$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35f4850a-c412-398f-b674-8845c22ca2fe.roa File: 35f4850a-c412-398f-b674-8845c22ca2fe.roa (raw, json) Hash identifier: /hl8pFjA09lwWROa0+X+Cq9ky8mV0xU+fUyi7ebJZq8= Subject key identifier: 5C:66:37:EA:D6:76:C6:8B:58:85:44:A0:DA:A5:1B:C7:61:74:85:DB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797D2A0E8556E20C270B600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35f4850a-c412-398f-b674-8845c22ca2fe.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 35.215.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d2:a0:e8:55:6e:20:c2:70:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d3c7f518-23f0-4963-a01f-2c7fdf29dc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:5f:44:32:26:f8:3f:6b:8e:43:93:8d:c2: 32:97:4e:00:52:2e:b2:3b:15:0f:6d:5b:11:c3:82: 63:b2:9d:c5:83:04:ef:1a:2f:01:3f:23:60:c4:58: 57:0f:d6:30:23:12:9d:db:c6:5d:fe:76:ee:05:50: 73:f9:89:74:25:b2:ab:eb:f2:51:91:51:7d:de:94: f1:2d:92:3d:c4:f5:af:58:15:30:07:83:10:d1:cc: 2e:87:5a:f1:e4:a1:43:bb:54:c0:4b:5e:00:23:82: c3:b2:76:10:da:b9:8c:64:4c:98:8d:a9:4b:98:14: aa:71:ce:f9:77:6d:a1:88:5b:59:89:30:d8:7c:3b: 13:99:52:f4:7b:b8:b9:c0:e0:6a:e4:f2:d3:85:a9: 80:88:b7:58:a5:4b:82:4e:94:8c:9a:73:8d:87:1b: 60:d9:45:a4:08:f1:1e:f1:6d:7a:52:45:7c:d6:5c: af:28:09:84:1e:36:f9:90:28:c1:1e:a9:f3:61:41: 2f:a9:2a:c1:73:9c:64:6b:21:a6:6e:30:24:f9:f8: 11:2d:85:75:7c:65:0c:55:c9:1b:c4:ba:59:cd:e5: c9:d6:26:f7:49:8b:29:c7:1c:7d:38:40:8d:49:ea: ba:b5:5a:61:f6:80:cf:38:35:b7:32:e4:57:c8:b8: f6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:66:37:EA:D6:76:C6:8B:58:85:44:A0:DA:A5:1B:C7:61:74:85:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35f4850a-c412-398f-b674-8845c22ca2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.215.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c0:58:9e:37:b9:aa:d0:99:13:85:39:16:82:c3:71:a6:03: 5a:2c:64:a9:19:43:f0:40:e0:2e:76:14:de:65:e0:5f:4a:f6: ad:24:48:6e:74:54:15:94:40:13:ff:da:cc:b5:8f:8c:e2:38: 0e:11:fa:6f:a7:67:36:32:a7:da:3a:49:47:0d:88:b0:6f:c1: 57:a6:20:7e:b9:b8:e1:5a:39:09:f0:5e:a8:e7:87:81:18:bc: 88:b9:c2:35:19:0f:33:2f:fd:d4:47:32:9a:f1:77:f4:b9:5d: ea:7e:fb:16:5a:48:6a:c3:16:bc:61:b1:6e:3b:61:5a:3e:63: 28:06:14:9a:33:29:3f:6b:a6:49:31:28:51:37:1f:d3:cf:68: 7f:ec:eb:3b:99:0c:12:22:e3:e7:f0:ea:4c:4b:2e:83:e6:65: c6:5b:90:a5:b5:1c:ab:4e:48:7a:be:7d:a2:c4:55:37:d2:e2: 05:59:f2:1a:47:bf:90:9a:59:ca:ba:a9:93:0f:78:1e:ff:0f: 78:c4:41:13:11:a0:1a:92:d4:f3:b0:e3:d4:c2:ef:0e:1c:fd: f7:18:16:02:44:17:50:be:f5:48:32:2f:c4:d1:99:7e:87:a2: 1c:3d:84:a3:45:59:13:01:2f:d6:90:29:c2:c3:6f:2d:6d:bb: 90:b9:0f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9Kg6FVuIMJwtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDNjN2Y1MTgtMjNmMC00OTYzLWEwMWYtMmM3ZmRmMjlkYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBVfRDIm+D9rjkOTjcIyl04AUi6yOxUPbVsR w4Jjsp3FgwTvGi8BPyNgxFhXD9YwIxKd28Zd/nbuBVBz+Yl0JbKr6/JRkVF93pTx LZI9xPWvWBUwB4MQ0cwuh1rx5KFDu1TAS14AI4LDsnYQ2rmMZEyYjalLmBSqcc75 d22hiFtZiTDYfDsTmVL0e7i5wOBq5PLThamAiLdYpUuCTpSMmnONhxtg2UWkCPEe 8W16UkV81lyvKAmEHjb5kCjBHqnzYUEvqSrBc5xkayGmbjAk+fgRLYV1fGUMVckb xLpZzeXJ1ib3SYspxxx9OECNSeq6tVph9oDPODW3MuRXyLj2ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxmN+rWdsaLWIVEoNqlG8dhdIXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzVmNDg1MGEtYzQxMi0z OThmLWI2NzQtODg0NWMyMmNhMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrAWJ43uarQmROFORaCw3GmA1osZKkZQ/BA4C52FN5l4F9K9q0kSG50 VBWUQBP/2sy1j4ziOA4R+m+nZzYyp9o6SUcNiLBvwVemIH65uOFaOQnwXqjnh4EY vIi5wjUZDzMv/dRHMprxd/S5Xep++xZaSGrDFrxhsW47YVo+YygGFJozKT9rpkkx KFE3H9PPaH/s6zuZDBIi4+fw6kxLLoPmZcZbkKW1HKtOSHq+faLEVTfS4gVZ8hpH v5CaWcq6qZMPeB7/D3jEQRMRoBqS1POw49TC7w4c/fcYFgJEF1C+9UgyL8TRmX6H ohw9hKNFWRMBL9aQKcLDby1tu5C5D0A= -----END CERTIFICATE-----Generated at Mon Oct 20 02:48:16 2025 by rpki-client