d:1a:91: d3:4c:cc:c6:f1:db:4f:4e:1a:7b:c8:61:f6:7e:03:fc:9d:e3: ec:2e:dd:b3:a4:c5:ef:b3:e4:e1:45:4c:cd:62:61:0f:ba:1f: 0a:7b:0f:92:bc:b3:bf:8b:d3:74:1e:57:23:88:75:a5:49:79: 28:41:0c:21:95:71:c1:c5:89:28:0f:ea:e4:67:31:b0:18:b7: 45:5d:5e:c9:21:68:d4:a6:f4:e1:f7:ed:08:77:71:2e:20:f8: f9:cd:f5:ff:06:de:c6:05:9b:94:8e:f9:4e:9d:bf:bd:03:2f: d5:72:d0:cf:a8:1d:24:50:69:d6:f3:af:30:f9:b2:ea:9d:55: 9f:2e:5f:41:2f:67:c8:31:23:b8:bd:7c:f1:7d:41:ba:4e:74: 63:f6:c3:68:66:45:83:79:5f:5f:5d:cf:2c:59:35:ed:07:4f: 2c:76:74:05:1c:61:9f:6e:0b:f9:1f:e9:26:bd:9f:de:f2:7c: 3f:37:17:23:6c:37:48:5e:03:47:2d:c7:97:f5:3c:6e:4c:ad: f5:42:31:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9NqCZyM/WQa54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmNlOGNkNjgtYzZmMS00YzhhLWIzYTMtZjQ0YWI3NTdiN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJmoeZIoam1A4/mueadNQsRFkLY9sY9zEpPQ wyx9opyAUykgVpkKV4YDC9m8wVOHuOHNFU0cDDxhupAGUit3izavqaIYzndUOkoW B9g38PUcVrKpvd9PWZVFGidM3lQ7o/4KQFPmWyEgtjKEJsN/0NDdxPYBok1kiHRc KRpWu/yTPVwHmjoLGqU0Ie4tsgjvVps1SjB4uYJ9w7/OcAqlqF9cY2fgANwDS0+o qsYgXM6HB9lxOje/CnmtvC8GuIQxY2O1GCBCZp8oDuRhR2+3O5pCnj0TRtxDWLTK qZRnZUn0R3zBrm41CdTFS7pJsZyyWAz9TTIGf+BQrj+LV3iqZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFo7Fe3AMFSnUTrG2ZtINX0fsq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmUxNTFjYWMtYzdlYi0z NTNiLTk5MzMtNGJjODE3NjE0NzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlWROyU6qZWPgZkSv/9ILl/kJ3bQtMNChFtFgXZd7z1dAtjpatvLSfT RiTxcqEt41/dAR0akdNMzMbx209OGnvIYfZ+A/yd4+wu3bOkxe+z5OFFTM1iYQ+6 Hwp7D5K8s7+L03QeVyOIdaVJeShBDCGVccHFiSgP6uRnMbAYt0VdXskhaNSm9OH3 7Qh3cS4g+PnN9f8G3sYFm5SO+U6dv70DL9Vy0M+oHSRQadbzrzD5suqdVZ8uX0Ev Z8gxI7i9fPF9QbpOdGP2w2hmRYN5X19dzyxZNe0HTyx2dAUcYZ9uC/kf6Sa9n97y fD83FyNsN0heA0ctx5f1PG5MrfVCMTM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:26 2025 by rpki-client