$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32eed8dd-46b8-3083-8eb5-a98aaac78ca8.roa File: 32eed8dd-46b8-3083-8eb5-a98aaac78ca8.roa (raw, json) Hash identifier: VOQSpUeUHjhAXqMfgo9coziMnQdM3stxwdrjKCZZWpA= Subject key identifier: FD:E6:0C:29:9A:C1:B9:1D:A8:F1:FA:55:8C:F8:75:1E:1C:5B:A0:30 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B72C1F6DD2BCDB27E31BCEF20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32eed8dd-46b8-3083-8eb5-a98aaac78ca8.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 396982 IP address blocks: 35.189.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:f6:dd:2b:cd:b2:7e:31:bc:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=6abff051-ac3f-4d65-a45d-1d684fe17c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:17:56:75:d2:2c:91:93:b2:1d:c7:64:25: 6d:c1:a4:8a:56:ca:c9:0e:fb:a6:b7:dc:14:31:89: 3b:bf:d9:57:e1:21:3b:a7:f5:a4:26:cc:e8:1a:f4: da:4a:ff:df:43:5d:7a:32:fb:87:1d:86:4c:19:a9: 97:e5:be:03:b9:d8:2d:d5:9d:36:ce:b5:8e:83:83: 62:72:b6:c1:18:09:54:d7:f1:f8:85:22:68:8e:bc: 16:10:95:77:95:89:83:09:b3:cc:57:d6:81:10:21: 2d:1b:25:45:43:8d:3e:30:86:78:1e:c6:a4:b0:9c: 74:00:ce:8d:3a:35:1e:12:58:78:a1:8a:d1:cc:9a: 08:d0:2f:e3:fd:d8:8c:0a:87:24:79:06:c8:c8:9d: a0:eb:67:a6:1b:f2:58:35:f3:4d:c9:d3:7e:77:35: 5b:88:43:ef:71:ea:c0:b6:9b:fd:b0:d1:cb:07:67: c5:79:f0:f5:b2:85:db:fd:a9:97:ec:14:5d:94:93: 16:78:f8:42:4c:d0:99:e5:7c:59:42:bf:24:86:c2: 8c:6c:bc:12:00:09:32:ce:7a:82:65:79:76:2d:23: de:0c:d3:0b:79:74:c3:f0:2a:55:fe:c7:6e:f5:40: 2e:8a:53:cd:46:2c:c9:83:6b:00:3c:b1:7b:75:75: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E6:0C:29:9A:C1:B9:1D:A8:F1:FA:55:8C:F8:75:1E:1C:5B:A0:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32eed8dd-46b8-3083-8eb5-a98aaac78ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:bf:ae:39:5e:24:43:45:04:f5:58:e3:97:72:6b:63:35:a7: e4:10:34:46:2a:d2:73:a4:1f:92:2e:07:57:db:ec:6c:b7:86: 7c:b9:35:74:f7:b0:0f:7e:a5:bb:ac:34:13:f8:d9:ae:ff:ec: 61:69:33:72:aa:b1:4a:84:be:5e:fc:96:8e:73:32:35:a2:8a: 57:c8:aa:50:3d:d4:79:3e:69:8a:0a:c9:bd:46:b0:13:e0:70: b8:e8:e7:31:7f:6f:fe:49:37:bb:49:93:74:87:76:22:7d:34: 52:7a:45:a1:aa:dd:0e:34:2e:fb:e2:30:c1:6b:fb:62:10:0d: 8b:65:8b:68:80:d2:c7:02:b7:8e:90:2d:e2:b4:31:c4:ef:d8: a2:8a:f9:82:be:87:ad:9b:95:b0:76:7a:e5:f7:b5:78:e0:c1: 0f:bb:7a:59:14:87:a5:31:c8:2b:2b:1b:7c:31:6b:99:20:95: c2:d4:21:49:2b:75:fc:6c:de:c2:40:0c:2a:30:5d:a6:ad:4c: 58:bf:e8:f4:c8:6a:f9:9c:14:87:a6:61:8a:60:c6:c0:ce:42: 37:b2:82:b5:c4:67:83:da:a7:1c:4e:06:cb:9c:b6:f1:5a:69: df:94:59:ac:ba:1f:f9:9c:22:2f:e0:e9:0d:55:86:df:40:af: 97:1e:83:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywfbdK82yfjG87yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk NmFiZmYwNTEtYWMzZi00ZDY1LWE0NWQtMWQ2ODRmZTE3YzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppQXVnXSLJGTsh3HZCVtwaSKVsrJDvumt9wU MYk7v9lX4SE7p/WkJszoGvTaSv/fQ116MvuHHYZMGamX5b4Dudgt1Z02zrWOg4Ni crbBGAlU1/H4hSJojrwWEJV3lYmDCbPMV9aBECEtGyVFQ40+MIZ4HsaksJx0AM6N OjUeElh4oYrRzJoI0C/j/diMCockeQbIyJ2g62emG/JYNfNNydN+dzVbiEPvcerA tpv9sNHLB2fFefD1soXb/amX7BRdlJMWePhCTNCZ5XxZQr8khsKMbLwSAAkyznqC ZXl2LSPeDNMLeXTD8CpV/sdu9UAuilPNRizJg2sAPLF7dXVhxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3mDCmawbkdqPH6VYz4dR4cW6AwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzJlZWQ4ZGQtNDZiOC0z MDgzLThlYjUtYTk4YWFhYzc4Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI73gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK/rjleJENFBPVY45dya2M1p+QQNEYq0nOkH5IuB1fb7Gy3hny5NXT3 sA9+pbusNBP42a7/7GFpM3KqsUqEvl78lo5zMjWiilfIqlA91Hk+aYoKyb1GsBPg cLjo5zF/b/5JN7tJk3SHdiJ9NFJ6RaGq3Q40LvviMMFr+2IQDYtli2iA0scCt46Q LeK0McTv2KKK+YK+h62blbB2euX3tXjgwQ+7elkUh6UxyCsrG3wxa5kglcLUIUkr dfxs3sJADCowXaatTFi/6PTIavmcFIemYYpgxsDOQjeygrXEZ4PapxxOBsuctvFa ad+UWay6H/mcIi/g6Q1Vht9Ar5ceg1E= -----END CERTIFICATE-----Generated at Mon Oct 20 02:08:54 2025 by rpki-client